Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/46d8321f-218e-36f3-a679-435b61da0163.roa
File:                     46d8321f-218e-36f3-a679-435b61da0163.roa (raw, json)
Hash identifier:          rwLljVjYdSnHIgRaBxrq7+ljAS2pdmqIG9DmFg7596o=
Subject key identifier:   FA:12:1A:49:13:5F:01:CA:97:F3:30:88:C8:5A:19:A6:B6:CC:BD:08
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F4328584A0C05543780169701A3937B00
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/46d8321f-218e-36f3-a679-435b61da0163.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        137.83.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:54:37:80:16:97:01:a3:93:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=303c712e-c214-4aa9-b9bb-6580f8a55120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:5c:09:12:29:7d:03:4a:10:56:b8:51:b1:
                    bc:77:2f:f9:d7:a1:37:1e:35:f2:79:bf:95:42:70:
                    16:1b:12:cb:0b:df:d4:4c:de:c0:dc:1f:7a:2c:ed:
                    c6:8e:9b:51:ae:d5:bb:f1:be:22:75:5c:83:06:e5:
                    8f:9c:c0:d0:d6:04:84:56:34:65:d0:00:1c:42:68:
                    bd:c4:04:ba:78:47:3a:9e:ba:36:3f:27:5b:66:b8:
                    bc:4c:ae:0d:b7:d8:2d:71:8d:2f:94:44:fc:97:e1:
                    46:f8:47:b8:21:e6:68:86:84:67:a8:5f:1f:a2:97:
                    4f:4a:cc:a9:b7:d4:17:83:6a:64:e8:ff:08:fa:85:
                    f2:41:7d:b5:e3:96:20:81:6c:46:9c:ad:57:8a:b9:
                    36:e6:ba:cb:88:58:db:be:89:2e:4b:f1:c4:3b:aa:
                    03:b9:47:5a:41:97:da:cb:e4:98:79:fd:8a:f8:55:
                    76:7a:df:df:86:61:39:88:e8:6e:90:20:e0:36:02:
                    f1:a1:3c:01:54:91:d4:0c:e2:f3:01:fc:02:f6:1a:
                    6a:d9:1e:05:47:b1:bd:e3:12:db:23:11:9f:c2:7e:
                    f0:bf:35:e2:2c:53:83:2b:bb:70:52:c7:29:c2:1a:
                    3f:26:68:71:c5:c3:48:ca:88:7d:34:42:31:28:e3:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:12:1A:49:13:5F:01:CA:97:F3:30:88:C8:5A:19:A6:B6:CC:BD:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/46d8321f-218e-36f3-a679-435b61da0163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:85:04:62:da:d8:3c:a8:17:c7:1d:19:8e:ee:54:b9:05:41:
         37:c6:4a:cc:a7:1d:84:02:a6:f7:00:ee:4f:71:34:12:eb:8d:
         a4:33:91:56:9b:d6:e9:96:fc:68:b8:c6:03:cc:04:b8:a7:24:
         4e:2a:f9:1d:31:b2:8c:7f:c6:56:5f:ae:57:c9:fb:7d:3c:fc:
         2b:ed:07:2d:f5:29:62:8e:61:6f:9f:13:3f:99:6d:3e:82:d0:
         e3:43:fd:5b:1b:b3:17:97:e6:60:2f:0a:30:5b:d8:fa:dc:a4:
         22:21:0c:fa:b8:46:d8:9a:1e:c5:71:a8:a5:bf:b5:0c:cc:8c:
         f9:17:e2:5d:66:e2:64:80:60:cc:00:04:65:42:4c:3d:10:03:
         c7:97:6f:98:65:5f:ec:f9:5f:9c:42:9d:3c:ae:1c:f0:34:b0:
         a2:7a:f6:7d:80:34:70:20:c9:d4:d7:9e:a6:b8:ad:e9:ef:af:
         a5:07:25:69:5e:ed:b1:e2:0a:6b:58:e6:97:7b:5f:97:2b:ff:
         c9:8c:32:51:12:4e:9b:5c:e8:0a:2e:14:aa:89:75:dc:78:bd:
         12:27:0f:6a:60:97:f6:d4:fe:63:dd:fa:38:20:1f:f2:ae:b2:
         c2:87:5e:ce:47:1f:fb:ec:16:ff:f1:23:e4:33:46:54:66:c0:
         8e:01:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:06:53 2025 by rpki-client