Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f6483fe5-3e11-3a5a-b801-d7ae7e0e547f.roa
File:                     f6483fe5-3e11-3a5a-b801-d7ae7e0e547f.roa (raw, json)
Hash identifier:          ZpOUADI9JQj4Acpx2Pe0gX2bAv+NSIpfVFcuDsO+v2k=
Subject key identifier:   D4:9C:96:59:AC:EC:E2:17:B7:E4:32:73:B1:91:6B:C0:E4:2E:FF:3D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B7DECD210A62F312CC1087C80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f6483fe5-3e11-3a5a-b801-d7ae7e0e547f.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     54113
IP address blocks:        157.52.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:d2:10:a6:2f:31:2c:c1:08:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=833355a9-1a51-423a-9a5e-424b7db0f050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:4f:a2:e9:9a:7f:10:e8:ef:a0:c0:81:d0:
                    88:96:d2:6b:b3:f7:c7:6b:ce:50:9c:0d:aa:95:af:
                    95:8c:c2:52:58:60:f5:40:a3:94:78:f7:63:0c:9a:
                    28:e4:87:34:2a:fd:59:83:2a:55:c4:74:15:61:23:
                    8b:a8:1f:fe:29:8d:ac:0b:3b:ec:fc:b7:e3:6a:cb:
                    af:f7:9b:5a:f0:f1:54:9f:c8:5a:44:6d:46:57:30:
                    7c:26:49:cc:d1:ca:7e:16:eb:37:8b:e6:0c:eb:e5:
                    4e:7d:1b:25:29:30:6e:17:81:74:e6:01:8c:10:e2:
                    fb:8f:78:48:6c:eb:3e:31:a2:5e:69:8e:36:17:d6:
                    9c:60:4d:73:f1:bd:90:6f:b7:9d:f2:eb:f5:66:08:
                    29:a9:6e:29:a8:61:1c:68:a8:f8:f8:3d:3d:49:da:
                    f2:77:9f:cf:41:90:02:20:82:ee:6d:8d:86:48:94:
                    35:22:64:71:af:08:25:f1:0e:4b:b7:83:8b:63:c4:
                    1f:84:db:1d:5a:a2:64:86:f8:c2:b5:18:2a:cf:ab:
                    59:bc:46:05:65:86:69:32:6e:aa:a8:90:49:b3:ed:
                    c6:cf:3d:7e:eb:4d:18:ae:7c:2f:0f:0b:ee:29:bb:
                    65:ae:6d:e7:ed:59:70:b0:cf:23:da:8e:bc:2b:66:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:96:59:AC:EC:E2:17:B7:E4:32:73:B1:91:6B:C0:E4:2E:FF:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f6483fe5-3e11-3a5a-b801-d7ae7e0e547f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:14:99:6d:b0:ad:73:12:f3:e4:06:bc:3a:dd:b0:f5:1c:
         da:94:a6:28:da:cd:f8:45:2a:a9:46:2a:f8:d2:a5:67:35:18:
         bb:d0:56:ef:e0:b8:f8:04:49:88:7c:c8:c0:33:4e:c1:fb:60:
         a8:38:fa:22:b2:36:67:42:38:0e:0a:15:c9:4e:1d:75:59:9d:
         fa:a1:8a:2c:d1:72:12:b2:a5:53:0e:cd:a7:6e:17:d0:03:d3:
         78:b3:bc:10:94:24:f4:f3:31:c2:b4:8e:0a:c6:47:56:9b:3b:
         dd:f1:45:29:db:3f:3c:af:34:53:b1:e1:b6:88:6d:20:d5:c8:
         71:d0:60:36:80:b0:cb:b1:7c:d8:27:51:96:66:dc:6d:7a:03:
         41:5a:bd:18:4d:c7:94:02:48:d6:11:a5:80:2f:46:9e:9b:30:
         55:69:34:75:fe:1b:6c:f4:a8:9c:02:c3:b8:35:ac:1c:46:b4:
         bc:dc:4d:79:63:e0:b0:1a:86:d9:08:3a:cd:11:58:f9:f9:75:
         6d:0a:b9:e0:b7:39:3b:48:d4:f9:64:99:95:e3:f0:50:37:3f:
         e8:4b:ef:62:8f:4b:dc:c8:c3:c8:57:49:ef:3e:77:cd:29:1e:
         20:0d:75:35:e9:92:89:7a:76:fa:f0:2c:5d:31:5b:0a:65:82:
         3a:ba:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:25 2025 by rpki-client