Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa
File:                     7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa (raw, json)
Hash identifier:          oO4rm4HGbdAnVGYXjSEHGVgsMu8gvR+Dl2L6wHsgwYo=
Subject key identifier:   E7:88:EF:C9:31:FA:6F:55:E8:D7:3D:36:EE:A3:1C:24:5A:DC:86:F5
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F43285849849EFB636A054B64C1A0FF40
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     21949
IP address blocks:        134.231.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:fb:63:6a:05:4b:64:c1:a0:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=7615ca47-8142-4e9b-9127-aabadecfa7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:c6:eb:09:16:6c:cb:92:24:8f:2e:4f:8d:01:
                    2c:c4:06:74:60:ac:84:21:90:f7:cc:9b:e5:0f:b2:
                    50:26:6b:c3:7a:5e:4b:f6:d4:b7:ed:19:51:f9:21:
                    22:8b:da:75:98:95:35:6a:c0:7d:c6:4d:01:32:17:
                    96:c6:c1:e1:71:fa:b5:0e:9e:4a:fc:03:f8:16:30:
                    3c:08:26:4a:9e:86:b3:99:ba:7d:1b:3f:03:72:99:
                    f8:90:d1:6d:50:53:36:35:21:23:89:70:c3:5e:2a:
                    49:45:c3:04:f4:6c:b7:65:ac:72:e4:32:1a:19:d6:
                    ae:e9:4d:e2:aa:5c:77:a1:c3:ed:56:a8:fa:25:cb:
                    a7:b0:40:0c:32:f3:df:55:52:6b:2e:2b:c5:4a:7e:
                    75:a8:a4:d8:c2:0b:7d:cc:44:6e:d5:dd:c1:50:b7:
                    cf:5a:4d:64:30:28:c4:42:fd:22:63:10:a6:b8:63:
                    9c:ca:ad:b9:3c:c3:44:f7:00:19:42:d2:11:25:63:
                    06:9d:6c:73:86:54:56:92:e3:ba:f9:63:3e:73:32:
                    b4:7e:38:65:51:12:15:a5:28:8a:29:7a:84:e2:07:
                    38:6b:e2:9a:4e:a1:48:16:a8:ce:53:28:cb:b3:0d:
                    2f:cd:3c:3f:a8:82:64:a6:61:3e:64:da:90:02:6a:
                    e2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:88:EF:C9:31:FA:6F:55:E8:D7:3D:36:EE:A3:1C:24:5A:DC:86:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7d25bb6c-fa48-3c44-92b1-f58273959ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:0f:39:41:d9:ce:c6:46:a5:89:a7:58:01:8a:11:7d:ee:
         a4:1c:c1:9c:a1:73:7f:f9:40:a5:15:82:55:30:c5:53:a5:d8:
         38:3a:0f:e5:69:0a:83:b4:e8:2e:3f:a6:17:56:34:3e:c7:df:
         de:4a:e8:93:44:d7:8f:ee:98:3f:c5:6e:3a:44:23:58:35:3c:
         18:89:5c:4c:cb:47:45:1a:cd:77:8c:ac:1b:50:32:8b:23:fb:
         4d:09:fe:8f:5f:af:e5:0e:ae:c0:b1:21:d1:52:e7:7a:58:f5:
         38:c9:98:76:07:8a:05:55:22:d3:1b:4e:81:b1:fb:c2:f4:ea:
         c5:f5:96:fd:0b:5e:a2:34:07:15:e6:52:f5:e3:be:07:c4:3d:
         06:38:42:c5:ff:22:b7:0d:86:fd:af:d8:2a:ab:86:70:13:54:
         12:07:3b:99:d3:1e:de:1a:4b:8a:c5:9c:39:49:c5:24:3b:e7:
         c5:f0:9d:52:f8:5b:83:99:ca:46:b5:37:e8:c7:d4:21:56:c4:
         b7:56:c2:b8:5c:e9:05:90:23:f5:2a:c6:63:b5:f7:be:bf:5d:
         d8:72:3a:e6:23:e1:e9:c4:00:05:8a:07:03:ad:35:a6:79:61:
         6d:35:24:53:15:66:12:c6:e1:4f:e7:f2:19:dd:03:5d:4d:69:
         56:a8:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:55 2025 by rpki-client