Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa
File:                     a05eae2f-ae84-33df-94a2-c5b84374f523.roa (raw, json)
Hash identifier:          crfq2ZS1v+svPyS/+hMFSKCLq6uUtrj5F18EkqZOyS8=
Subject key identifier:   5F:9A:2B:1C:B9:D8:BD:39:D8:3A:AB:DF:2C:2D:0A:72:3F:94:72:E7
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584ABBE62EEB07A3AB0CBEC81B80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     54004
IP address blocks:        134.202.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2e:eb:07:a3:ab:0c:be:c8:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=31e087cc-fcbd-4cb4-9c32-e4aba21f4e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:77:d3:7f:47:1e:40:7a:3e:d2:05:b8:3b:
                    87:11:e6:c4:3c:2f:22:10:2c:80:f0:28:68:5b:d0:
                    34:33:ae:4c:4d:33:bd:2a:fa:1d:82:1f:0a:4f:84:
                    c5:48:c9:1e:3e:2e:2e:ad:95:9d:48:18:1b:cd:d5:
                    1f:82:e6:54:4a:b5:8d:95:ef:c9:54:cd:a6:2a:23:
                    19:e6:6b:25:ca:b9:5b:3d:6e:cb:fa:85:19:8b:95:
                    35:fa:47:dd:5d:52:77:5d:cb:5a:1d:e3:ab:da:00:
                    f7:fc:79:c4:34:c0:08:ec:f1:0e:27:55:03:e7:e0:
                    b4:d5:5e:09:2f:4a:51:90:7c:8d:58:f2:60:57:8b:
                    11:61:53:54:eb:a0:7c:82:58:a0:4d:15:5a:83:dd:
                    17:ab:50:f5:ca:9c:fb:da:f0:b2:b1:0c:26:fd:88:
                    e3:34:5d:16:53:bd:5b:c0:6a:7d:63:72:88:76:15:
                    d1:b8:4e:c3:62:f6:d2:96:db:a0:da:8a:04:08:d8:
                    df:9c:0e:b9:c1:1f:21:46:cb:50:1e:52:c0:9d:f7:
                    1d:87:dc:ac:87:be:b5:08:fe:86:08:2e:96:39:fc:
                    92:a7:25:9e:3d:2f:23:43:56:f3:a5:0c:1b:23:b3:
                    9c:6a:49:24:e6:58:0a:6f:c1:f6:da:ad:65:1b:de:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:2B:1C:B9:D8:BD:39:D8:3A:AB:DF:2C:2D:0A:72:3F:94:72:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a05eae2f-ae84-33df-94a2-c5b84374f523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:97:52:b3:df:6d:f1:ec:d2:fa:2a:f0:5a:66:c8:d9:63:18:
         1d:43:e0:88:de:df:4d:a5:db:cc:96:2f:7a:51:c6:65:5f:75:
         9b:6d:92:23:a7:c3:00:f6:c7:cf:b8:f7:62:5a:45:56:19:65:
         c6:7a:96:7e:93:d5:84:e4:d0:bd:4e:3e:c0:d9:37:a9:31:12:
         9b:5c:e6:30:a9:20:11:2d:49:09:0b:34:0b:7b:31:b8:cc:b4:
         14:f3:9e:5d:de:4d:41:4e:a6:da:e8:e6:ae:04:73:ff:45:3e:
         a8:b9:3b:9e:2d:de:b9:80:71:3c:dc:2a:e1:c7:96:a4:92:de:
         7d:bc:23:58:1e:22:72:a1:ae:88:f4:36:df:f1:d5:59:2e:4e:
         5b:0c:50:ab:6c:c0:1c:de:94:c9:47:1d:27:cd:82:7e:72:dc:
         a4:a5:43:d3:e0:92:bb:43:7d:f3:90:f6:c9:0c:05:43:4a:b9:
         1f:23:78:7b:85:19:f5:f7:6a:f3:c9:4e:d9:d7:3e:d7:c1:a4:
         62:fd:c8:3c:ef:86:ad:b6:c5:3e:3f:b9:80:93:66:46:16:37:
         46:54:c6:33:57:31:1e:5f:16:81:2e:2c:88:72:37:f8:f3:15:
         08:f1:a6:ae:f5:ec:5e:0f:37:d8:78:dd:c9:95:b4:5c:89:9f:
         3b:4a:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:13 2025 by rpki-client