Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
File:                     eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa (raw, json)
Hash identifier:          9UXtrry7kxjQvYLtu1ULHYBqwvmZRvpIvB0CLqk8k0Y=
Subject key identifier:   44:60:4E:54:24:8F:5F:E3:E2:80:86:A1:89:90:96:B6:0B:3E:0F:F7
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584AAB264DA7DA02600E24FA9610
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        148.163.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4d:a7:da:02:60:0e:24:fa:96:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=4597c38b-5a1d-4e84-bc52-88e791e508c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:fd:74:61:fe:22:81:ab:16:c4:27:ad:12:
                    93:27:d9:40:82:ca:cc:5d:79:d6:6a:32:30:84:ef:
                    3b:e9:57:b1:fc:a2:db:0d:8a:bc:df:78:5b:0d:bd:
                    4f:f1:0a:af:7c:9c:d8:0d:c3:32:7c:10:67:37:f0:
                    69:ef:c1:74:58:c7:21:0e:44:83:a7:80:0d:21:11:
                    63:71:0b:23:db:63:3a:38:2b:65:e1:ae:f8:29:31:
                    5c:f3:ec:a3:24:eb:b6:1b:46:8f:f4:52:79:19:3c:
                    a3:f7:99:57:d0:a2:02:9d:fd:5b:ec:f7:c1:3c:8c:
                    89:10:e9:0d:e8:fa:aa:36:25:e5:75:86:68:55:7b:
                    8a:72:51:58:8e:b3:5c:42:3c:ef:60:80:f7:0c:a2:
                    fa:93:f5:a0:73:b9:8c:97:3f:45:85:76:81:dc:b1:
                    0d:34:1a:38:63:ef:51:85:3c:b4:10:ac:bd:3e:cc:
                    6a:69:9c:ee:a4:d2:5f:f4:df:10:dd:a7:69:2a:98:
                    5a:3e:ee:06:16:fe:d2:2b:17:05:f6:c6:2c:41:73:
                    0a:56:31:e5:56:87:ce:1c:35:43:3b:af:ae:34:79:
                    36:13:b9:48:0a:42:8d:a9:f5:5c:52:9b:f4:49:c8:
                    13:a6:a9:80:3f:95:c0:c7:05:70:3d:04:ae:08:72:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:4E:54:24:8F:5F:E3:E2:80:86:A1:89:90:96:B6:0B:3E:0F:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/eb2fedd3-579b-3571-878b-49b3d0d7ade3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:68:5b:60:d0:8f:7a:98:80:f4:dc:a8:9d:13:81:8e:6c:
         3e:df:6b:2a:f9:5f:4a:99:79:77:9b:a2:14:a6:34:bf:f9:b1:
         b4:ed:17:d3:83:37:2d:9c:33:5b:1d:40:79:66:2f:d5:a8:0f:
         91:98:fd:da:f0:b7:d9:fb:2a:c1:ba:5d:e0:4e:37:1b:29:46:
         7d:a2:02:dd:eb:c5:da:9f:f3:bf:16:37:f8:c4:74:3e:34:dd:
         43:ed:e3:67:9d:5f:eb:c8:ef:76:21:40:ea:33:ab:46:3c:96:
         a6:a7:f5:1c:2f:8f:3a:e8:ed:db:8f:16:60:dc:5d:ae:e6:f3:
         84:97:7b:ac:9f:38:f1:e5:d4:77:18:9d:ab:5e:26:ec:6b:20:
         2b:20:96:87:27:01:b5:e8:6d:b4:5d:75:69:be:6b:15:96:7f:
         3d:b2:dd:28:62:20:1f:24:37:83:dc:bb:98:a9:99:a9:39:e1:
         6a:35:c5:23:46:3a:6f:d7:87:87:12:d1:a5:31:22:ef:93:70:
         9d:b9:19:55:dd:16:98:2a:83:37:6b:22:f3:8a:42:03:41:39:
         f5:7e:19:32:22:ee:ef:57:54:70:13:7c:26:e3:58:bc:91:e6:
         ea:05:34:50:8f:3d:9f:87:27:8a:52:e7:1c:fe:a9:5d:f1:84:
         13:32:70:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:41 2025 by rpki-client