Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2648bcfc-1b96-338f-8be3-71fe32034269.roa
File:                     2648bcfc-1b96-338f-8be3-71fe32034269.roa (raw, json)
Hash identifier:          YhYMwzpYolNSJld8vLSe3FUZ6bT0M/lEz9R06tf2PII=
Subject key identifier:   F3:6F:9A:E7:BC:7B:DC:34:1B:4A:2E:52:68:7C:AC:6C:19:A6:92:F1
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F43285849EFFA16EF8FEDA1FF7EDC1990
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2648bcfc-1b96-338f-8be3-71fe32034269.roa
Signing time:             Thu 22 May 2025 11:55:55 +0000
ROA not before:           Thu 22 May 2025 11:55:55 +0000
ROA not after:            Wed 20 Aug 2025 11:55:55 +0000
asID:                     203724
IP address blocks:        131.229.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ef:fa:16:ef:8f:ed:a1:ff:7e:dc:19:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May 22 11:55:55 2025 GMT
            Not After : Aug 20 11:55:55 2025 GMT
        Subject: CN=bf6ea22c-af1b-4548-9be0-627fa83a45e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:3d:26:c8:36:5e:82:ad:1a:f2:20:81:92:
                    b5:32:18:6b:72:7c:31:27:84:fb:28:f6:12:00:48:
                    f0:b7:33:e7:f7:9d:ed:26:fc:35:a3:45:c4:00:4f:
                    00:a8:a7:f1:3e:59:3b:c5:38:b4:f2:ba:ea:1e:eb:
                    24:df:c8:66:b9:b0:cb:3f:41:9d:35:12:ba:2b:ae:
                    ee:4c:9c:cd:cf:de:8a:df:1b:8d:1a:41:96:be:e3:
                    f3:8c:5f:d9:ad:33:42:50:d5:a3:5b:ba:46:1c:f9:
                    1b:4a:51:17:6a:ff:32:3c:2c:c7:c5:11:3e:d9:87:
                    7c:57:27:7c:25:83:e3:96:89:c9:a2:6d:44:f3:e0:
                    6a:7c:a9:4d:33:35:46:3a:d4:d2:4b:dc:6a:f0:d3:
                    3b:66:9a:d5:96:68:0c:ff:c5:da:fe:27:e5:61:5b:
                    cb:60:4d:c6:7a:c9:20:1e:2e:5e:79:0b:c6:93:29:
                    16:e9:cb:59:25:d7:73:84:ff:b8:12:04:87:60:81:
                    5a:29:80:74:83:fb:9d:87:77:41:a3:77:af:60:47:
                    10:87:96:07:90:27:21:16:ab:c4:60:83:3f:22:8e:
                    0b:a5:c9:ee:18:f0:25:2b:f6:2f:5d:be:97:9a:59:
                    71:c3:cc:c1:83:d8:8f:47:29:d8:ce:83:55:8b:70:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:9A:E7:BC:7B:DC:34:1B:4A:2E:52:68:7C:AC:6C:19:A6:92:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2648bcfc-1b96-338f-8be3-71fe32034269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:2f:ab:7b:d2:1d:cf:a0:f4:61:e9:1b:be:4d:a3:96:28:
         ac:f5:93:f8:d8:69:38:fa:8e:15:8c:bc:e6:f7:2e:88:f4:d6:
         3d:c4:a1:60:29:66:60:e6:d0:4b:88:e0:8a:f0:3a:a9:1e:97:
         ca:45:16:05:54:aa:74:76:3f:0a:e1:1b:a3:9d:d3:f3:36:ae:
         b6:12:13:45:ab:a0:28:b2:13:b6:38:a6:06:37:15:23:58:99:
         ff:47:6e:67:bc:29:cd:cb:6c:ca:9e:59:30:c0:6e:2d:04:06:
         d8:93:4a:97:58:e8:d3:79:58:18:93:90:20:b3:2f:8a:04:05:
         86:ca:ce:08:a7:01:b6:58:1c:f9:db:0c:aa:3f:b3:02:64:b7:
         ef:24:7c:a1:02:90:5c:2e:37:03:36:ce:ce:2f:38:3f:7a:3e:
         ce:6b:c0:7b:7d:50:66:9a:ad:e1:0f:9e:d4:59:ef:89:51:c3:
         c3:fb:ec:0a:00:a9:a0:12:a0:37:86:5f:64:f1:63:aa:07:0c:
         36:66:58:f5:41:b5:68:51:8a:b2:ea:db:c7:5c:6a:54:27:7d:
         9d:41:9e:a5:2c:e7:8e:54:c5:e1:a0:92:a6:4f:04:34:f7:de:
         f2:bb:48:87:47:8e:1d:35:3c:60:19:62:b8:a3:51:76:e3:fa:
         09:a9:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:30:17 2025 by rpki-client