Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
File:                     ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa (raw, json)
Hash identifier:          RKP5HClFPNn+KqdSooZxshqWdnEVkx86nd74MvqbPVQ=
Subject key identifier:   F4:C5:62:A6:EC:F1:4F:6B:1E:5C:FE:D5:E3:C4:B6:60:15:8D:EC:0C
Certificate issuer:       /CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
Certificate serial:       010D0C9F4328584A18954BB2D3AF5AC958CA7478
Authority key identifier: 21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     36786
IP address blocks:        132.203.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:4b:b2:d3:af:5a:c9:58:ca:74:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8c0be8-820f-49cc-b759-a1cd0b68028b
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=3b672911-4593-4528-820b-135cbc45bed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:99:56:1d:63:62:05:0f:2d:2a:e1:31:f6:
                    36:31:cc:60:be:00:4f:db:c5:b7:95:6c:13:a7:8c:
                    33:62:41:47:15:33:34:62:c4:f5:96:b1:8b:23:e0:
                    57:f6:20:42:84:0d:6e:ce:2e:64:9c:c2:78:3a:39:
                    cd:5c:11:28:da:98:c0:92:e3:9e:34:e1:73:68:ad:
                    b9:61:29:f5:5d:65:44:17:2b:a1:c2:a2:28:72:01:
                    74:7a:c2:2f:83:3c:ed:e6:89:f9:ac:62:8c:ff:66:
                    4e:5e:69:cc:cf:c4:79:92:e3:fc:42:81:f7:5d:9a:
                    4b:b1:fb:e1:f4:2f:6a:4a:67:8c:da:e4:28:e9:ce:
                    c5:fb:72:83:c4:0d:30:cc:4a:59:99:3f:e0:17:63:
                    22:c2:34:ce:cd:9f:87:0e:0a:87:cb:cc:52:0e:9f:
                    b5:c4:a5:6e:db:0f:dc:d0:36:b9:21:6d:84:2c:52:
                    cf:05:fa:ec:91:14:ea:21:1c:3e:2f:42:c7:de:3e:
                    ba:b8:45:6f:a9:47:92:5c:4b:d3:5e:14:37:a9:86:
                    39:e1:0a:5c:86:93:6b:df:7e:32:11:10:11:c6:f2:
                    c2:55:b8:cc:28:82:e0:0c:de:20:00:48:1f:a7:dc:
                    12:44:11:4a:85:e5:ba:69:f4:de:46:05:0a:e8:36:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:62:A6:EC:F1:4F:6B:1E:5C:FE:D5:E3:C4:B6:60:15:8D:EC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/ca1f1613-d9f3-3dc4-895d-c1ee800070ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b/be8c0be8-820f-49cc-b759-a1cd0b68028b.crl

            X509v3 Authority Key Identifier:
                keyid:21:FA:95:74:7B:0C:2F:90:B0:C4:D7:05:92:0F:D1:5A:63:F6:71:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be8c0be8-820f-49cc-b759-a1cd0b68028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.203.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:65:47:4b:06:78:3a:a3:16:1f:8d:a1:e8:e1:04:03:4b:b8:
         8f:97:00:c8:e9:ec:f2:fe:41:5a:31:b3:03:53:42:6b:0e:6c:
         62:5d:8d:0b:8f:e5:a4:cc:65:4e:49:b6:70:f1:c0:ca:f8:b0:
         c8:d6:56:87:41:e1:10:0b:71:0e:a7:30:9c:83:1b:08:66:fa:
         39:ef:15:e9:1a:d1:3c:f8:85:a6:08:e6:69:2a:b0:54:9f:13:
         b2:ef:04:b4:73:0a:8a:6b:b2:6b:ad:41:38:6c:6a:02:3f:bf:
         32:9f:b3:df:e9:3a:73:d0:df:71:b4:d3:29:92:9a:62:b2:14:
         44:69:2b:75:6f:cd:0c:f3:93:ce:e1:6d:aa:cc:c2:0b:8b:15:
         5f:bd:6a:b4:22:9b:8a:75:c1:38:2d:0d:ef:c1:fd:b2:1c:aa:
         61:dd:ce:31:ff:bd:73:26:97:d3:cc:90:63:c6:77:91:f9:ac:
         72:b6:01:e0:61:f1:d4:d4:e6:5b:98:31:de:08:fd:28:35:d9:
         58:d7:85:44:55:58:68:75:f3:04:79:ff:93:6d:b9:46:97:a8:
         5b:77:3f:fa:b3:0b:8e:8f:db:77:e5:4e:8f:50:d5:e9:6f:87:
         0b:64:33:7a:56:84:23:73:16:c9:65:43:c3:53:e7:94:30:ee:
         6b:2a:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:00 2025 by rpki-client