Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa
File:                     5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa (raw, json)
Hash identifier:          XhlJygpOXviRedLN8Od2cV0kes6tEdQ5V+AbXGilivM=
Subject key identifier:   8F:F1:CE:32:56:AE:8A:4A:70:AE:DA:B6:66:F1:27:6D:ED:AF:34:0A
Certificate issuer:       /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial:       010D0C9F43285849754457F0D810B64C95F10940
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        131.226.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:57:f0:d8:10:b6:4c:95:f1:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=5b8ecc7a-fe11-431d-b1d2-1b53242eb4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:a1:46:ad:a9:f0:9d:e8:cc:22:77:3e:7a:
                    c0:fd:42:91:8b:7e:36:9b:75:bb:3a:2d:83:ee:79:
                    e7:fa:64:df:db:a7:e0:8b:7f:ae:97:6f:55:f2:64:
                    ac:43:31:04:96:b8:9b:70:d7:15:f5:94:60:b6:d4:
                    7f:21:39:6c:a7:e6:39:7a:a4:ac:96:2a:cf:ff:8a:
                    29:6b:51:7f:15:fe:4e:b4:97:06:bd:91:51:a3:f8:
                    63:1e:2b:a4:33:e8:2c:0d:78:2f:8b:db:25:41:7d:
                    42:8a:13:89:73:56:95:03:a4:d1:19:97:1a:4a:0b:
                    ee:73:c0:92:ec:68:84:ba:9f:74:8e:b6:5f:08:00:
                    e5:e3:b8:50:68:ea:08:33:06:8d:a2:79:71:ff:4e:
                    e4:ab:f2:6f:d9:6c:1c:da:a2:69:04:b8:2b:c6:96:
                    63:ea:ff:26:3e:e4:59:3a:5d:94:53:61:51:e6:e0:
                    97:5b:b3:3b:5e:cf:92:31:78:36:0c:e6:87:24:01:
                    51:10:39:9f:c9:00:f8:a2:41:b5:75:1e:b7:0c:cd:
                    bd:7d:bc:eb:6e:c2:12:70:85:a2:2f:4d:de:1c:30:
                    0e:65:f8:84:2c:cc:6a:d3:e4:67:44:f3:bf:a4:7d:
                    a9:4f:61:26:21:ef:70:55:f1:d7:87:51:2f:cc:bc:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F1:CE:32:56:AE:8A:4A:70:AE:DA:B6:66:F1:27:6D:ED:AF:34:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/5a7e3243-e10e-39bc-b5c4-a63afb63b901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl

            X509v3 Authority Key Identifier:
                keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:29:ee:97:41:84:2f:15:eb:b7:67:9d:aa:14:62:62:b7:e5:
         24:8d:88:af:54:29:ee:71:d9:a0:48:72:a8:05:8b:90:62:e7:
         99:fe:8f:80:fd:ca:4b:8c:9b:26:68:c6:33:41:03:16:d1:39:
         d8:0f:97:d7:5d:c8:1f:2b:e2:bd:99:03:f1:31:f3:f3:f0:98:
         1f:c5:e0:8a:fb:b4:88:74:e8:67:f9:ae:57:3d:3b:3d:8c:98:
         88:c9:41:58:0b:79:52:16:08:78:0c:d9:5a:17:3a:56:c1:38:
         2d:2c:94:64:70:28:19:af:df:c4:4c:7e:24:3f:79:11:93:4d:
         c8:9d:58:eb:db:95:9e:71:9c:e7:83:08:dc:f1:58:f2:a9:86:
         7c:b0:22:0b:b7:dd:fb:9c:7d:de:11:88:18:bf:9c:41:ad:89:
         96:f8:61:86:fb:56:ae:9a:e6:b6:a7:36:f4:cd:02:61:f7:c0:
         d5:4b:2e:0f:d0:b3:a7:76:24:82:48:a5:8c:35:0c:20:c6:ed:
         91:e4:17:ae:48:fa:fc:a8:56:68:9a:c2:9a:27:9a:fa:8c:9c:
         64:63:26:59:64:19:b3:8f:e8:4b:8d:27:c9:84:b8:32:bd:7b:
         c4:62:9c:2b:b8:b9:8e:55:29:f1:fb:e6:11:c8:f1:f8:e9:19:
         ac:de:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:29:56 2025 by rpki-client