Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
File:                     2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa (raw, json)
Hash identifier:          q9GFsVafWSlXi9Sa3PyMACtERULqDJrCMEkBQ7ql6kw=
Subject key identifier:   F3:DF:3A:51:38:62:B9:04:67:D1:97:72:60:CF:05:DC:B5:FE:1E:2A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584AAB26655E4F3350B511E359C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     20454
IP address blocks:        131.153.231.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:65:5e:4f:33:50:b5:11:e3:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=62458abc-f438-4f15-9740-f88bdab50fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d3:44:06:45:a0:ee:fe:f2:4e:54:2c:11:48:
                    9f:8a:1d:f3:f4:6e:8f:78:f1:fd:b8:3b:e5:68:d0:
                    34:92:5b:ed:a6:c5:d6:c1:72:18:5b:48:c8:50:61:
                    f0:fb:7d:a6:19:8f:c6:ee:7f:11:2f:d8:d4:2f:94:
                    b4:bc:3d:2b:b0:b3:47:86:62:85:20:15:05:4c:0b:
                    db:61:87:c0:c4:20:05:9d:5a:27:f6:68:aa:b1:ea:
                    5c:72:af:1c:5d:3e:1f:08:b1:9b:3f:8a:c4:72:0e:
                    98:eb:68:9b:c1:f0:60:af:21:82:b9:f0:d5:4e:08:
                    e5:c7:37:31:b0:db:43:d9:f7:bf:a1:10:d0:e6:9d:
                    6d:13:32:20:dd:a0:e7:c6:70:f4:2e:7a:5f:01:fd:
                    3f:2f:e6:89:da:f9:15:aa:15:f1:59:f1:43:eb:36:
                    fc:b8:d2:75:fe:5e:47:ab:e5:8a:94:fb:5f:47:5f:
                    9b:da:e1:42:5d:08:55:46:83:bb:77:d0:20:5d:f5:
                    32:68:9d:fc:2d:5b:01:cf:7f:bd:97:89:72:c2:1a:
                    75:43:8d:d1:91:bf:35:da:b1:0f:4c:05:17:92:9f:
                    aa:61:0b:4a:0b:2a:aa:44:69:59:93:6c:67:98:9f:
                    07:b6:d4:6e:a9:2a:98:70:de:55:33:13:16:9b:8b:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:3A:51:38:62:B9:04:67:D1:97:72:60:CF:05:DC:B5:FE:1E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:59:f8:9d:33:41:d5:5a:7e:b1:65:0a:dc:33:2d:d3:ad:e1:
         57:16:07:9f:a2:17:2f:4f:80:61:cc:29:23:6e:43:58:08:5d:
         ad:77:e9:d6:52:38:d6:18:90:55:80:91:ea:71:19:40:8d:eb:
         4b:8d:56:7e:fd:11:7e:1c:cd:63:f1:fc:82:ca:44:0d:40:70:
         25:51:8d:31:8a:7b:23:50:28:c8:07:55:01:76:4e:8d:cc:9b:
         ef:71:a2:a3:7d:89:5c:61:d3:68:5d:9c:f3:2c:b9:1c:2e:9e:
         12:b9:50:4c:27:7a:05:7e:60:33:5a:be:c7:a2:77:fe:6c:0d:
         0b:90:cf:13:44:31:b4:dd:4a:de:f0:95:21:31:bc:5d:a4:d7:
         41:7e:b0:ae:d2:ba:e6:2c:91:37:1e:e8:c3:24:b3:ca:8f:bc:
         bc:d0:1d:45:68:a8:d2:e6:65:ce:24:a9:cb:cf:f8:9f:13:97:
         5d:61:b9:d4:26:7b:bf:e6:e9:4b:7d:b1:b7:65:38:20:c6:41:
         45:4b:1c:c2:c2:a4:a8:14:67:df:78:68:29:fe:37:59:e5:33:
         64:10:2c:1d:6a:86:f9:13:8d:80:e6:eb:c5:1e:e0:23:4f:07:
         b3:fb:ed:2a:34:f1:b6:9f:58:5c:e8:ae:c2:01:fb:24:99:ca:
         c7:10:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:18:29 2025 by rpki-client