Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa
File:                     eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa (raw, json)
Hash identifier:          AJrEReNPUwgRJZD2rLaS7Hh7diaszu42LUMuHXXlsaU=
Subject key identifier:   12:A1:17:2D:60:18:69:3F:CF:B7:F0:5F:65:0C:42:13:A9:86:AE:4D
Certificate issuer:       /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial:       010D0C9F43285849D42FAC938686B7D130165C00
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     399381
IP address blocks:        131.201.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:ac:93:86:86:b7:d1:30:16:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d162b620-f65d-4601-b065-69663552f4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:e5:31:37:c4:bb:df:a3:05:57:96:87:4b:
                    d3:a1:e2:29:6c:11:b5:67:c4:1d:17:74:25:ef:fe:
                    14:63:83:59:fc:56:90:f1:e6:47:a0:7d:a2:c2:16:
                    24:dd:21:17:24:c1:6e:c0:8b:e1:e3:fb:a7:96:5b:
                    32:b2:4b:d7:32:aa:83:05:53:a9:54:7b:8c:05:13:
                    ad:be:d5:a4:f1:d3:4d:0d:18:cf:57:cb:6d:93:5c:
                    eb:b4:db:47:5e:12:f0:9b:3f:25:3d:84:cb:dd:ea:
                    0a:38:f4:4c:5b:7b:ca:62:97:bb:e0:ff:81:d3:dd:
                    a8:ca:ce:03:aa:47:30:d0:1d:3a:28:1d:a1:0d:13:
                    f1:ee:56:66:99:35:39:51:fb:24:84:e5:38:1e:ce:
                    98:b9:c5:09:08:6d:da:8b:95:34:42:28:04:ff:d8:
                    f1:c3:4b:e4:93:9d:f5:4f:e2:50:90:95:f9:48:c0:
                    54:af:2d:70:e7:cd:ca:8c:1c:9e:d6:be:9f:94:6c:
                    a5:51:2f:24:c3:c7:17:e6:28:1a:0a:11:ff:9b:4c:
                    70:f4:ed:aa:06:56:9b:70:b5:b1:0d:e7:87:84:2d:
                    5e:42:2e:34:50:ec:35:43:25:38:09:9a:4a:63:03:
                    55:eb:05:bb:47:b3:c3:64:98:9c:84:b0:5c:d7:1c:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:17:2D:60:18:69:3F:CF:B7:F0:5F:65:0C:42:13:A9:86:AE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/eb9fcfec-5778-3749-b83e-c4e84c7fbb8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl

            X509v3 Authority Key Identifier:
                keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.201.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:a9:0e:9a:67:7d:48:0c:d1:f0:34:b2:2d:48:17:c1:d8:
         a0:1e:42:c4:85:d6:7a:93:53:05:f2:d2:2b:4b:60:6a:aa:f9:
         44:31:43:2c:4f:10:5a:cf:92:75:7b:2c:fc:e2:38:ed:c3:ea:
         bc:fb:b0:6a:00:8e:62:99:42:8c:49:42:30:73:f9:38:fc:05:
         eb:ac:e4:0a:ac:ff:3c:6f:34:1d:c0:50:e7:c9:9b:c4:c7:6c:
         49:60:82:14:f1:ce:3a:2d:22:41:90:fc:07:58:b4:d3:31:ce:
         36:00:7b:9a:b5:59:c9:7c:1b:a3:c6:2e:00:61:c1:f5:9d:f9:
         f5:36:9a:a3:3a:60:c2:85:8c:25:1a:39:4d:bb:ff:3a:8b:39:
         77:3e:55:e6:54:70:fe:e2:b7:da:c3:63:c7:ed:e2:b1:c3:1b:
         86:1a:cd:b6:08:1a:17:fb:2a:25:89:a3:9e:0d:fa:8a:fb:45:
         ea:66:17:80:3e:2e:cb:d6:3d:19:9e:cf:98:76:0a:50:9f:83:
         dd:df:71:b5:1b:9b:bc:e2:10:3b:fd:28:3a:62:69:e8:97:7c:
         0a:59:cd:6f:de:34:2c:67:b8:17:ff:d1:4d:6b:b4:d1:da:11:
         ed:0e:2a:98:2a:41:b6:d5:7f:ee:39:40:76:ca:fd:d2:2c:cf:
         dc:72:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:11 2025 by rpki-client