Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa
File:                     3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa (raw, json)
Hash identifier:          xgQ/C7jXtLvzu2j2MGuvL/tVmmTrZcMPeASnmWyY/JU=
Subject key identifier:   F3:22:D9:E8:E1:51:9D:FA:14:F9:6A:47:0D:23:FA:4C:1B:E7:D7:65
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C63F3DA5007345BA3959E2C
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa
Signing time:             Wed 16 Apr 2025 19:48:23 +0000
ROA not before:           Wed 16 Apr 2025 19:48:23 +0000
ROA not after:            Tue 15 Jul 2025 19:48:23 +0000
asID:                     203724
IP address blocks:        131.229.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:63:f3:da:50:07:34:5b:a3:95:9e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 19:48:23 2025 GMT
            Not After : Jul 15 19:48:23 2025 GMT
        Subject: CN=17c0ef7e-ae9a-4f84-918a-0821b9081d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:21:e9:c5:a7:f3:99:4a:90:83:d0:23:59:
                    af:8c:7a:fb:94:78:6a:56:bf:b8:fa:a2:46:84:7b:
                    20:12:4e:e6:a8:1e:1c:37:a3:6a:dc:de:9a:c8:d1:
                    12:7f:2e:30:1b:0c:7f:8b:fb:f2:0d:3a:24:db:55:
                    60:5a:61:76:99:21:ce:48:9f:3a:f0:8e:d1:6c:3b:
                    a9:a9:1d:bf:96:64:3b:45:6d:d4:c7:08:51:74:bd:
                    2a:a2:20:e2:1c:ff:84:0d:39:41:ff:e2:0b:09:00:
                    03:6f:19:5f:42:32:bf:aa:68:c2:05:50:0c:98:bf:
                    d7:58:e3:f7:2d:c5:c3:d2:9e:1c:96:71:09:44:26:
                    0a:98:3b:6b:eb:cf:69:09:ed:c8:66:91:8e:b8:12:
                    24:b3:4e:b8:6a:ec:f4:bb:68:07:8d:5e:bd:fd:46:
                    fd:92:27:8e:16:24:39:b5:0a:f8:84:78:cf:8c:d7:
                    cd:90:55:d6:43:d1:2e:fc:7e:f8:40:34:12:7f:e3:
                    a4:06:19:8a:6f:d1:a0:f1:41:36:90:48:cb:bc:5f:
                    c9:e7:f3:22:65:94:ca:cc:b2:63:88:b5:59:e6:2c:
                    19:56:fe:3d:72:59:3c:af:21:51:ca:ba:07:7d:4b:
                    84:9f:1a:db:c4:a1:cd:4c:55:ce:58:32:74:62:f5:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:22:D9:E8:E1:51:9D:FA:14:F9:6A:47:0D:23:FA:4C:1B:E7:D7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:47:ba:a1:1a:de:3e:be:52:71:67:1a:b5:23:e6:02:4b:
         b3:e2:7e:11:a1:21:b3:99:93:7b:d3:45:88:e4:23:48:f6:91:
         09:e5:cd:cc:23:fa:5c:9b:a4:9d:8a:cc:6d:18:01:dd:2a:df:
         8f:65:9c:05:ae:27:17:b5:56:12:da:90:e9:af:be:30:e3:89:
         e9:14:e8:10:d7:62:d4:cc:a9:c0:3e:f3:41:6b:8f:98:b8:f5:
         c4:a1:e3:91:8a:4f:fb:d1:af:65:3b:4f:a8:f3:22:19:46:1a:
         51:b6:51:fe:3f:78:ed:3f:31:98:be:02:96:66:a6:9b:5f:19:
         8b:d1:a6:d5:ec:5e:b1:d9:d8:d1:1b:79:62:6d:56:42:9e:91:
         53:e6:4f:4f:39:92:b1:ea:0f:14:56:5b:11:26:15:39:a2:98:
         40:72:85:7b:b2:ae:7b:6d:38:ea:35:d8:57:a2:1c:90:ba:8b:
         04:b9:91:8f:1a:b4:a6:9b:3f:9e:ca:c9:50:a4:ff:d6:fe:55:
         e8:c9:62:a0:f9:60:90:16:05:51:5b:1a:f3:b7:ef:08:7e:0c:
         c0:17:3e:82:e0:64:ed:ab:d7:57:72:09:b8:1b:1a:80:ee:eb:
         d8:07:06:8b:5f:83:3b:24:61:04:21:34:36:9b:3d:40:a3:a5:
         7a:b8:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:50 2025 by rpki-client