Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e2c6b733-3093-3b88-a09b-6789783fe662.roa
File:                     e2c6b733-3093-3b88-a09b-6789783fe662.roa (raw, json)
Hash identifier:          S9jdjtRh5QHOX8KKrnm3l6+xcnwhOcCn763ns0rNaCs=
Subject key identifier:   5B:17:F0:50:E2:03:29:33:6B:16:A7:47:B3:BE:F2:26:58:53:94:6C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FC39BD9E1494F544F95C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e2c6b733-3093-3b88-a09b-6789783fe662.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     12189
IP address blocks:        131.153.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c3:9b:d9:e1:49:4f:54:4f:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=3827a235-495e-469e-b8e6-311a021d3918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:da:c7:80:e7:eb:8e:bb:8f:d8:b8:6b:e2:
                    ce:f0:71:d4:cb:41:ba:6d:88:71:6c:4a:68:7e:3b:
                    bd:2a:ab:7f:3b:12:34:8e:58:3c:f1:c4:f7:ac:a8:
                    d9:8f:6c:82:93:3b:f8:0f:f7:89:c5:06:01:ed:61:
                    7a:ad:79:f3:06:5c:60:31:f9:28:72:b6:63:97:d4:
                    f0:f9:fd:16:4a:e0:26:cc:3f:40:39:cc:57:4a:bd:
                    61:d4:d2:1a:43:00:19:40:da:cd:fc:7a:d6:d5:9e:
                    22:72:1a:ac:1d:a2:32:51:4b:2b:b3:04:57:b9:77:
                    aa:07:a0:97:d6:0b:5f:c9:f4:9b:53:84:30:a4:3d:
                    3b:67:b1:85:d0:c6:04:c6:5e:9e:46:55:35:1e:82:
                    eb:60:25:6f:0b:a8:ff:02:7b:46:7a:4b:01:f7:1b:
                    7d:4f:16:6e:ed:d0:04:af:b2:64:6b:5d:ab:dd:0e:
                    ba:04:d2:77:75:41:1a:c8:a8:48:8a:d2:62:47:a8:
                    15:89:da:d5:ec:21:e9:07:d1:d8:9e:0d:b2:10:fb:
                    58:50:6c:0f:6a:1a:89:d7:a2:3e:9f:45:77:02:cf:
                    27:24:af:f1:7d:df:1b:eb:c0:74:07:49:a2:e4:c4:
                    2d:74:5b:2c:eb:6b:32:97:04:08:25:0c:28:5d:94:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:17:F0:50:E2:03:29:33:6B:16:A7:47:B3:BE:F2:26:58:53:94:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e2c6b733-3093-3b88-a09b-6789783fe662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:fa:eb:d1:68:49:c8:a6:cf:55:39:1a:f0:ca:e6:fd:b9:
         a3:04:08:7e:02:71:8d:d5:80:3d:99:47:1c:12:13:12:f9:33:
         66:6b:24:5d:69:0d:1b:e3:74:0d:91:62:a0:11:bb:ae:6f:1d:
         58:17:cc:4a:99:a6:06:ed:82:03:01:e6:50:ef:33:ab:4f:96:
         87:57:98:4a:dd:9e:c8:68:fc:4d:de:a8:c1:e1:fc:25:93:be:
         e5:10:7f:78:e2:cc:ec:ca:28:bd:18:c9:9c:e1:6a:f7:68:21:
         12:44:f0:80:ec:c2:b8:f3:95:27:1b:00:40:78:11:fc:1a:3e:
         b3:7f:4e:e6:c0:25:0c:28:1c:3f:c5:cf:6a:8a:e6:49:cf:37:
         2c:e4:fa:60:80:88:b3:98:9c:34:58:fa:6a:1c:c2:ad:5f:51:
         88:58:c4:87:61:1f:14:49:9e:7c:88:fc:66:25:30:8b:b7:6c:
         5c:0f:cb:d9:f8:78:e1:27:a7:78:1b:97:ee:7d:23:40:5f:5c:
         4a:69:5c:f6:45:5d:70:2d:a5:c1:d4:0b:05:1b:8d:e6:88:57:
         cb:d7:55:b6:18:ed:c2:d9:67:20:b7:6d:75:cc:45:3d:e6:5b:
         94:c4:6e:91:eb:b7:4b:61:4d:68:53:51:30:65:47:e9:a0:4b:
         e1:62:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:27 2025 by rpki-client