Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
File:                     6cfc4b7f-42d4-362c-98f2-32caa153320a.roa (raw, json)
Hash identifier:          u+WoR9EH2ATaDp9JxCv9tUKa+BMbI73EeyP6M821tv4=
Subject key identifier:   A1:99:DB:0A:98:D6:7A:07:DF:50:F4:C1:04:54:23:9B:C8:9F:8A:C7
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584AA160CEBD556E61AB3B89E380
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     21538
IP address blocks:        192.131.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:ce:bd:55:6e:61:ab:3b:89:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=609ec4b5-6d27-45b0-b408-28f333b43564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:91:59:4e:be:b2:8b:6d:66:e6:46:8b:da:
                    e3:4f:ca:31:ba:aa:57:e3:44:7f:83:71:fe:01:0f:
                    37:f7:fe:7e:dc:7f:cd:bb:84:24:23:37:4c:6e:2b:
                    41:c3:39:bd:83:f7:70:d3:e0:2b:81:fb:23:e3:5a:
                    08:82:d2:8c:ca:d9:f5:21:0f:10:7b:38:8e:76:5a:
                    b8:cf:4d:e4:41:dc:6f:7f:d8:85:8f:b7:ca:91:c8:
                    69:d4:94:64:ff:9a:39:b7:81:6c:5f:88:aa:51:d7:
                    f9:76:e5:1c:a0:fb:7e:97:a8:41:a4:18:8b:dd:cb:
                    de:db:46:97:8f:27:a4:57:80:62:92:e7:59:57:83:
                    bb:54:9a:c0:f0:48:0e:93:12:55:a9:ac:8c:18:f1:
                    eb:d4:48:ef:d5:f9:00:d7:ea:47:1c:3a:7e:f4:d6:
                    96:f8:98:0d:85:fc:49:fc:7c:48:31:f6:01:76:6b:
                    46:60:4b:7b:32:47:2d:40:2c:66:dc:60:6b:be:c2:
                    1d:6b:13:ab:35:fb:2b:07:f3:ad:25:53:c2:70:14:
                    77:c8:43:40:c5:58:4f:06:c4:b9:bb:70:35:86:cc:
                    07:e4:05:97:a2:c1:05:8c:0a:ec:1b:02:0e:ac:d2:
                    4c:cb:65:bc:46:27:9b:5c:34:26:85:bd:87:1e:93:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:99:DB:0A:98:D6:7A:07:DF:50:F4:C1:04:54:23:9B:C8:9F:8A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:d5:43:c5:ea:b7:43:59:50:d4:83:e9:40:2a:fa:53:d0:ee:
         2a:91:4c:1f:e4:c5:7b:7b:07:ec:81:64:43:e9:dc:95:e4:86:
         a2:e0:5e:10:fa:51:58:a9:f4:17:ec:2b:47:98:8f:0a:37:45:
         8f:b9:78:8b:23:9e:e9:a0:dc:01:40:04:34:72:7c:03:9c:38:
         c7:59:d8:a0:80:34:dd:10:41:3a:8c:6a:97:56:16:19:91:ad:
         fb:96:fe:22:36:4e:56:71:ca:f6:28:b7:cb:ab:22:f9:e5:dc:
         48:a1:7e:ab:55:5b:d4:a9:fd:6c:60:46:70:75:f9:f7:81:10:
         61:d4:5b:fa:98:ae:ae:00:18:f8:07:20:14:66:1f:64:73:82:
         55:c7:71:0a:a6:79:9c:4f:49:45:98:00:a7:55:b9:c8:fa:dd:
         92:8f:e4:ee:f1:b0:18:64:b7:fd:c3:7c:0a:0b:4b:21:0c:0c:
         49:2b:77:20:8d:df:f1:b1:6b:83:80:93:07:21:d9:6a:8e:c4:
         91:89:ba:6e:c5:fd:5f:53:6b:61:33:f6:ac:02:ca:f5:98:22:
         24:b5:cc:bc:3d:2c:1b:79:ec:82:e5:56:15:49:fe:8e:87:9a:
         52:a1:00:1d:09:95:80:91:2b:75:fb:df:a9:31:23:71:71:3f:
         1f:0a:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:58 2025 by rpki-client