Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c5513339-cd4f-321f-abb1-e46133f6b21f.roa
File:                     c5513339-cd4f-321f-abb1-e46133f6b21f.roa (raw, json)
Hash identifier:          PlKPMwGmT2oLrfcJf3DeoX4uwc9bsfSQenfIsvUJOXw=
Subject key identifier:   8E:39:7C:4E:AF:4A:09:27:A2:0B:97:FB:5B:4C:AA:36:CF:94:76:40
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584ABBE62F4504812D2760DCA500
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c5513339-cd4f-321f-abb1-e46133f6b21f.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     54004
IP address blocks:        134.202.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2f:45:04:81:2d:27:60:dc:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=9de198d5-af14-4412-8c83-49faa85317ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:dd:77:1b:be:30:13:12:fa:04:4a:11:6e:
                    87:c4:42:2d:15:ab:a2:6a:d5:f9:d7:70:76:5a:f6:
                    92:b2:92:76:04:7e:fd:8c:47:6e:ec:53:58:57:a3:
                    c5:f1:6c:eb:72:89:40:5b:5d:b3:f3:24:d1:b6:4b:
                    90:bb:0a:96:db:5d:47:02:a8:a4:d3:41:24:88:46:
                    b5:07:25:70:3a:a2:92:71:da:ff:8f:29:ef:19:44:
                    b9:a2:ea:d6:73:61:6a:a2:b9:f4:40:32:26:4d:a6:
                    35:2e:b4:32:3b:07:fc:30:ac:e6:16:6c:0a:14:d9:
                    c2:84:3f:ee:a7:a5:c9:f7:3a:51:93:d4:8e:5b:2e:
                    e6:c4:0e:25:16:c3:45:e4:b1:00:22:e3:1d:9b:8e:
                    80:11:62:95:a8:ac:cb:93:a0:a0:36:df:4a:05:88:
                    2a:0e:03:ef:3f:d7:12:b9:dc:8c:f2:1d:f8:3d:e5:
                    f2:57:7b:14:a2:0a:aa:37:81:bd:d1:d0:43:34:5c:
                    79:67:11:83:56:10:be:16:6e:46:42:91:6f:7e:90:
                    48:28:1f:80:8a:a7:03:81:f1:a9:56:c3:96:a8:b3:
                    42:b6:f0:d0:57:bb:9b:26:fa:78:4c:68:92:7e:b4:
                    2d:44:44:cc:3f:f2:e6:14:de:c9:e1:b5:47:84:5a:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:7C:4E:AF:4A:09:27:A2:0B:97:FB:5B:4C:AA:36:CF:94:76:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/c5513339-cd4f-321f-abb1-e46133f6b21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:7e:72:09:e5:5e:e0:0b:ac:2a:9e:b4:90:27:74:46:ce:
         c5:f4:46:83:bd:69:a8:fc:f0:05:c1:fd:de:b0:05:d9:5d:a7:
         3b:79:0b:4d:3f:3f:ae:ca:5c:79:50:b7:f2:01:74:4d:15:fc:
         62:5c:ba:60:9e:8d:f2:17:cf:8b:e4:76:20:cd:81:49:c9:72:
         47:52:89:d3:e6:90:f9:15:ba:bb:e0:b4:af:1e:a7:8d:1a:97:
         58:4d:1e:39:7b:6a:04:90:bb:76:60:80:dd:93:75:42:45:3f:
         82:25:e6:be:72:28:61:ec:d3:81:9e:e3:d2:35:1e:1b:51:db:
         74:e2:1a:a7:7f:7b:dc:95:40:22:9d:ec:20:e5:8a:1a:27:70:
         14:86:df:26:63:56:d6:6c:ba:9f:f4:c6:2b:7c:87:44:a5:cd:
         1b:bb:7b:26:26:7d:21:84:6f:b5:6c:2e:69:d0:69:6d:55:7c:
         05:da:c3:4c:ab:97:29:21:e4:c9:20:73:8b:1a:d9:2e:d0:86:
         3b:78:5b:c3:32:b8:47:d6:5c:17:dd:a3:80:cf:bc:b8:4f:4b:
         10:20:16:fd:bf:c4:4f:13:cc:11:07:d2:8e:49:93:f2:77:0a:
         35:45:df:cd:3b:17:e0:43:ba:3a:d1:fe:67:84:80:cb:9f:34:
         05:ad:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:49 2025 by rpki-client