Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa
File:                     1953286a-a99c-383c-b91c-34fa8adbd086.roa (raw, json)
Hash identifier:          E2AlWPeEK/PoQ8cAIrGMAzOPcnkd+sAJngMsDPyJ/eM=
Subject key identifier:   DB:CE:31:FC:CC:AD:23:B9:21:33:7C:D3:8F:08:DD:0F:D7:73:31:5B
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FC30B1DB9E1478BB7E280
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     19437
IP address blocks:        131.153.162.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c3:0b:1d:b9:e1:47:8b:b7:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=027fb085-fe37-460c-84f2-7e1a9d5c3369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:63:2e:9a:b3:93:0e:eb:19:5b:54:80:15:
                    42:d5:bd:5b:0a:ab:d7:8b:52:52:b2:ce:81:e9:54:
                    39:07:17:cc:30:b8:2b:e4:73:27:9a:e4:75:df:55:
                    a7:8d:05:3b:2d:85:97:02:82:0b:a8:41:69:10:ef:
                    9c:af:3b:3f:23:e5:a9:e9:24:a0:64:f9:78:8f:cc:
                    89:41:da:05:d3:f9:01:af:ed:6f:08:a6:f1:5f:25:
                    39:3b:41:a5:7e:6e:59:d1:97:a9:a3:3e:20:f6:54:
                    62:78:c3:fe:5c:3a:e7:35:79:69:b0:84:07:5f:77:
                    a0:b3:a4:eb:f4:a9:70:6d:9f:aa:6d:29:c0:58:ad:
                    03:d6:e8:97:66:c4:6e:fb:e9:d7:5b:19:4b:46:54:
                    3b:8b:75:2b:7e:61:ca:09:d1:e3:49:99:07:53:9b:
                    c4:71:f6:77:ff:5d:ab:38:c0:a4:22:01:0c:14:c2:
                    37:cb:a6:ae:18:5b:68:7c:86:84:72:ef:c8:b4:ff:
                    8b:88:94:a1:e6:ca:d3:65:3f:05:44:58:12:b0:26:
                    cf:a3:a1:c3:a3:31:83:0d:68:6e:65:b8:00:63:50:
                    58:39:ae:13:05:e3:8b:72:ab:c6:14:58:d7:f4:25:
                    1d:5f:dd:86:5d:73:a3:e4:a9:c9:09:c6:22:0b:b9:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CE:31:FC:CC:AD:23:B9:21:33:7C:D3:8F:08:DD:0F:D7:73:31:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:ea:fa:34:72:03:59:db:e2:72:3c:0c:9f:3b:ea:4b:89:
         1a:cd:e6:cb:3f:65:6d:7c:99:ef:92:85:61:04:63:b5:4f:89:
         ba:ea:45:c4:d7:b3:50:bc:70:7a:b6:ee:88:7a:92:28:6c:ef:
         07:f0:51:2f:43:43:be:7d:05:67:8d:87:cf:5c:ce:69:42:53:
         9b:9b:d4:82:c3:72:1c:ab:10:a7:7b:2e:a5:53:24:69:32:94:
         47:f7:ab:88:a7:a6:a6:40:f1:b1:6f:a2:81:bd:b6:b0:e2:cb:
         5f:3c:80:a2:95:11:24:f7:78:69:c6:74:5d:8b:f0:6b:4f:d1:
         8b:74:83:c1:2c:15:fe:0e:70:d0:fb:1e:68:c1:78:5c:c6:8c:
         96:93:34:e2:93:d2:ca:5b:cc:d3:43:46:74:a2:85:37:98:56:
         f3:bb:dc:84:fa:dd:6f:f8:60:05:ba:3a:45:ef:63:59:56:01:
         5d:4e:4c:37:6a:4d:d0:bd:7a:07:42:3d:16:02:87:9e:b0:41:
         65:74:01:52:fb:11:30:d6:cc:10:bd:88:91:e9:dc:7e:67:32:
         04:c4:8b:d3:a2:a7:f4:66:1b:49:c5:d4:a6:84:a1:ff:04:ce:
         7d:30:06:a8:08:d7:b9:a1:80:88:39:9c:9f:dc:07:e0:72:d5:
         e2:99:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:04:58 2025 by rpki-client