Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/ca9297e2-ed34-3834-9eb3-cfeec10a5fbd.roa
File:                     ca9297e2-ed34-3834-9eb3-cfeec10a5fbd.roa (raw, json)
Hash identifier:          d87/cXaiVja1lgdaDZNegoJdpQh9ma+odfHfDeecIaI=
Subject key identifier:   57:82:B8:3B:7B:68:55:94:63:FB:60:DF:BB:D5:4E:49:84:3C:58:6D
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285849C849C098EABBC54B6B82C080
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/ca9297e2-ed34-3834-9eb3-cfeec10a5fbd.roa
Signing time:             Thu 08 May 2025 06:44:06 +0000
ROA not before:           Thu 08 May 2025 06:44:06 +0000
ROA not after:            Wed 06 Aug 2025 06:44:06 +0000
asID:                     44477
IP address blocks:        107.182.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c8:49:c0:98:ea:bb:c5:4b:6b:82:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: May  8 06:44:06 2025 GMT
            Not After : Aug  6 06:44:06 2025 GMT
        Subject: CN=13d28479-2734-49af-9340-21a4632837eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:19:82:17:bc:56:15:f6:ff:52:e1:eb:9c:
                    7a:e9:9e:36:1b:b6:7c:55:7b:3a:0f:b0:07:3f:ec:
                    9a:f2:b5:6a:30:34:29:3c:ea:22:69:9e:72:6f:82:
                    49:7b:0b:b0:0c:2f:03:dc:18:29:16:28:c3:16:09:
                    f9:5f:9f:7b:cd:6f:5f:75:6a:aa:60:d3:cd:8d:3e:
                    d2:bd:61:b8:de:7a:2e:5e:92:d5:63:f8:e1:e2:3f:
                    37:e0:3b:3a:32:1c:29:3c:36:cd:01:38:0b:53:f8:
                    26:81:09:b5:43:3d:91:80:7e:b1:e8:b6:12:d5:8d:
                    3c:5c:b8:8d:fe:f6:71:8e:23:c4:80:08:e1:42:ae:
                    35:97:9a:41:83:bf:00:af:3f:cd:b3:b9:06:7e:d3:
                    62:64:bd:ff:47:49:76:6c:fc:a3:34:eb:19:55:9c:
                    61:a7:ee:c8:a1:e4:b8:a9:c1:b3:d4:dc:e3:47:53:
                    20:28:17:85:84:56:be:96:68:4a:07:9b:23:b5:c5:
                    0c:89:88:72:2d:77:2e:35:d0:b4:a1:99:57:18:ef:
                    db:e2:da:8e:a3:3e:dc:c9:b3:1e:28:62:5c:ae:c8:
                    8e:35:d2:58:b6:a5:63:0e:55:8d:30:8b:60:ba:42:
                    b5:f1:2b:36:cb:7c:c8:d9:ff:6c:39:c8:44:34:a0:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:B8:3B:7B:68:55:94:63:FB:60:DF:BB:D5:4E:49:84:3C:58:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/ca9297e2-ed34-3834-9eb3-cfeec10a5fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:cf:f5:72:07:9c:d6:56:78:51:d0:f6:d2:24:2d:24:e4:
         0f:b8:4f:b6:b9:7c:b6:74:26:4b:39:ba:39:1b:c6:dc:3d:bb:
         11:8a:86:0a:95:40:fd:09:d3:7f:14:39:cd:1b:cb:56:08:e1:
         7f:6a:13:2f:ad:17:09:fe:9a:7b:ec:ae:a0:3a:d7:8f:c1:b4:
         67:51:38:53:b5:cf:f2:6d:4a:29:87:92:02:43:f4:08:87:71:
         c6:6b:91:9a:2f:54:1b:be:52:35:5a:a2:a7:1b:7a:4d:f2:b7:
         8d:65:74:ac:0e:74:51:29:c0:86:80:a7:8e:c2:13:18:86:de:
         62:40:8f:16:d9:66:bf:c9:0d:16:33:b8:f2:af:6e:96:5f:31:
         27:42:bf:16:04:a5:60:71:02:1c:4b:d9:ae:e3:45:14:6b:03:
         54:ae:cd:d5:f1:76:17:77:88:c8:f7:d5:a6:09:9f:c8:3d:9b:
         f6:9d:1e:cc:ea:43:f7:4a:cd:2d:2c:03:cf:ae:31:6e:82:66:
         3e:3c:bb:89:1e:d2:d3:b7:fb:95:9c:8b:90:da:7a:70:d6:76:
         d3:68:4d:4b:e2:4d:06:6f:87:3e:54:80:72:ff:79:b0:a3:f0:
         e1:fa:af:06:34:02:db:a4:af:3a:a3:11:63:8f:74:b6:3f:b5:
         6d:a8:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:52:28 2025 by rpki-client