Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/0b277544-0016-36e0-9c62-88655e1f10a8.roa
File:                     0b277544-0016-36e0-9c62-88655e1f10a8.roa (raw, json)
Hash identifier:          4gVo4r3ItE7DIV8qVACnHlCxfpUgJ0lcTwuli9XQmRg=
Subject key identifier:   3B:A4:3F:48:6E:AF:E7:4E:56:90:EA:6F:8B:9D:7F:E4:DF:59:FF:05
Certificate issuer:       /CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
Certificate serial:       010D0C9F43285849A61F4481B2EB852DCA262180
Authority key identifier: F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/0b277544-0016-36e0-9c62-88655e1f10a8.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     36131
IP address blocks:        83.229.97.0/24 maxlen: 24
                          83.229.98.0/24 maxlen: 24
                          83.229.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:44:81:b2:eb:85:2d:ca:26:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=c3d7285a-3df0-4b91-95b9-3c8b5163d8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:df:03:c2:21:f5:e5:c0:9b:56:de:d4:ff:
                    50:23:85:60:79:98:a8:73:3f:ea:bf:89:45:96:8f:
                    2d:95:e6:ba:ce:71:d4:d2:2d:60:8d:b1:b0:52:15:
                    8b:a6:e4:6b:3a:a8:b8:a8:8e:b6:7a:ac:c6:ab:1b:
                    c8:eb:94:47:4c:19:25:fc:2a:e9:9f:d6:c2:f8:2a:
                    53:e5:ba:45:2c:13:b3:f4:6e:c0:ee:5a:54:e6:e2:
                    1a:3f:9d:72:16:21:62:56:80:aa:af:a8:04:94:a9:
                    c8:ac:1e:df:59:64:7c:a4:42:ee:bd:fa:0d:93:db:
                    62:36:3f:8d:70:d1:ed:93:5f:08:21:f0:9a:55:9e:
                    b8:f5:62:13:50:3e:4d:cc:ef:69:ac:9f:fd:1a:c2:
                    e7:c8:28:fb:1e:58:1a:74:3a:8f:db:27:82:6e:a9:
                    d6:d3:4f:d5:92:31:ff:14:39:66:f1:9e:a4:09:da:
                    5f:86:e3:2f:2c:57:ab:8e:58:5b:9a:5f:df:8c:fa:
                    5e:6f:9d:55:85:88:d6:84:85:23:6b:8c:64:19:5d:
                    fc:2b:7e:83:cc:3f:cd:09:78:75:61:91:e9:a8:7b:
                    1b:75:55:7d:06:a2:5e:cb:ee:cd:bb:28:c3:bb:d0:
                    d1:6c:d9:d8:17:79:5a:53:80:48:eb:18:e8:b6:e6:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A4:3F:48:6E:AF:E7:4E:56:90:EA:6F:8B:9D:7F:E4:DF:59:FF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/0b277544-0016-36e0-9c62-88655e1f10a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.crl

            X509v3 Authority Key Identifier:
                keyid:F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.97.0-83.229.99.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:63:ce:76:c2:37:8f:e9:27:08:c3:a8:aa:51:09:9a:ca:
         4c:c5:99:d3:b9:04:44:39:76:41:7e:1e:bc:64:b4:0b:be:07:
         22:2c:d5:0a:80:19:b0:8b:8f:4d:7f:da:cc:48:e5:4a:24:8f:
         8f:78:6d:b6:86:0b:22:cb:a6:dc:d9:e1:b5:95:a4:3c:cf:df:
         62:f9:69:1e:c3:ce:d3:20:b9:b4:d2:4b:9e:f5:78:c6:6c:d1:
         aa:0e:a0:ba:b0:23:6b:3a:87:7a:8d:2d:e4:a7:02:f0:5d:1e:
         b6:ed:3c:61:23:a8:40:06:60:21:b8:8c:69:31:a1:40:45:0b:
         6a:84:af:bc:43:18:4e:46:bb:23:c3:ae:f0:8e:33:3b:aa:e3:
         0d:25:fa:31:cc:58:80:8a:68:6a:e9:6d:56:7a:55:0d:52:10:
         07:9c:97:6d:a4:6d:88:60:87:b0:14:a1:31:b3:3d:bf:1a:93:
         64:b0:39:30:98:c8:e4:e0:ba:e1:5b:13:a2:6d:30:d0:e5:8d:
         5b:67:04:c0:15:9b:7d:7d:63:0b:1c:6d:32:1d:b6:e6:f3:75:
         b6:8a:c5:0e:92:8f:73:39:a4:e0:91:9e:16:30:96:f3:55:6f:
         cf:cf:81:47:0c:41:08:f2:4e:d4:8c:1a:10:ae:44:c5:39:4c:
         3b:47:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:47:51 2025 by rpki-client