Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa
File:                     33cfc89a-77af-32ce-967f-624f38d50607.roa (raw, json)
Hash identifier:          mECovh4OSS7pbV4DtCik7lVSjmB0WSXH3zrC0WLaVbE=
Subject key identifier:   5D:F4:82:3D:77:75:51:55:F7:D4:5C:43:9D:66:22:A1:DA:5B:17:F9
Certificate issuer:       /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial:       010D0C9F43285849D594F2960EA56A80BB2B2200
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     399381
IP address blocks:        131.201.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:f2:96:0e:a5:6a:80:bb:2b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=bb82383a-7062-4afc-9288-1e5ed92b0ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:60:1e:5f:be:0f:22:fd:a1:b6:63:1c:34:
                    03:7d:d0:55:78:44:78:62:30:04:c5:65:84:6f:df:
                    01:7e:fd:70:bd:37:9f:65:66:39:5b:ad:34:7a:53:
                    f8:50:60:94:e2:b9:e3:9e:dd:1d:46:d1:c8:02:4b:
                    73:23:1f:19:57:e2:2b:bc:09:69:0e:2c:ad:75:36:
                    15:41:97:d9:06:05:e4:f7:ff:b4:dc:f9:52:b9:55:
                    6c:05:f4:42:67:a3:3b:a4:68:30:a0:ea:61:45:31:
                    84:5a:ca:11:ad:f0:bb:81:cf:e7:b5:09:26:e9:f1:
                    d0:11:21:8e:f9:6f:56:51:b5:c1:4e:3a:fe:7b:9c:
                    58:e1:df:2a:b8:5f:47:81:77:44:e2:44:27:c5:2f:
                    88:22:ec:f5:85:00:60:00:b2:fd:8f:7d:fd:01:6e:
                    d2:70:75:47:91:c2:32:4f:cd:bc:c2:dd:a4:09:66:
                    cc:fc:bf:f5:48:b3:f3:c8:8c:c3:23:81:3a:22:14:
                    84:06:68:8e:35:86:7c:74:e8:5e:7e:8d:0e:48:f4:
                    9b:8c:fc:8b:ae:06:18:fd:2d:dd:aa:13:38:13:df:
                    0c:71:36:9e:d3:64:3b:a0:64:15:fe:5e:82:59:9e:
                    e3:ff:63:c5:8e:30:c7:a4:00:91:8f:94:45:33:df:
                    9e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:82:3D:77:75:51:55:F7:D4:5C:43:9D:66:22:A1:DA:5B:17:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl

            X509v3 Authority Key Identifier:
                keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.201.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:99:8b:19:2f:de:84:22:af:f0:a5:37:07:ad:3d:bc:10:6a:
         38:38:19:7e:44:af:98:19:de:13:be:d3:d4:71:f4:9b:3a:75:
         e5:47:c2:c4:18:6b:58:2f:26:10:69:38:cd:84:1d:b9:1a:f9:
         c3:86:8f:20:a7:59:fa:e7:d6:d2:19:6a:e1:61:91:19:1e:03:
         8b:a6:97:7a:48:6a:53:d1:e8:27:b0:37:83:60:2d:26:44:02:
         28:a0:94:e5:92:09:76:71:7c:4d:5f:6f:40:d8:4c:ce:4e:54:
         32:de:57:ae:22:c2:d7:db:61:7b:dd:30:dd:7a:d2:2c:9e:b3:
         43:94:b4:d4:7b:ae:6b:10:90:6d:5d:42:3e:b6:b5:a1:b7:0d:
         c2:cd:ac:19:a2:3f:76:68:fb:e0:c3:6d:26:b2:aa:b8:bb:f7:
         49:dd:82:60:9c:4c:be:57:6e:0f:49:41:ed:91:4b:08:85:30:
         73:32:7a:3d:76:d8:23:30:f9:cd:cf:2b:eb:c3:55:df:4b:c7:
         51:ac:a0:fe:fc:41:a1:82:58:b9:14:e5:9f:86:f4:46:fe:cb:
         b7:4d:91:54:a6:6d:d2:73:53:38:d5:02:90:c7:cf:fd:3a:54:
         0f:c1:43:84:ee:ed:89:87:7b:5e:78:e8:b4:79:74:98:57:02:
         db:eb:1e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:20 2025 by rpki-client