Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/36ed5009-067b-3549-a4b1-cde6d2e13b3f.roa
File:                     36ed5009-067b-3549-a4b1-cde6d2e13b3f.roa (raw, json)
Hash identifier:          lZNR9k9dj5+5dH4Ke4xgvglTPd9Wnsa+2wYITAOzqVc=
Subject key identifier:   7F:1B:CE:7D:36:25:A3:0B:16:4F:83:CF:C5:A5:70:0A:35:69:34:4B
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584A0D6A838A86BDBC92435C4100
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/36ed5009-067b-3549-a4b1-cde6d2e13b3f.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     54651
IP address blocks:        192.231.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:83:8a:86:bd:bc:92:43:5c:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=d44ea1be-d11e-4828-8d0f-0d9c188a3e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:c5:f6:fd:bb:76:96:09:57:56:72:af:66:
                    29:3d:ae:de:cd:98:44:a0:0d:18:d5:43:fc:aa:60:
                    03:9c:bd:1c:47:ec:e0:19:80:f4:ad:cb:b6:ac:b2:
                    b5:f8:61:bf:50:ce:66:bb:32:25:79:ed:3a:56:1f:
                    d2:05:7f:42:c4:62:13:0c:57:19:bc:35:30:06:9e:
                    63:8c:d7:9b:f2:76:af:33:12:5c:2b:fb:f3:4a:1e:
                    43:1c:1d:d6:14:60:2e:27:20:c1:16:5e:59:e7:8a:
                    b0:8c:40:f4:10:3a:b4:5a:cd:a9:f0:88:2f:af:4d:
                    21:2b:99:a8:0a:00:e2:6b:d7:28:f7:d1:6f:3d:80:
                    c7:47:7a:3d:07:f9:1a:79:0c:b6:3f:e9:dc:79:89:
                    ac:f1:af:29:f5:d1:47:2e:68:1b:1b:c8:20:e7:8b:
                    56:14:98:63:09:3a:e4:01:31:09:83:f7:d0:28:92:
                    95:17:53:a3:08:bf:75:64:be:2a:3d:da:4a:af:c7:
                    ad:f6:78:f2:43:ea:08:26:24:3b:37:c5:09:4f:ab:
                    dc:f7:3b:65:85:ca:fa:e5:48:2c:7a:47:52:3c:c6:
                    99:b5:99:62:d4:7c:02:98:ae:49:99:b9:33:5a:66:
                    79:7a:ea:7b:59:8f:d0:06:8c:a4:a1:97:cc:db:e1:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1B:CE:7D:36:25:A3:0B:16:4F:83:CF:C5:A5:70:0A:35:69:34:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/36ed5009-067b-3549-a4b1-cde6d2e13b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:71:a9:f2:52:fb:d9:43:4b:46:d2:e3:07:29:7b:84:fd:ff:
         60:a0:d8:f7:2d:87:be:65:5d:20:bc:24:c4:8a:0c:d7:f5:b5:
         83:4d:4f:b8:9f:d0:fc:f4:f7:90:ff:8e:d0:1b:a2:34:0b:67:
         54:4b:18:10:f2:64:23:99:32:3f:89:4a:09:38:21:e5:70:65:
         8d:55:e0:57:75:5e:15:18:8f:29:60:d7:75:4d:70:3c:1b:98:
         e0:da:2c:73:f0:e0:23:c2:d0:a6:9d:c1:a9:f1:ea:8b:18:32:
         b9:b5:65:82:8c:b4:49:18:ad:41:a4:29:6c:42:b8:44:ff:fe:
         40:19:ee:99:2a:53:80:4b:d8:ef:fe:4f:b0:98:f5:a9:d6:53:
         10:d8:ad:e4:b6:d2:70:b6:bd:70:4c:bb:b1:e1:29:6f:c2:5a:
         cd:45:23:e9:0b:76:88:07:0d:95:f3:5e:57:7c:04:9e:46:84:
         7a:f1:34:60:7c:bb:ad:89:b1:3e:9d:f0:5a:a0:c7:7f:83:f3:
         c3:f1:ae:15:92:8e:2d:a1:4e:b7:39:ca:c5:4d:3f:25:41:09:
         62:c3:6e:f8:77:0d:46:37:70:ad:e0:ac:84:e6:8d:c4:01:6c:
         a1:11:c6:ef:cf:60:a6:b6:ff:39:30:82:e3:e7:79:ea:32:9f:
         63:dd:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:19 2025 by rpki-client