Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
File:                     2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa (raw, json)
Hash identifier:          X8HbAd/btcdoqRE1L8NIAh6OfDFbE63KmDXQCTtusNQ=
Subject key identifier:   6D:8E:7C:C5:E1:E2:E7:53:7A:43:78:6B:F1:B8:13:FE:1A:25:C1:E2
Certificate issuer:       /CN=a31515c0-c04f-41e6-958d-172bcd0e21de
Certificate serial:       010D0C9F4328584A119AB259B92A5A06B7A49200
Authority key identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     31886
IP address blocks:        131.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b2:59:b9:2a:5a:06:b7:a4:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a31515c0-c04f-41e6-958d-172bcd0e21de
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=953cb3e2-bce6-4e82-8fa6-fc18acc7f701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:03:9e:2c:1c:d5:8e:01:1c:57:4e:f0:63:
                    b9:cf:d5:84:1c:b0:c1:1b:a3:c0:0e:5f:92:0d:05:
                    cc:5f:33:1f:ce:0c:e9:f5:14:99:7e:d4:47:52:51:
                    05:a5:14:c7:54:2f:ad:39:f2:61:9e:df:ab:bd:42:
                    5e:55:0c:a5:db:a2:8e:42:c8:e0:45:38:23:a6:df:
                    fe:4a:f3:79:f2:12:38:24:0f:69:f0:6b:0a:5b:94:
                    26:50:49:4f:34:83:73:05:29:d7:44:f9:21:d4:c0:
                    b4:ff:62:71:5c:90:7f:c3:ed:b9:1d:8c:9b:a4:b3:
                    65:bc:37:24:77:88:80:81:bd:98:12:72:3e:25:4f:
                    cb:91:0e:e0:fa:f3:69:39:e4:b0:42:28:66:7c:aa:
                    cf:70:0e:e9:70:64:32:a4:9b:e6:ef:da:c2:73:7e:
                    96:ab:d7:aa:c1:a5:92:ef:35:10:5b:40:de:8c:a6:
                    18:c6:fe:89:dd:b7:24:fa:e1:01:9d:36:c9:b1:c6:
                    ce:73:65:0e:1e:b5:d5:4d:9e:35:31:8e:6d:11:45:
                    0a:32:d5:d6:29:13:df:47:df:1a:27:41:1c:b7:5c:
                    62:73:ec:7b:4f:ce:9b:c1:74:a3:b2:fe:cf:4f:f1:
                    47:0d:4f:bb:e9:0b:3d:80:47:e5:6a:07:0b:aa:35:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8E:7C:C5:E1:E2:E7:53:7A:43:78:6B:F1:B8:13:FE:1A:25:C1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.crl

            X509v3 Authority Key Identifier:
                keyid:34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:16:90:e1:87:75:57:07:80:74:9f:66:2c:e3:75:2f:03:db:
         98:57:db:d7:53:a0:ff:b2:ee:be:50:8a:be:8d:a3:a9:be:aa:
         ff:18:69:42:08:55:f3:3f:5b:f4:cb:ea:1c:95:f6:5a:d6:6e:
         76:4e:2f:43:0c:6b:24:ec:43:43:e2:a7:3e:38:b1:50:e8:e7:
         f4:68:e5:62:a2:bf:a3:db:be:bc:02:cf:21:3c:bc:87:f2:d7:
         b6:5c:44:f1:57:01:30:0d:dc:7f:88:2b:45:bf:77:9b:f2:d3:
         dd:fb:8b:ea:16:d3:90:45:e3:78:c0:85:4b:db:9c:00:1d:1b:
         fd:a3:1b:6d:e8:b2:0a:f0:f4:21:24:d9:1c:88:8e:ea:2f:93:
         47:81:55:c1:47:f0:a7:d4:fc:0f:35:8a:b4:63:b8:03:32:c9:
         25:44:3c:7d:7a:bb:e0:f0:c4:a5:47:a6:b6:3d:21:22:bf:06:
         40:0b:07:29:22:19:16:b5:5d:7f:be:23:71:76:cb:49:49:b7:
         b3:71:5e:5c:d2:91:2e:aa:6d:62:d4:34:98:08:f4:90:7a:d8:
         06:b3:13:4a:b4:68:a2:83:f9:e2:70:9d:3d:8a:0c:26:18:5c:
         14:0b:be:68:6b:92:6c:3e:3a:0d:d6:19:e2:33:25:2f:e7:c8:
         08:f2:09:90
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoRmrJZuSpaBrekkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMxNTE1YzAtYzA0Zi00MWU2LTk1OGQtMTcyYmNkMGUy
MWRlMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
OTUzY2IzZTItYmNlNi00ZTgyLThmYTYtZmMxOGFjYzdmNzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN4Dniwc1Y4BHFdO8GO5z9WEHLDBG6PADl+S
DQXMXzMfzgzp9RSZftRHUlEFpRTHVC+tOfJhnt+rvUJeVQyl26KOQsjgRTgjpt/+
SvN58hI4JA9p8GsKW5QmUElPNINzBSnXRPkh1MC0/2JxXJB/w+25HYybpLNlvDck
d4iAgb2YEnI+JU/LkQ7g+vNpOeSwQihmfKrPcA7pcGQypJvm79rCc36Wq9eqwaWS
7zUQW0DejKYYxv6J3bck+uEBnTbJscbOc2UOHrXVTZ41MY5tEUUKMtXWKRPfR98a
J0Ect1xic+x7T86bwXSjsv7PT/FHDU+76Qs9gEflagcLqjXEMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG2OfMXh4udTekN4a/G4E/4aJcHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMzE1
MTVjMC1jMDRmLTQxZTYtOTU4ZC0xNzJiY2QwZTIxZGUvMjkwNmJmM2MtYzg3Yy0z
OTc3LWFmNmItZTQzZTUzZjAwYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTMxNTE1YzAtYzA0Zi00MWU2LTk1
OGQtMTcyYmNkMGUyMWRlL2EzMTUxNWMwLWMwNGYtNDFlNi05NThkLTE3MmJjZDBl
MjFkZS5jcmwwHwYDVR0jBBgwFoAUNBAF21FCqku36VRWjdKCghVc8JUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMzE1MTVjMC1jMDRmLTQxZTYtOTU4ZC0xNzJi
Y2QwZTIxZGUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg2gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVhaQ4Yd1VweAdJ9mLON1LwPbmFfb11Og/7LuvlCKvo2jqb6q/xhpQghV
8z9b9MvqHJX2WtZudk4vQwxrJOxDQ+KnPjixUOjn9GjlYqK/o9u+vALPITy8h/LX
tlxE8VcBMA3cf4grRb93m/LT3fuL6hbTkEXjeMCFS9ucAB0b/aMbbeiyCvD0ISTZ
HIiO6i+TR4FVwUfwp9T8DzWKtGO4AzLJJUQ8fXq74PDEpUemtj0hIr8GQAsHKSIZ
FrVdf74jcXbLSUm3s3FeXNKRLqptYtQ0mAj0kHrYBrMTSrRoooP54nCdPYoMJhhc
FAu+aGuSbD46DdYZ4jMlL+fICPIJkA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:52:35 2025 by rpki-client