Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d438fe93-b8e2-3385-993c-94694c313117.roa
File:                     d438fe93-b8e2-3385-993c-94694c313117.roa (raw, json)
Hash identifier:          +FAb91P6TxIOZHIg5EEYaXvBEy8xZRvDWybVoXUNHgQ=
Subject key identifier:   91:0D:E6:3D:7A:17:FF:C4:E1:F8:B6:AD:F5:EB:70:61:8C:81:6A:ED
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285849C79F65DC5B7B06D71C8E0340
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d438fe93-b8e2-3385-993c-94694c313117.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        144.81.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:65:dc:5b:7b:06:d7:1c:8e:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=8e90dfa0-d99e-4e92-b64d-49e567a56fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:e6:9c:be:68:12:6e:3c:66:57:bc:46:6a:
                    12:f3:e0:6a:40:7a:69:72:64:aa:b4:6e:54:16:20:
                    69:d0:b6:c0:d4:26:b5:4a:e1:57:bb:2d:a4:7a:c7:
                    6b:9e:7a:b3:35:f5:77:c2:ad:fd:f4:e9:a8:df:d6:
                    aa:f0:75:5e:56:90:7b:4b:1b:61:94:af:68:b7:1c:
                    bf:7a:a0:b9:c5:17:9c:1d:03:64:9d:8c:bf:4f:36:
                    d5:4f:84:fb:2d:d4:e2:f7:b9:f5:51:73:fa:f1:c8:
                    c8:77:2c:3e:cf:8b:84:69:4b:e8:a1:b3:68:a3:e9:
                    65:69:a1:79:61:82:b2:7f:3e:69:56:87:c5:25:46:
                    67:ef:77:4b:52:72:4c:b1:fc:07:a0:23:44:a3:10:
                    db:4b:68:7b:26:c8:2a:69:35:70:6a:bd:77:6e:ed:
                    51:e6:f1:ae:e5:07:4a:e4:11:24:d7:f6:a0:76:1f:
                    55:d1:a3:21:0c:dd:f1:6c:0d:96:6d:b5:d0:29:7a:
                    30:05:bc:fe:f6:5b:ed:0c:11:a5:52:2c:0e:10:4d:
                    8f:f4:48:a8:67:14:28:27:7a:d9:5a:1f:e0:af:db:
                    e5:6d:97:8f:3b:63:2d:ce:de:95:b3:29:24:23:65:
                    8c:d2:d3:7c:7c:8b:aa:21:22:3a:a3:5a:30:ce:79:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0D:E6:3D:7A:17:FF:C4:E1:F8:B6:AD:F5:EB:70:61:8C:81:6A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d438fe93-b8e2-3385-993c-94694c313117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:ee:15:52:e0:ee:b5:71:dd:4d:9c:d2:23:15:91:eb:0f:
         54:55:76:92:a1:06:4a:3b:eb:9d:f0:e3:5d:43:cb:65:57:21:
         0d:10:23:ec:25:14:2d:4c:48:69:c1:88:39:25:79:06:fd:2a:
         60:11:9f:c4:18:62:90:25:ae:6e:0c:3e:8e:08:dd:f0:73:0c:
         ab:90:b2:d5:6f:88:3c:da:aa:24:e8:98:85:24:54:7c:7c:45:
         c7:cd:46:e8:d0:4d:6e:8e:47:df:ce:0d:7f:9e:68:86:c6:9e:
         6c:49:50:cb:6c:fd:0c:af:fc:34:98:a6:c6:e5:cc:b0:d1:1b:
         e2:33:7f:72:a4:7d:ee:5e:9b:c1:b4:3a:e6:07:a3:7c:a5:9e:
         6a:ba:f7:00:e4:c5:e6:48:d8:74:e5:49:c7:41:31:de:84:3b:
         cf:a0:c9:9f:f7:e2:6c:3a:76:ad:92:4e:88:a0:d9:cb:4b:96:
         76:b9:f6:c7:0e:62:0b:f9:8d:7c:40:6a:a6:6b:dd:b4:8c:77:
         7f:f3:c8:f6:72:2f:14:23:62:da:0b:76:af:fc:0f:23:63:5f:
         08:d2:ea:4f:cc:ae:f0:53:31:28:e7:d4:be:15:a4:08:0b:da:
         ab:e8:38:6d:b7:3b:56:29:12:5e:2c:ce:ac:ce:a4:5b:82:c1:
         eb:45:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:35:17 2025 by rpki-client