Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa
File:                     cc47fe57-b252-3fe7-a59a-1a298b383d54.roa (raw, json)
Hash identifier:          1f3npLXqmqSeEl/C57O7mOUAbbUWLyLgrLQweyBSqtA=
Subject key identifier:   4F:71:71:15:2C:7B:C8:8C:E2:14:07:AA:76:96:D2:42:35:4E:02:B7
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849EBEA4C41432B0D55050E5B60
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     207134
IP address blocks:        131.153.96.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:4c:41:43:2b:0d:55:05:0e:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=ec71ad0b-1e77-491e-8e9b-cfc02141d4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:42:ac:82:59:68:ba:e2:87:df:bf:23:90:
                    2a:c4:20:4e:6f:23:8e:4a:ed:59:f0:db:66:01:f8:
                    3a:12:8a:2d:5b:29:7b:2a:e3:ae:fe:78:e3:54:40:
                    a4:46:c1:d7:7f:c2:78:7f:e5:c1:95:36:50:3a:fd:
                    2d:fd:b9:83:54:42:68:43:c9:b9:22:6d:7a:f2:d7:
                    ca:49:6d:12:1b:24:40:e3:1e:ab:0b:38:34:7b:f6:
                    97:33:a7:2f:a6:d4:9f:e0:1c:86:4c:8f:63:82:58:
                    66:82:0c:83:5e:fd:07:00:ae:b9:46:52:4a:2e:64:
                    99:e8:0a:31:b7:53:47:82:50:cf:33:e7:f8:28:4a:
                    bd:80:a1:72:11:76:ce:81:a2:3a:9b:0e:f8:b9:70:
                    de:a0:5b:d7:39:49:84:f1:4e:7f:18:2b:54:bd:9b:
                    e4:97:67:b7:7f:87:41:50:04:de:a2:cd:b6:98:f7:
                    38:45:d7:19:49:21:9e:be:5d:87:7f:db:2c:eb:eb:
                    c2:1a:c4:32:4a:2c:f5:cd:cc:d1:c5:77:c0:9d:b3:
                    2d:b2:3c:80:95:b9:b6:31:b8:94:67:6b:e5:0f:40:
                    d4:c3:f4:a7:da:58:0b:8a:7b:13:cc:d1:e1:af:da:
                    36:5e:3c:fb:87:bc:f2:e7:68:76:9e:54:32:21:72:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:71:71:15:2C:7B:C8:8C:E2:14:07:AA:76:96:D2:42:35:4E:02:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:9a:8d:bd:90:13:25:70:37:57:f1:fc:a6:fc:d4:1b:74:
         88:25:6f:7d:69:aa:2f:7a:8f:e1:4e:3c:c3:10:13:67:74:6c:
         ed:d3:c7:16:e8:1e:32:5c:30:10:d3:d0:79:84:32:9c:7b:54:
         0c:bf:6a:93:2d:58:78:03:ba:c2:8d:3e:37:99:c5:a7:72:f3:
         cc:33:13:a7:aa:d5:3e:1e:32:42:bb:33:38:9d:4f:b1:e4:75:
         12:e3:45:22:42:f8:46:48:de:e1:67:76:6c:ff:74:1e:f4:9c:
         37:5b:4a:f6:7d:15:06:56:36:93:6a:5a:d7:af:cb:dc:97:80:
         ba:39:57:31:db:0d:ab:6b:17:06:fb:67:55:fd:60:ac:b4:3a:
         a6:f4:12:87:a4:e7:5b:bf:25:9e:20:53:fc:b4:9a:27:5d:81:
         9f:84:15:f9:df:1b:66:ea:e2:21:77:dc:c9:08:28:e5:4a:3b:
         f3:fb:91:dd:b3:74:6a:ac:45:84:e2:05:94:29:e1:99:44:63:
         25:27:f0:d9:37:08:b8:5b:47:14:77:2d:ff:8e:ef:c7:dc:ef:
         96:1a:06:bb:18:c5:ba:f2:1f:7e:d2:41:70:31:08:8d:0f:a9:
         10:29:f5:94:e2:e1:b7:06:46:63:64:0c:5d:2e:21:bc:32:6f:
         23:cb:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:38 2025 by rpki-client