Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
File:                     fd024f7b-7f82-397a-b676-0e4b1349bccf.roa (raw, json)
Hash identifier:          tdMLCtn69CJFC+D/S7ZGMw5WcnfT5zndZNruNnc0YAI=
Subject key identifier:   4E:DC:19:4A:F1:B9:43:DA:76:A6:3F:AC:55:B6:7F:06:ED:60:3E:1C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849F17FB0CAD69EA6D0AA3D9180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     0
IP address blocks:        131.153.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b0:ca:d6:9e:a6:d0:aa:3d:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=85001163-02e8-4066-bc9b-71037b8137ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:6f:04:be:35:58:7f:c3:c5:e7:1d:0b:34:
                    52:2c:c3:b4:42:98:06:6e:6f:b9:5c:89:a9:25:df:
                    d7:b0:8d:16:a8:4d:5a:6a:bc:57:c6:c5:61:11:1c:
                    58:73:77:bf:7c:63:9f:6b:a8:c1:fc:13:a9:7a:a4:
                    77:77:da:3d:69:e2:72:db:1c:58:3c:c7:8a:8c:ff:
                    b7:68:a3:4a:50:a9:bc:de:a2:d8:20:c1:1d:ee:5b:
                    3d:9f:3a:41:6c:f3:fa:ec:dc:fb:7f:c5:8e:b5:7a:
                    44:d7:a0:40:4c:79:ca:c8:fd:67:c3:4a:e7:85:f3:
                    c0:55:46:45:15:50:8b:d5:69:80:9e:8c:c0:91:1c:
                    50:a0:9c:b6:49:5e:fb:72:e9:f4:63:45:52:a0:44:
                    8f:d8:d4:88:6d:0f:a4:b9:8e:69:1d:1b:28:80:47:
                    e1:a2:29:c5:c3:08:2d:ec:8b:45:10:58:2b:12:b1:
                    10:e1:51:4d:ee:6a:c3:98:16:ce:b9:1b:91:08:7e:
                    ab:e8:2d:c1:70:61:ff:9b:bd:fe:7b:30:5d:07:02:
                    ab:6c:85:f3:0b:ef:08:c8:cb:04:5b:81:85:78:f7:
                    35:39:be:c4:7e:ee:c5:ed:28:9b:d7:57:2c:57:4a:
                    cd:38:e2:45:09:58:9c:e8:c0:28:7b:f8:6f:f5:28:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DC:19:4A:F1:B9:43:DA:76:A6:3F:AC:55:B6:7F:06:ED:60:3E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:19:f5:8f:b7:ad:91:87:bf:7b:a9:99:d4:88:17:10:75:
         3f:e0:10:3c:0d:70:36:a9:8d:40:9d:b2:a2:aa:47:02:62:7f:
         b2:45:63:ca:48:bb:97:97:46:31:51:8d:b4:42:0c:c0:e9:6e:
         8a:62:64:5e:92:84:d5:9a:ca:e8:70:13:e9:82:57:1d:c0:25:
         b3:c9:de:92:c9:c1:73:f0:7f:5a:1d:15:e7:30:f0:b3:6e:c3:
         43:25:4f:18:e3:1f:f0:fe:fe:3e:4d:82:a0:ef:98:ad:b5:34:
         81:dc:bd:c8:5d:13:14:1d:10:f0:2a:4c:3d:dd:0c:4a:b4:5b:
         c6:c2:67:c7:16:f5:39:37:e3:53:47:77:ba:c6:6e:3a:2a:e6:
         1d:bc:8d:d4:84:93:38:f2:fc:9f:a0:70:6e:fc:b0:18:b5:83:
         e4:64:3b:eb:51:01:ad:79:dc:aa:bd:64:b3:37:36:0a:cc:c6:
         fa:10:77:a8:fb:8c:3b:f8:00:0b:3b:ce:64:39:21:26:f7:5e:
         9c:71:21:7c:86:e7:5b:a0:ab:b2:3f:1e:67:69:2d:64:28:56:
         b6:15:6e:82:5d:fd:ee:64:04:b9:73:c6:23:ef:f8:73:d3:c8:
         eb:e0:9f:3d:b8:4b:82:dc:52:f3:67:69:0a:84:05:53:2b:69:
         fd:cf:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:48:52 2025 by rpki-client