Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa
File:                     2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa (raw, json)
Hash identifier:          IcTJiuWJP3vewyqqWwNHUOzNh8fREimF8IuXhMEnOGk=
Subject key identifier:   BE:F6:E9:EB:31:BC:99:06:42:FA:D5:C4:2D:B2:57:94:24:F7:D6:09
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285849D42FAC3A9B3C2D1795DF0C00
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        144.81.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ac:3a:9b:3c:2d:17:95:df:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f2b528a3-f4c0-411f-ba52-cd6a0757d73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:7d:86:68:ca:15:02:65:a0:a7:79:72:3a:
                    6b:f4:dd:57:da:85:45:f4:27:04:1d:c3:f3:2d:58:
                    b0:a2:c7:9d:62:d1:48:42:2e:5e:b4:11:62:68:fd:
                    1c:ac:96:e7:75:db:32:1f:84:d8:f9:a4:5c:cc:c3:
                    a2:18:28:cf:cf:21:1d:9b:14:18:12:1b:61:54:09:
                    67:dd:52:93:a9:a7:0f:69:9a:98:26:4b:bc:60:36:
                    7e:52:7c:32:c8:9b:86:a2:66:3a:c5:9b:96:2d:95:
                    0f:4b:d5:7a:69:04:64:67:b6:ce:63:b0:66:d6:0d:
                    47:dc:fd:88:22:6f:8f:de:68:7e:fc:43:1a:6d:cb:
                    86:33:96:01:d1:ad:65:7f:55:9d:cd:00:67:b2:da:
                    75:d5:cc:3f:76:37:73:38:b0:c6:f5:b5:91:73:f2:
                    40:32:0e:7e:95:69:f0:67:03:50:bd:b0:02:4d:ed:
                    11:68:35:4f:5e:5e:b3:69:4a:54:c1:68:fa:a0:41:
                    c5:80:83:e4:b3:90:2c:97:06:30:f1:65:eb:38:c2:
                    e6:b4:5a:7a:25:23:ef:72:00:16:18:d3:99:0d:2b:
                    9d:1d:d9:45:48:1c:6d:65:45:37:e2:bd:fe:ca:36:
                    b8:aa:9b:73:11:b1:b7:eb:9d:c3:3c:c9:72:db:31:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F6:E9:EB:31:BC:99:06:42:FA:D5:C4:2D:B2:57:94:24:F7:D6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/2646b69b-e185-3dac-9bf7-cb56f6cbed8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:b7:57:6e:b2:cf:86:11:00:ae:81:56:4d:2a:9f:e7:76:
         ac:77:14:ce:da:a7:a0:b4:d5:a4:f1:e7:ba:10:06:08:86:1f:
         f6:dc:65:5f:9e:f6:18:5a:bb:5f:05:62:ea:e4:5f:c9:53:a3:
         dd:a6:c6:64:42:b8:5e:ac:c5:3e:89:e6:ea:f8:51:b7:36:d2:
         f1:1a:09:d0:0b:d8:67:f7:b1:db:e9:d2:20:e2:15:f6:c8:6e:
         7c:f3:8a:25:a8:60:3e:f5:c2:dc:cb:29:55:53:91:99:01:58:
         46:f6:60:51:a7:e1:cc:37:3e:0b:a8:ed:9b:ca:ed:27:2b:00:
         9a:d0:3a:9b:f2:cd:2b:b3:32:de:14:0a:13:98:a5:b2:37:41:
         6f:7e:04:86:e3:43:26:b1:fd:7c:1f:05:3c:96:7c:8d:30:fe:
         98:19:eb:12:11:c5:6f:5d:ef:63:d2:aa:72:74:23:8c:cc:36:
         9c:3b:5d:80:43:bc:7b:61:d3:cc:37:50:f5:58:9c:cf:4e:61:
         35:5f:c8:89:ac:8d:3c:d1:f5:eb:96:a2:95:74:81:45:50:e2:
         74:ef:54:8a:5b:12:6e:90:36:f6:2b:ee:c5:e6:5a:74:26:31:
         21:c8:d7:ce:8f:e3:e3:15:39:cc:38:3e:18:d2:54:d6:91:a8:
         1e:13:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:59 2025 by rpki-client