Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
File:                     15426059-319f-322c-95e8-198a3ab84115.roa (raw, json)
Hash identifier:          c65pus2j7+up3Bk+unrdczOsfsbMYppo2ay597gN6do=
Subject key identifier:   35:0D:98:92:09:4C:17:C5:2B:14:74:6A:56:59:4E:32:D5:B4:D6:6E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584988CF2C8922AD5DC61E784B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     3949
IP address blocks:        131.103.21.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:2c:89:22:ad:5d:c6:1e:78:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=dafbb033-f757-401c-a369-aed9b86c957a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:36:04:84:4f:e1:c4:b0:6f:80:13:de:7a:e7:
                    c1:0e:d3:b4:f5:a7:df:bc:a1:fa:f4:fd:ee:3e:82:
                    3b:a2:bd:61:70:e8:8e:f9:c4:26:47:ee:76:2c:c2:
                    7c:50:9b:00:14:4c:76:68:1c:89:d4:c4:61:6e:85:
                    c8:b0:17:e1:3b:f5:65:50:d1:f9:1f:8c:c8:b1:25:
                    4d:0c:cd:81:61:b2:b0:13:17:2a:b4:ec:e6:d8:e4:
                    60:67:3b:1b:7a:c4:5a:26:77:4c:bc:ba:66:fa:9c:
                    da:6a:85:ea:f3:67:54:d0:f1:4e:05:aa:93:93:3b:
                    17:cf:30:45:9e:0d:4d:93:5a:b4:78:ba:3c:a5:88:
                    c3:2d:fe:91:6c:db:dc:3c:af:11:87:6a:aa:3d:52:
                    35:74:bd:05:bf:92:c5:55:28:c2:03:af:bb:83:ef:
                    24:1e:b2:9d:37:85:9e:22:1a:2a:b0:7e:fa:23:db:
                    f2:c3:7f:6a:fd:e9:83:95:11:fe:08:bb:b3:13:08:
                    75:1e:d6:bf:0e:1a:1e:69:94:20:f6:09:2e:7d:7a:
                    01:8d:6a:0e:54:c8:d3:b9:66:64:12:7c:49:b7:02:
                    3c:32:d1:69:35:75:55:89:a0:03:5d:53:ec:9b:63:
                    9e:d7:d0:ec:82:7b:c5:50:e3:03:07:30:5e:ea:8c:
                    c0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0D:98:92:09:4C:17:C5:2B:14:74:6A:56:59:4E:32:D5:B4:D6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.103.21.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:d3:a7:2f:7e:d5:b5:8b:24:3b:85:e1:09:ad:b5:27:41:
         30:8d:3e:2e:fd:e2:78:eb:94:0d:f9:31:8e:67:f9:48:c7:06:
         0c:dc:11:5b:42:26:4a:d2:2e:52:ef:ca:87:91:45:b0:51:63:
         72:d2:19:76:bb:a1:04:b1:b9:a5:e2:45:2c:9e:cd:79:25:1a:
         53:97:bd:3d:16:b9:fc:14:c9:1c:87:88:e8:97:96:97:6e:90:
         3e:af:54:bd:9b:78:d0:d0:13:9b:93:f3:a9:80:55:83:b8:fe:
         99:74:df:4f:76:c3:79:dd:3d:18:58:69:08:82:8e:ed:72:d2:
         3a:b6:ab:ec:11:35:f2:d1:5f:df:82:3c:02:69:b4:88:23:48:
         a0:f6:20:b7:0b:7a:8a:c0:68:02:fc:6d:7c:64:71:a8:21:0f:
         4c:8d:22:a9:5a:7f:76:f8:60:60:5c:9d:4a:e4:1d:be:0e:e6:
         f5:02:c5:8a:c2:e1:a3:6b:80:ac:cb:e6:42:ae:cc:16:40:68:
         ec:9f:69:2c:b5:99:55:59:31:d5:6a:4f:51:81:83:b6:1d:5a:
         d9:4e:dd:a7:51:7c:9d:fd:75:78:38:f4:a5:85:69:ee:98:49:
         f0:d9:d4:09:ab:51:b6:7f:00:e5:99:8d:e4:13:c5:13:b6:3e:
         97:2e:d0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:07 2025 by rpki-client