Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f3181bda-5015-31c4-9484-bbefdaf0a97d.roa
File:                     f3181bda-5015-31c4-9484-bbefdaf0a97d.roa (raw, json)
Hash identifier:          mtAFJM/r3zCntDS8abqzMIvuqYZ0/2CwJ9whApWbISI=
Subject key identifier:   19:6B:4B:DB:EE:87:2B:DB:AB:AC:25:CB:9A:C9:F8:E1:4E:64:A9:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA98D975922E5348FA5780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f3181bda-5015-31c4-9484-bbefdaf0a97d.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        184.151.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:98:d9:75:92:2e:53:48:fa:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bc126281-fd67-44ad-b690-0305a7cb47ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:2b:14:5c:93:0b:fa:d4:84:25:e3:9d:28:
                    99:3d:22:c8:46:e2:f4:3d:94:20:f8:98:fd:69:f7:
                    70:55:a2:69:d6:00:07:48:82:5a:f1:f3:95:c0:38:
                    0a:7b:7d:fd:12:c4:9c:ab:11:bc:8a:d9:7c:99:37:
                    f2:00:79:ef:16:3c:db:83:ca:62:d9:f7:f9:bc:0c:
                    f9:ee:52:98:79:71:31:c5:28:a8:82:a8:a6:01:b9:
                    9c:37:1d:c1:97:54:cd:ee:ca:25:58:de:ce:b3:8f:
                    00:73:ee:4a:bd:2c:54:01:1e:e0:8d:cb:31:4e:5b:
                    11:4f:d4:da:2e:51:57:6a:57:dd:62:44:97:5e:3f:
                    8d:f3:9e:f2:99:62:c6:3f:bc:6e:05:22:40:7c:15:
                    c7:35:49:d8:bc:e8:12:2d:57:6e:42:d6:86:e1:86:
                    1a:81:8a:f1:88:e7:88:1b:78:36:7f:ff:3a:b5:06:
                    3e:9e:68:4f:23:82:7e:78:ea:71:30:08:c9:00:10:
                    0d:f8:0d:e9:08:10:57:30:78:13:b9:8a:af:f0:e3:
                    a6:c2:d4:be:a1:4f:96:f7:91:f3:1e:1f:7f:a1:78:
                    20:c4:9f:a0:b2:f7:71:54:de:05:d0:88:e1:fa:62:
                    66:e6:ce:29:11:a1:1f:60:53:db:4b:bf:9e:60:50:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:4B:DB:EE:87:2B:DB:AB:AC:25:CB:9A:C9:F8:E1:4E:64:A9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f3181bda-5015-31c4-9484-bbefdaf0a97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:ca:19:ae:e7:d9:e6:15:ce:c4:94:28:82:3b:b6:18:48:
         0d:c7:32:e3:f1:35:5b:2b:0c:26:1b:07:71:83:4c:da:bf:44:
         29:48:fe:83:39:74:c1:76:22:69:d5:57:54:f0:c9:ea:72:99:
         dc:3a:02:a9:8b:50:0e:7a:3c:d1:15:e7:50:42:25:64:27:72:
         e1:ae:62:ca:e8:72:d6:64:06:b4:dc:91:08:69:f2:f6:6e:ad:
         56:fa:d3:da:cd:77:b5:fe:e1:f4:1a:c2:0e:cf:f6:ee:10:3f:
         12:e3:fa:23:d8:b6:36:8b:a6:d3:e8:c8:71:7f:8c:40:2e:d3:
         85:0f:c1:28:37:95:a9:32:d9:89:d3:68:19:19:89:43:00:76:
         e3:4c:ed:83:8d:8d:fc:7f:72:67:59:72:9f:81:a2:90:28:0c:
         f7:aa:37:a3:82:1e:67:a1:c9:8d:6a:79:31:ca:73:c9:b0:a7:
         db:38:44:65:ee:01:52:4a:3e:d9:9c:69:a9:a2:2b:51:70:f7:
         4b:16:7b:99:4c:a1:89:ed:d9:ec:b0:9b:4b:ee:16:a7:ae:1e:
         20:85:51:9d:ef:09:b2:db:9d:b3:e9:92:2f:5f:58:b5:1f:4d:
         53:fc:fc:8b:69:68:08:c7:74:96:80:e1:f8:41:70:ad:a2:ab:
         76:55:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:16 2025 by rpki-client