Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa
File:                     4ebe83df-81c7-321e-a9a9-64378ff786f2.roa (raw, json)
Hash identifier:          zc4FcSoBU4A/xPhEX1SOKNhvtgtBO+D0jir6ffpLytM=
Subject key identifier:   95:A6:FF:B1:DD:BD:80:A8:B9:64:CD:EC:E8:5B:42:04:D2:BB:5F:FE
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849EBEA4BC8F45FF7DBB7E92900
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     19181
IP address blocks:        131.153.83.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:4b:c8:f4:5f:f7:db:b7:e9:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=f43923fb-89de-4e72-b37c-20aa3edb35b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:92:89:ff:a8:73:2a:bc:83:4e:e6:5b:83:
                    ed:94:5a:c6:1e:87:38:0c:8a:68:5f:ba:ca:e3:0d:
                    7f:cc:01:72:82:99:81:21:ba:a4:96:27:29:2e:6c:
                    55:5b:dd:e6:11:89:70:d2:f2:04:dd:8b:41:0e:a7:
                    77:09:8f:af:ba:b9:7c:96:43:4c:f0:31:ec:8d:1e:
                    dc:a1:92:4c:f7:84:5e:67:69:e2:49:28:06:7f:83:
                    66:66:2f:90:ca:7a:73:00:56:00:53:2e:3f:ae:35:
                    20:13:99:88:8f:9d:75:76:64:77:0b:4c:b7:62:2c:
                    b2:39:80:79:a7:85:c5:93:85:fd:72:95:a2:40:b1:
                    48:95:2d:50:6f:ad:16:13:8d:88:ab:32:c6:da:06:
                    99:5b:22:84:6a:bc:30:b5:17:3e:76:d7:80:ee:da:
                    85:71:b7:2a:d3:1c:74:f3:4d:3f:eb:d4:93:a7:52:
                    d1:27:a8:8f:76:a4:e1:8b:10:ca:51:c3:05:7e:79:
                    5e:95:3a:f4:ac:f2:55:ac:38:13:fa:45:ba:92:5c:
                    ad:5f:5c:46:26:c1:fe:31:4b:15:63:7d:e9:51:62:
                    65:ee:ea:4e:db:7f:a2:f1:48:c9:df:9d:03:54:e9:
                    17:45:85:8b:1c:7f:7c:f1:b5:1f:52:a9:2a:4b:12:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:FF:B1:DD:BD:80:A8:B9:64:CD:EC:E8:5B:42:04:D2:BB:5F:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ea:c0:6a:ae:9b:45:3d:e1:fd:7e:b5:a5:06:9a:6d:56:b5:
         dd:31:93:7a:33:3d:7f:9d:4d:57:ad:6e:a2:10:0d:6a:61:f2:
         46:72:f1:21:06:a9:5e:87:80:71:66:7b:c7:35:e8:93:d0:9e:
         14:6d:74:eb:85:f0:66:04:0f:c2:48:87:ef:fc:ba:b7:93:19:
         e9:af:4e:b5:61:64:4a:ab:32:ce:ed:67:07:7b:cc:ee:08:33:
         34:6c:7c:c0:a3:ec:f8:d3:69:9f:2b:45:7b:18:ce:e9:9a:49:
         6e:b8:d7:11:10:6f:5a:24:92:7c:7a:81:db:bb:60:24:5d:da:
         20:40:53:4b:0b:9a:2f:3d:24:e7:5a:23:fc:ce:4c:15:3c:e7:
         98:c9:2c:bd:b9:35:8a:eb:fb:f9:01:bf:b7:81:1c:1e:da:51:
         e6:3b:ef:b0:69:6d:da:c4:80:ec:67:73:5e:24:43:32:49:47:
         14:59:62:bf:a0:6a:4d:3c:a2:e3:50:05:a1:d6:fe:22:20:d3:
         91:7c:99:91:c8:5c:3c:47:77:df:10:a6:e9:32:ad:09:73:04:
         ca:37:27:56:3a:20:37:e0:b5:20:ea:37:17:dd:ae:43:fd:eb:
         d2:8b:39:2e:9d:84:76:38:47:4d:6a:90:96:19:4e:15:f4:4d:
         a9:52:d3:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kvI9F/327fpKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
ZjQzOTIzZmItODlkZS00ZTcyLWIzN2MtMjBhYTNlZGIzNWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVqSif+ocyq8g07mW4PtlFrGHoc4DIpoX7rK
4w1/zAFygpmBIbqklicpLmxVW93mEYlw0vIE3YtBDqd3CY+vurl8lkNM8DHsjR7c
oZJM94ReZ2niSSgGf4NmZi+QynpzAFYAUy4/rjUgE5mIj511dmR3C0y3YiyyOYB5
p4XFk4X9cpWiQLFIlS1Qb60WE42IqzLG2gaZWyKEarwwtRc+dteA7tqFcbcq0xx0
800/69STp1LRJ6iPdqThixDKUcMFfnlelTr0rPJVrDgT+kW6klytX1xGJsH+MUsV
Y33pUWJl7upO23+i8UjJ350DVOkXRYWLHH988bUfUqkqSxLM2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWm/7HdvYCouWTN7OhbQgTSu1/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGViZTgzZGYtODFjNy0z
MjFlLWE5YTktNjQzNzhmZjc4NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETqwGqum0U94f1+taUGmm1Wtd0xk3ozPX+dTVetbqIQDWph8kZy8SEG
qV6HgHFme8c16JPQnhRtdOuF8GYED8JIh+/8ureTGemvTrVhZEqrMs7tZwd7zO4I
MzRsfMCj7PjTaZ8rRXsYzumaSW641xEQb1okknx6gdu7YCRd2iBAU0sLmi89JOda
I/zOTBU855jJLL25NYrr+/kBv7eBHB7aUeY777BpbdrEgOxnc14kQzJJRxRZYr+g
ak08ouNQBaHW/iIg05F8mZHIXDxHd98QpukyrQlzBMo3J1Y6IDfgtSDqNxfdrkP9
69KLOS6dhHY4R01qkJYZThX0TalS008=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:19 2025 by rpki-client