Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa
File:                     5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json)
Hash identifier:          yzxuzpkaAQ1IzFbOgx5iX+BXi1RJVwV+k1MKfeFzPTg=
Subject key identifier:   0E:1F:30:6C:9E:AF:CA:5E:3D:57:20:65:F7:8E:62:AB:2F:00:63:89
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FC980816F0CE806086CA0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     19437
IP address blocks:        131.153.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c9:80:81:6f:0c:e8:06:08:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=8585de58-1b62-49d8-b5db-49d67f643c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:80:f2:4e:9d:8d:b7:19:34:90:ac:49:eb:
                    ba:a9:57:e1:af:a3:fb:bb:48:71:ca:f9:61:fd:a5:
                    e8:05:59:0b:7a:17:32:bc:d3:e9:c3:6d:2d:d8:60:
                    7f:17:e5:17:0a:87:19:f2:9d:39:fd:0f:03:0e:4b:
                    e9:3d:a4:f7:d6:98:b6:67:f9:ff:dd:b9:e5:17:8b:
                    0f:99:f7:96:94:2c:52:0a:48:b0:82:f9:44:22:4d:
                    dc:2a:37:dd:db:06:81:6d:bf:37:94:f4:75:03:07:
                    2c:09:a9:89:6c:14:b3:bc:66:d3:d9:00:98:86:f3:
                    4c:94:01:18:f6:db:d2:ee:5e:8d:31:39:d7:e2:43:
                    bf:33:14:0a:55:54:54:52:45:16:7e:78:6f:c8:71:
                    af:00:8a:6e:23:3a:ce:4f:b0:65:06:c1:c7:c3:53:
                    42:e2:34:3f:06:66:44:66:53:56:ec:85:57:31:db:
                    d6:13:4f:61:69:4d:a4:75:e0:5d:32:fb:97:e0:53:
                    74:4f:e4:aa:09:dd:c5:18:29:0d:9d:88:98:ba:09:
                    4b:de:30:69:9e:72:49:aa:ef:c6:6b:47:b2:11:36:
                    71:29:e1:ab:75:2a:28:29:3f:ba:c0:86:49:5a:0d:
                    27:82:ee:ae:a6:d3:22:52:df:c8:7f:8a:a4:f2:ee:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1F:30:6C:9E:AF:CA:5E:3D:57:20:65:F7:8E:62:AB:2F:00:63:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:94:4f:d5:27:d5:28:27:b4:c2:01:5a:8e:a7:fd:cf:12:2e:
         70:80:cc:de:68:c4:fd:24:a3:e4:c5:45:2a:fb:e9:1a:2a:bc:
         0b:80:8e:a7:54:8a:5c:8c:ee:af:14:8c:c5:2d:3c:72:b8:11:
         65:b4:c3:a8:5a:b1:66:ea:19:0b:2a:a3:d1:da:ac:5e:c3:38:
         1c:30:20:64:9f:a3:59:0e:66:b6:dc:a4:b2:81:ac:1a:7d:7f:
         fa:e9:00:4b:73:2d:00:3c:e7:86:ad:b4:be:28:fe:b4:62:9f:
         a4:96:e7:03:4f:10:c9:1e:70:82:51:12:bf:d0:7d:81:77:9b:
         8a:3c:99:8a:cb:3e:45:8f:39:20:d9:f3:86:f1:64:07:43:8b:
         87:45:76:98:a8:d1:b4:41:4f:6b:e5:aa:de:6f:f6:da:b6:7f:
         f8:6b:85:77:ed:9b:b1:d3:95:2b:02:69:f4:8c:35:ca:df:8f:
         91:22:04:11:7d:6a:74:61:a3:b8:b9:f3:03:ce:18:ad:6b:05:
         13:0c:37:b4:13:2c:9e:66:0f:be:68:75:bf:1a:f7:a1:12:5b:
         92:77:27:64:12:a9:46:de:e6:40:d5:77:96:c1:a6:c6:d7:e8:
         61:6d:40:3d:d7:20:bf:5b:9d:70:32:80:7e:50:34:b3:06:f8:
         78:10:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:06:45 2025 by rpki-client