Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/b471ac2d-2cf5-32e8-9aad-c825675a41d7.roa
File:                     b471ac2d-2cf5-32e8-9aad-c825675a41d7.roa (raw, json)
Hash identifier:          mYXfqIhnrMVGVYZ5qVZQkh7idRWaBUwhHbGvGzyyLTA=
Subject key identifier:   F0:6F:B9:B8:D7:8F:F7:25:4A:55:95:F7:67:04:A3:F4:D5:6E:FB:40
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F43285849C4D4B4F957B50C7C666D8080
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/b471ac2d-2cf5-32e8-9aad-c825675a41d7.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        136.184.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b4:f9:57:b5:0c:7c:66:6d:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=64a28fe2-5906-414e-82cb-56d0252e6932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:7d:dd:89:ac:88:1a:93:b9:99:35:a9:26:
                    34:4c:27:db:fe:11:0e:ef:d3:fd:45:0b:93:72:2f:
                    d9:a8:28:e1:34:b0:67:61:75:bb:87:ea:21:d2:4f:
                    9e:b6:62:9f:7a:b8:a7:43:16:27:cb:61:5c:ae:13:
                    bd:39:92:31:82:bc:9c:dc:e1:46:d0:3e:52:ae:19:
                    c1:40:f1:1e:ae:53:7e:30:1d:8e:c5:6a:d5:49:7d:
                    88:5f:43:d8:bd:49:4f:a4:e0:b8:cf:6d:c5:46:59:
                    07:03:ec:43:94:63:64:1d:41:27:85:5a:95:5a:e4:
                    4a:22:de:2c:3f:21:fe:d6:6a:10:4a:0a:eb:68:46:
                    c9:dd:5d:a2:ad:af:cd:f4:af:ae:59:04:cb:74:bf:
                    99:4f:04:10:13:8f:71:c5:f8:5b:77:9e:01:d9:5e:
                    cc:b7:17:e3:d3:e2:7c:3a:eb:1a:31:cb:22:2b:7f:
                    8d:26:85:24:c5:14:71:7a:b0:09:37:8e:76:fb:28:
                    d4:50:ac:70:f1:6c:b6:6c:4a:37:a9:2b:fe:c6:29:
                    7f:54:61:c3:f2:c3:77:42:b6:4e:57:1a:be:5e:71:
                    06:9f:94:64:51:47:f3:ce:a3:5a:87:85:f8:a3:15:
                    00:bc:36:e4:13:8a:d5:03:d7:dd:24:0e:98:89:fb:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:B9:B8:D7:8F:F7:25:4A:55:95:F7:67:04:A3:F4:D5:6E:FB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/b471ac2d-2cf5-32e8-9aad-c825675a41d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:0e:92:b5:9e:16:10:f5:73:e9:20:d7:c7:92:6c:92:8f:
         2d:58:1a:07:32:9b:65:44:ae:d5:a8:1e:22:7c:d4:d0:ac:0f:
         e9:79:5a:fe:c5:61:3a:fe:95:ae:3d:a1:8e:8e:a7:4e:b8:76:
         e5:51:de:c4:21:78:2c:0a:bb:45:da:4d:53:b9:0e:f3:3e:84:
         e7:94:1a:90:ef:fa:a9:43:ad:be:55:e6:da:48:3a:f7:7d:e6:
         58:80:79:e3:ad:19:86:1d:69:d6:95:34:0b:d8:cb:4c:4b:16:
         60:f5:06:56:47:bd:24:57:77:dc:b6:60:e0:17:66:4b:1e:c6:
         2f:60:9d:9a:ca:a6:e9:9b:2d:69:31:48:71:36:6f:4a:1b:47:
         b6:8f:12:cc:bc:e2:e1:dc:d3:7b:33:03:15:1d:2d:e7:44:ff:
         62:97:21:e4:6c:99:3e:eb:15:0b:d9:84:8a:7c:11:6a:21:4f:
         21:58:2f:81:3f:a0:71:af:ed:cd:d2:0c:f0:36:ff:71:f7:5f:
         16:03:c5:59:b4:ba:7d:19:b6:5b:32:04:ad:83:30:d6:32:8d:
         d2:90:b2:a5:ec:2f:8c:7b:dc:b4:58:05:69:b2:1f:19:49:4f:
         20:d8:44:17:0f:05:c0:cf:23:74:f2:11:20:33:a2:ae:d3:4a:
         2a:2f:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:18:21 2025 by rpki-client