Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7ce5ed78-68bc-3458-8726-df71a413551a.roa
File:                     7ce5ed78-68bc-3458-8726-df71a413551a.roa (raw, json)
Hash identifier:          FlILb9OB1ovC2guwj5BuGxJmcnVcOLeJB6h41nO3l0c=
Subject key identifier:   C7:DD:B9:DF:EB:5E:6D:60:D4:14:C5:7D:58:8B:6C:6A:75:18:CA:25
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849EBEA4A7DB2BE6193F8A6C200
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7ce5ed78-68bc-3458-8726-df71a413551a.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     394566
IP address blocks:        131.153.39.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:4a:7d:b2:be:61:93:f8:a6:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0c63d968-b257-4868-b3c2-ae648a99c6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:e4:fe:92:b8:3d:b1:76:c6:36:55:46:86:
                    9a:c9:96:bb:04:9d:5a:14:33:26:2c:6d:35:fa:de:
                    d8:5d:8c:f4:38:90:c8:ac:48:d5:5f:3c:29:62:03:
                    72:34:95:4b:d4:2d:06:97:74:e3:d8:6c:67:f9:be:
                    3b:33:58:08:5a:53:0d:33:c7:48:48:4f:8b:ff:56:
                    64:5b:1a:86:ea:be:7b:b1:15:d5:b0:4f:dc:44:e8:
                    87:9c:7f:8f:a4:91:51:20:fa:69:93:a5:3d:ba:5b:
                    05:66:c4:2a:bf:cd:7d:ca:da:0f:6d:08:49:e0:34:
                    bf:27:9a:8a:6f:e4:3a:65:61:f3:42:a5:33:aa:58:
                    30:e1:2e:85:a7:9c:d8:8f:f3:f0:d8:04:78:a4:c6:
                    b3:bc:a6:0a:94:a0:08:3a:bc:93:12:34:cf:fc:bc:
                    cb:31:7d:19:a5:c7:57:56:56:83:68:42:17:e1:1f:
                    74:0e:77:8c:04:1f:dd:c9:b6:be:8a:1d:6f:72:51:
                    8f:1a:4a:9f:14:5d:17:5c:c0:64:89:98:d4:77:de:
                    dc:b1:72:21:b1:1f:7a:b4:7c:23:e8:b9:b5:29:0a:
                    53:ee:27:4b:77:65:6f:91:9e:1a:20:fb:2d:6b:81:
                    d4:c1:c7:a0:65:21:a5:39:3c:fd:27:bc:d5:7b:ac:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DD:B9:DF:EB:5E:6D:60:D4:14:C5:7D:58:8B:6C:6A:75:18:CA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7ce5ed78-68bc-3458-8726-df71a413551a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:21:97:e3:38:35:16:c4:37:8f:d1:be:ae:f6:8a:c7:11:
         7a:7f:eb:ac:dd:a6:6e:bb:e9:9b:25:02:c7:90:2d:8c:83:59:
         55:a9:cb:c3:f3:d9:db:d3:d0:53:14:dd:91:ec:9d:00:6f:a0:
         55:f4:ea:27:bf:ba:14:b7:63:1a:ad:92:e4:c6:ea:76:eb:02:
         41:f5:39:a3:df:2a:ba:34:ec:dc:d9:91:d0:ee:46:6b:ed:5f:
         5b:bc:95:86:de:ee:51:aa:6b:60:ef:20:aa:be:a6:42:ea:df:
         7e:ef:55:4c:1e:44:f6:95:04:f1:7f:31:05:64:ae:83:b1:2f:
         05:8d:d3:6b:ea:e6:a0:4d:fe:f6:00:2e:6c:54:38:99:25:51:
         4d:f9:2d:b5:bb:61:74:03:7d:3e:de:7d:bc:f6:d9:9f:33:63:
         89:1e:00:70:e9:4f:6d:c3:e7:90:2e:1b:a5:0f:2f:f6:b5:0e:
         db:8f:a8:6a:3b:e0:e9:b9:68:0f:2b:c7:2e:56:9d:6d:b8:58:
         4f:70:b8:48:42:95:6c:2a:13:b1:c6:e4:fb:5d:f5:d6:8c:4b:
         d5:bf:72:0e:ee:c1:d2:4d:62:08:3a:ad:71:c4:82:c6:c4:5e:
         64:99:ca:ba:45:fc:a8:44:27:d2:3d:06:b5:40:3b:56:72:74:
         ec:b1:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:58 2025 by rpki-client