Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa
File:                     d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa (raw, json)
Hash identifier:          p2yuuGKMLrkXL5Q6rBo0i2aWCsEpgKY7Hr31OQyD2mQ=
Subject key identifier:   43:E1:8A:C4:F6:CB:10:03:EA:78:E2:7C:6B:E8:75:84:60:1D:FD:C9
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285849D42FAC2C8931EC90E8A61480
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        144.81.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ac:2c:89:31:ec:90:e8:a6:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=cc45650f-ddce-440e-a4bf-2f7d69aa32cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7e:e5:39:71:66:35:e4:cd:96:3d:6b:43:1b:
                    96:08:1f:e2:8c:cd:c8:51:11:74:e4:82:0a:24:e9:
                    16:54:31:fe:fd:e4:32:e3:06:6e:31:af:49:4c:0f:
                    0e:3e:e8:6c:68:16:80:06:c7:a8:89:ce:d1:d3:b3:
                    f7:fb:34:0a:f3:ce:4b:df:73:4d:45:a9:e8:bf:85:
                    ad:d0:15:3c:e6:a8:87:50:bc:18:73:07:1f:d9:b7:
                    d8:92:1d:66:35:67:63:7a:d0:33:63:b9:65:16:6a:
                    2c:76:79:c0:3a:4f:72:a0:f2:a0:6f:2a:92:83:7a:
                    6c:24:26:b8:84:1b:fd:41:77:72:cb:21:47:52:cb:
                    1c:a1:8d:1e:bc:48:a9:20:49:d6:51:fa:b8:bb:45:
                    ea:72:f5:77:44:06:9d:76:28:b1:e5:3d:41:a9:70:
                    50:e7:bf:97:56:4c:e9:90:73:54:bc:9c:fc:65:e2:
                    76:64:80:60:a9:3f:d5:d9:55:5b:64:e6:bb:5e:25:
                    06:85:57:dd:c6:4f:ce:37:55:27:ba:f1:43:7f:62:
                    f3:57:a3:b1:22:31:1f:ef:5a:bd:0f:2f:d7:15:59:
                    1e:41:70:a0:2a:58:1c:51:c9:ae:36:b8:a9:0d:da:
                    4e:3e:db:25:05:d2:f3:4c:f2:e4:67:1c:0f:8c:93:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E1:8A:C4:F6:CB:10:03:EA:78:E2:7C:6B:E8:75:84:60:1D:FD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:da:61:c1:55:2f:31:0c:83:c3:17:10:33:17:f5:c9:73:0e:
         89:7a:44:3f:1a:d6:42:34:02:7c:71:00:f3:e3:07:e7:1f:aa:
         cd:3f:a8:2b:ed:69:d1:9c:ee:45:b5:2a:5d:12:e1:a2:ea:c2:
         16:74:5c:b9:83:fd:b6:95:cd:74:38:d8:ef:e0:34:1a:3c:cc:
         03:c5:e9:5a:21:2a:3f:f7:6d:12:0a:50:ae:13:27:64:64:74:
         86:98:cd:d7:fb:a7:d2:7e:8a:ac:d4:d9:a8:1c:32:65:31:7e:
         1b:98:60:6b:7f:d5:2e:67:42:87:31:f7:16:d8:7d:98:b8:2c:
         c1:e6:ee:42:a1:5a:aa:ee:f7:b4:14:ce:c5:01:76:d7:1e:be:
         6f:45:e9:c1:9e:83:4a:0d:d2:e1:36:04:7d:fa:65:64:c9:ba:
         e6:43:e8:74:01:60:78:3d:7b:6c:c0:f8:ee:fb:1b:2d:82:25:
         df:d4:b6:e6:3d:78:c8:69:ff:7d:8c:75:35:b1:94:34:94:74:
         5e:91:ad:70:f9:79:f3:73:60:b5:67:56:6c:1a:3c:1c:0f:d8:
         8e:31:a4:6a:8a:f8:b0:3e:b5:77:e7:66:d3:7d:a6:4c:ec:11:
         ac:36:b0:fe:96:d9:5f:02:45:c7:65:4f:18:a3:d4:bc:67:5a:
         1e:d6:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:07 2025 by rpki-client