Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2692bdbe-8afd-3f5e-b265-600ca6a53069.roa
File:                     2692bdbe-8afd-3f5e-b265-600ca6a53069.roa (raw, json)
Hash identifier:          Nyz9Zs5ncb7TaaHZcjtOaJDcvNEsCuGpnYWzyQV+Aqg=
Subject key identifier:   33:C6:7F:EC:8F:FB:98:4B:98:65:A9:FD:A6:12:1A:BA:A4:D3:4D:37
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C6E803E1E42DBF3D026F580
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2692bdbe-8afd-3f5e-b265-600ca6a53069.roa
Signing time:             Wed 16 Apr 2025 20:09:38 +0000
ROA not before:           Wed 16 Apr 2025 20:09:38 +0000
ROA not after:            Tue 15 Jul 2025 20:09:38 +0000
asID:                     31898
IP address blocks:        131.229.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:6e:80:3e:1e:42:db:f3:d0:26:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 20:09:38 2025 GMT
            Not After : Jul 15 20:09:38 2025 GMT
        Subject: CN=7e4fef84-cf5c-4037-b154-de1e728154dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:0c:ad:5f:09:45:0d:50:a6:05:64:78:ed:
                    49:57:0c:0d:c5:21:d4:82:60:5e:4c:19:30:56:7a:
                    b5:0a:93:14:76:4b:b1:81:c7:88:6e:e3:6a:21:b0:
                    ef:b2:4d:23:04:c1:16:ef:e6:5b:2d:5f:bb:5a:35:
                    0d:4e:81:e7:ab:24:d7:c2:35:b7:6f:e0:da:23:79:
                    a2:2d:de:63:49:25:7b:03:8c:7e:47:ee:50:39:7a:
                    b6:37:cb:79:01:89:75:1b:3f:8a:a3:86:6d:e5:68:
                    8b:7e:fd:3e:ad:b9:00:90:24:15:ad:4c:7c:00:ec:
                    30:b8:da:35:fe:d6:78:08:d4:50:7b:66:ba:af:db:
                    82:cd:42:38:c7:8f:e5:79:af:2c:a8:ac:f0:e3:2e:
                    09:27:4d:1f:e6:1d:f1:e9:3e:02:9d:76:4c:fd:b0:
                    1d:4a:43:ad:7e:47:97:ec:69:f0:5c:1e:3f:a6:03:
                    fe:d3:4e:66:02:98:13:dc:f9:e8:e7:16:a2:95:66:
                    55:76:9e:90:a8:35:1b:95:58:aa:6a:74:48:8b:bf:
                    2f:02:4f:42:61:25:ac:27:69:ff:1f:1f:c1:2f:1a:
                    cd:b3:31:3c:54:9e:c5:2c:06:b7:49:53:c8:0c:3d:
                    47:fc:6b:fe:2e:7e:5b:c1:67:35:db:0b:8e:08:09:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C6:7F:EC:8F:FB:98:4B:98:65:A9:FD:A6:12:1A:BA:A4:D3:4D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2692bdbe-8afd-3f5e-b265-600ca6a53069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:e8:f1:64:92:1d:66:75:a4:fb:e5:63:96:bb:24:1c:aa:
         ea:b8:d1:49:dc:09:82:9e:f3:ff:7d:b2:57:77:03:f3:52:61:
         bd:28:35:37:89:0e:ab:c7:d0:c2:ab:77:59:27:24:33:98:f5:
         e5:38:8d:92:21:23:86:f1:68:bc:d6:61:50:e0:e2:bf:cd:4e:
         cf:69:b0:98:51:c6:62:30:b2:94:2b:7b:6e:7b:6a:04:7b:d7:
         12:a6:e3:bb:00:04:f6:90:63:e1:47:54:35:bd:99:be:fb:5a:
         6a:c1:0a:a5:9b:70:f4:3a:c6:91:1b:eb:a2:db:20:a7:13:32:
         c4:46:59:5f:b6:3c:8d:bd:42:26:aa:f0:52:9d:61:24:3f:50:
         ba:4a:e3:c0:c5:88:ff:f3:20:12:12:8f:c7:ed:89:8a:e7:e1:
         2a:4b:8c:44:4e:4d:a7:b6:20:64:41:1c:e9:ce:b7:95:e1:e4:
         a8:3c:95:26:2c:d6:b8:75:02:78:46:83:be:be:5d:7c:e4:a7:
         5a:0b:c0:30:78:c8:28:5d:ca:fe:a5:fc:cf:e2:c6:ab:90:31:
         59:49:e9:6d:62:34:e8:ae:92:02:37:d7:9e:cb:5d:53:a5:85:
         ee:50:8d:15:e3:01:8a:73:64:32:05:17:15:a4:e4:f2:7e:7e:
         62:c7:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:17 2025 by rpki-client