Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa
File:                     befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json)
Hash identifier:          timHADDyw1RUaCiyEgqb6PIsAWC9NK2dl0BFgAGfdnE=
Subject key identifier:   62:E1:F1:9E:89:C0:6E:6D:29:AC:13:13:2B:D5:8D:BE:BA:22:4B:54
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849F17FB673DC5A7740DAE6AB80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     19437
IP address blocks:        131.153.242.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b6:73:dc:5a:77:40:da:e6:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=6e68d54e-a576-4003-955f-0376d99e4e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:a3:d7:ac:28:75:51:4d:3d:8e:3b:86:94:
                    16:a6:bf:0a:50:2d:ef:01:26:81:4e:a3:f1:ab:6b:
                    00:64:f7:f1:cd:d7:a6:1f:92:4e:26:5f:a0:63:38:
                    25:78:68:8d:42:57:28:9d:21:1e:a8:d3:2a:84:23:
                    d3:1f:41:bf:bd:6e:f5:4e:6d:aa:4f:58:f7:c1:57:
                    fd:42:f2:40:09:12:99:00:f8:c3:87:67:b9:d7:f7:
                    67:f7:5a:3d:5f:97:cd:40:cd:de:af:b5:71:3c:40:
                    d3:ed:77:33:86:c0:be:b0:f8:f2:6d:6a:50:01:73:
                    49:d5:27:d4:34:0f:f8:81:1e:f3:54:b5:66:c8:4d:
                    83:45:40:3c:46:c5:97:a5:30:d9:7f:2a:db:b7:99:
                    67:e4:5d:09:fc:74:a7:44:37:0e:b7:05:7e:2f:ac:
                    88:fc:23:3e:b7:70:da:24:f1:da:f3:e0:4e:6c:ae:
                    60:ea:7f:8e:e1:90:7c:82:90:d9:2c:60:23:08:f4:
                    87:90:b1:70:ba:e0:bf:d8:fa:8c:c5:52:0e:6e:4b:
                    9f:1d:01:45:7e:e2:63:e6:fc:45:4c:da:6b:64:7c:
                    59:2a:9c:9b:d6:8f:3c:44:ee:e6:d9:6e:cd:96:3c:
                    6e:99:67:b9:9a:11:bb:7f:74:df:3e:29:d7:a5:51:
                    2d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:F1:9E:89:C0:6E:6D:29:AC:13:13:2B:D5:8D:BE:BA:22:4B:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:80:e7:96:c4:41:23:f1:d4:41:e1:db:e6:d2:ad:1b:a7:b5:
         df:46:8a:65:fc:27:63:fc:38:8e:a6:91:43:7a:c7:48:ba:72:
         6e:88:49:4f:42:9c:47:c4:2c:af:88:45:ec:77:47:33:57:15:
         cf:92:0e:f0:1e:53:06:22:65:57:ca:6f:c4:52:e2:a6:98:23:
         f1:5b:ef:1b:ec:98:af:10:6e:72:77:05:fc:7a:e3:07:d3:30:
         89:6c:a9:a9:f2:48:65:4d:f6:21:a9:2d:9e:dd:f8:2f:8a:43:
         a9:be:3b:5d:88:7f:f9:b6:a3:bc:0e:e4:04:be:5c:c4:93:93:
         5c:f9:59:fd:3e:0d:17:7d:24:32:bb:df:f9:c8:01:29:0d:27:
         f1:d6:b0:38:f4:01:4c:7d:70:87:8f:50:0d:4e:7d:53:f0:cd:
         dd:98:ad:b0:a4:81:ac:d3:2f:15:37:80:c2:17:94:4b:be:1a:
         86:a5:dc:aa:09:1c:33:08:96:02:e1:8c:f0:a1:63:01:94:71:
         c1:2f:52:2f:b6:3a:9b:16:78:c0:a5:dd:6c:a8:ef:cd:37:5d:
         55:02:c6:06:7a:be:c8:f7:cb:32:60:e0:68:f4:56:ee:93:b9:
         7a:6d:75:9f:4d:6a:7b:51:52:19:e1:e8:1f:39:fd:b4:cf:a5:
         53:f0:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:20:01 2025 by rpki-client