Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa
File:                     b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa (raw, json)
Hash identifier:          AUPqzzQFvHe7iZf6ih1u9x00+4QJ0viQDeh+DBJ+SLM=
Subject key identifier:   2A:13:3B:E7:8C:1F:38:E1:D7:57:44:A0:D7:6D:2F:A4:08:DC:FE:DA
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849EBEA4ECF06E481145AECBD98
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     59210
IP address blocks:        131.153.85.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:4e:cf:06:e4:81:14:5a:ec:bd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=c583ea48-901f-42ae-9781-d0bb42bd8a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:a8:89:14:38:2b:c1:fb:7b:6f:55:23:51:
                    2d:41:8e:d5:51:b3:b8:58:d4:98:c0:c9:3b:a4:e7:
                    75:4e:06:a0:7a:37:a8:6e:a0:dd:a9:3c:3d:b2:2f:
                    74:76:9a:70:1b:f2:df:85:bb:db:89:96:24:d3:f4:
                    d6:a1:83:4a:4a:77:f1:28:f1:69:5f:e4:ed:50:17:
                    d6:39:c6:57:36:c1:2e:64:9a:e9:ff:18:a2:03:f2:
                    c4:b5:d1:ac:7b:37:fb:19:08:ad:b0:53:7c:a5:10:
                    14:bf:7d:d7:b1:8c:b0:93:f7:d0:c3:42:13:ab:d1:
                    b8:0d:e7:ff:f0:1b:f2:87:e9:5e:5f:e5:d7:6c:de:
                    ae:a7:f4:a2:cd:4a:29:8f:bc:e9:18:49:c3:ee:c5:
                    6e:42:bb:aa:5c:e3:89:5b:4f:8c:f0:92:4d:9e:30:
                    03:fa:1a:1b:7b:2c:47:b4:bc:51:6f:2a:0d:26:94:
                    9f:08:dc:ef:27:8c:4f:bc:f8:25:84:d2:3f:0c:fe:
                    66:9c:77:08:fc:e1:ec:54:36:60:c1:60:ac:ea:1f:
                    6b:43:e7:04:c0:68:74:c5:ae:24:66:b8:ac:f1:fa:
                    27:5e:27:9b:db:d1:63:82:45:15:00:8b:f8:83:48:
                    9b:66:5a:fd:b0:e7:59:85:38:d7:0b:46:2c:8b:97:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:13:3B:E7:8C:1F:38:E1:D7:57:44:A0:D7:6D:2F:A4:08:DC:FE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:0a:5b:bb:72:1d:31:93:74:88:ab:7e:16:41:c5:ce:4b:
         fc:95:ee:33:52:3b:7a:d0:6e:b5:18:92:80:8d:9c:f4:64:2f:
         be:12:c2:bb:80:b6:07:ac:35:23:18:c9:2c:73:f0:93:83:20:
         b4:99:51:35:c7:86:78:fc:e6:97:0a:43:ab:29:2e:64:29:c9:
         12:13:2d:4f:6c:8b:7d:4f:91:7b:58:95:2b:87:20:df:f0:e5:
         0a:0d:b1:cf:36:c9:e9:52:39:da:80:e7:5f:d8:e5:47:39:a8:
         b0:a5:cd:68:71:21:fd:ad:39:78:67:2b:f8:57:90:57:a5:30:
         9e:84:f4:92:2b:6c:97:68:97:1d:9d:1a:7e:f2:46:ae:92:b7:
         fb:ef:89:57:40:dc:00:59:78:93:5f:bb:32:3c:1c:35:73:d9:
         a6:2b:b5:6f:79:f9:5b:be:bd:bb:51:3e:08:d6:6a:81:51:0c:
         a6:ec:fa:0d:04:af:69:72:ce:c9:f6:8e:6d:a0:5c:72:a4:49:
         0f:a7:6a:44:23:38:d3:fc:79:07:fa:70:1d:7f:27:5a:87:ed:
         03:fd:35:f8:9d:c8:88:29:98:f8:98:65:d5:ea:87:22:40:b2:
         ea:d1:a3:22:b9:15:22:93:13:05:54:ad:a2:3b:76:08:13:6b:
         a9:2d:cf:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k7PBuSBFFrsvZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
YzU4M2VhNDgtOTAxZi00MmFlLTk3ODEtZDBiYjQyYmQ4YTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2SoiRQ4K8H7e29VI1EtQY7VUbO4WNSYwMk7
pOd1TgagejeobqDdqTw9si90dppwG/LfhbvbiZYk0/TWoYNKSnfxKPFpX+TtUBfW
OcZXNsEuZJrp/xiiA/LEtdGsezf7GQitsFN8pRAUv33XsYywk/fQw0ITq9G4Def/
8Bvyh+leX+XXbN6up/SizUopj7zpGEnD7sVuQruqXOOJW0+M8JJNnjAD+hobeyxH
tLxRbyoNJpSfCNzvJ4xPvPglhNI/DP5mnHcI/OHsVDZgwWCs6h9rQ+cEwGh0xa4k
Zris8fonXieb29FjgkUVAIv4g0ibZlr9sOdZhTjXC0Ysi5d4VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCoTO+eMHzjh11dEoNdtL6QI3P7aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYjQ3ZjFiMzMtZGM3Ni0z
MzY0LWJhNGItMTA1NzhiZjM0YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMOClu7ch0xk3SIq34WQcXOS/yV7jNSO3rQbrUYkoCNnPRkL74SwruA
tgesNSMYySxz8JODILSZUTXHhnj85pcKQ6spLmQpyRITLU9si31PkXtYlSuHIN/w
5QoNsc82yelSOdqA51/Y5Uc5qLClzWhxIf2tOXhnK/hXkFelMJ6E9JIrbJdolx2d
Gn7yRq6St/vviVdA3ABZeJNfuzI8HDVz2aYrtW95+Vu+vbtRPgjWaoFRDKbs+g0E
r2lyzsn2jm2gXHKkSQ+nakQjONP8eQf6cB1/J1qH7QP9NfidyIgpmPiYZdXqhyJA
surRoyK5FSKTEwVUraI7dggTa6ktz50=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:26:34 2025 by rpki-client