Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd8b6c7c-719d-33c1-ba12-4d3e76c29d29.roa
File:                     bd8b6c7c-719d-33c1-ba12-4d3e76c29d29.roa (raw, json)
Hash identifier:          LuPOtCZprYxDds2U6qwzq+qtEZs/Qc8XmHNFI517dqQ=
Subject key identifier:   31:31:0A:79:F5:DF:4E:A2:F0:B3:22:DE:5B:45:F1:9B:2E:58:FB:BB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285849D6FA50DFC46E375065A5E240
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd8b6c7c-719d-33c1-ba12-4d3e76c29d29.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        157.52.117.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:50:df:c4:6e:37:50:65:a5:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=17245ae4-a52c-46be-a4cf-963309d924a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:cf:0d:8d:36:72:1a:1f:88:51:21:1b:6c:
                    9d:0c:e5:5e:87:5f:5e:c4:c1:44:b1:a7:b6:fa:65:
                    13:e0:95:8a:e7:62:e6:24:de:f6:3f:fa:96:8f:c5:
                    68:12:eb:c0:af:55:00:23:60:4a:8b:51:fe:b1:26:
                    17:67:ca:73:14:28:5c:7f:dc:3a:33:cf:16:3c:5b:
                    71:15:6e:f3:d2:1c:41:8b:16:e4:b0:aa:1a:41:ea:
                    81:3a:57:c9:dd:31:e4:21:74:ca:8b:98:33:4d:2f:
                    09:50:f1:51:f9:37:68:1d:90:45:9d:f1:f1:0f:20:
                    5a:ce:df:bf:e8:d6:b9:47:07:5b:7a:92:06:71:15:
                    33:6b:42:2f:99:23:d7:fb:c2:12:7f:cc:33:68:b9:
                    fa:29:60:d5:2d:d8:a9:24:3a:ae:78:fc:91:ad:f1:
                    1b:09:df:57:47:f6:06:20:2c:58:fe:92:af:1d:7d:
                    24:11:b6:6c:93:1d:63:dc:13:b9:f2:d8:4d:f1:c1:
                    29:b8:47:21:43:ae:e7:9c:59:37:fa:c7:1f:3a:f8:
                    7c:1f:e6:74:af:73:da:81:3c:a9:94:45:79:63:94:
                    e3:a3:06:c2:cb:08:24:38:66:b9:5c:e1:a9:a2:c1:
                    13:61:09:13:53:56:1b:22:f5:9b:2b:09:5e:ca:af:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:31:0A:79:F5:DF:4E:A2:F0:B3:22:DE:5B:45:F1:9B:2E:58:FB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd8b6c7c-719d-33c1-ba12-4d3e76c29d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.117.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:8b:c6:f0:73:50:8b:dc:cc:5e:40:7b:04:7d:86:30:70:d8:
         40:5c:20:55:e5:63:33:36:2b:27:b9:c1:04:2a:1b:20:4b:ee:
         b8:59:cf:4c:f0:9b:36:b9:47:39:86:02:40:ea:e0:9f:29:ea:
         8f:c1:ee:40:83:92:ba:07:6a:42:49:a4:0e:b8:93:cc:83:43:
         16:4f:a1:90:cd:91:9d:b8:43:83:e8:26:cc:80:b9:49:38:ed:
         5f:3e:ba:4a:cd:6f:33:a4:dd:f2:99:1a:d4:f5:03:60:56:38:
         04:b3:c3:a0:55:cb:8d:25:b1:6c:bf:90:a1:0c:34:31:19:75:
         7d:b8:07:ba:e1:55:ae:4c:2b:78:7e:b7:40:12:ee:1b:89:bd:
         21:ee:60:d5:59:2e:f3:ac:75:d4:54:03:9d:94:28:91:e9:f4:
         08:22:bf:01:41:c3:c9:c1:61:a4:54:4d:36:f4:29:c9:af:ea:
         a0:25:30:18:01:59:d3:d3:58:59:d1:c4:8e:3f:9c:db:9c:a5:
         ae:86:ea:ed:38:ca:e5:3f:da:61:21:5d:aa:f9:0a:d5:00:c5:
         0e:3f:7b:47:5e:92:0b:7a:7b:3e:a6:48:9a:22:71:a7:ec:3f:
         28:90:b2:b1:73:0b:15:3b:56:f3:e0:f9:09:47:5d:44:da:79:
         0e:a8:5e:c0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnW+lDfxG43UGWl4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDUxMzEzMDEwMloXDTI1MDgxMTEzMDEwMlowLzEtMCsGA1UEAxMk
MTcyNDVhZTQtYTUyYy00NmJlLWE0Y2YtOTYzMzA5ZDkyNGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNbPDY02chofiFEhG2ydDOVeh19exMFEsae2
+mUT4JWK52LmJN72P/qWj8VoEuvAr1UAI2BKi1H+sSYXZ8pzFChcf9w6M88WPFtx
FW7z0hxBixbksKoaQeqBOlfJ3THkIXTKi5gzTS8JUPFR+TdoHZBFnfHxDyBazt+/
6Na5RwdbepIGcRUza0IvmSPX+8ISf8wzaLn6KWDVLdipJDquePyRrfEbCd9XR/YG
ICxY/pKvHX0kEbZskx1j3BO58thN8cEpuEchQ67nnFk3+scfOvh8H+Z0r3PagTyp
lEV5Y5TjowbCywgkOGa5XOGposETYQkTU1YbIvWbKwleyq/1KQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDExCnn1306i8LMi3ltF8ZsuWPu7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmQ4YjZjN2MtNzE5ZC0z
M2MxLWJhMTItNGQzZTc2YzI5ZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEnTR14DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDAi8bwc1CL3MxeQHsEfYYwcNhAXCBV5WMzNisnucEEKhsgS+64Wc9M
8Js2uUc5hgJA6uCfKeqPwe5Ag5K6B2pCSaQOuJPMg0MWT6GQzZGduEOD6CbMgLlJ
OO1fPrpKzW8zpN3ymRrU9QNgVjgEs8OgVcuNJbFsv5ChDDQxGXV9uAe64VWuTCt4
frdAEu4bib0h7mDVWS7zrHXUVAOdlCiR6fQIIr8BQcPJwWGkVE029CnJr+qgJTAY
AVnT01hZ0cSOP5zbnKWuhurtOMrlP9phIV2q+QrVAMUOP3tHXpILens+pkiaInGn
7D8okLKxcwsVO1bz4PkJR11E2nkOqF7A
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:16 2025 by rpki-client