Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa
File:                     a36775dc-21a9-3010-a61d-2eea3636aea2.roa (raw, json)
Hash identifier:          V8U2JQ8JGkMf/M1ZtiYh9Q0j1FQOdCSmOa2qw/XtgxU=
Subject key identifier:   C9:81:AF:76:CA:B5:17:B9:7B:47:C2:F3:AC:C3:18:9A:7C:79:AD:A3
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584989A2606DF7844A53173CAB00
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa
Signing time:             Tue 15 Apr 2025 20:06:44 +0000
ROA not before:           Tue 15 Apr 2025 20:06:44 +0000
ROA not after:            Mon 14 Jul 2025 20:06:44 +0000
asID:                     203724
IP address blocks:        131.229.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:a2:60:6d:f7:84:4a:53:17:3c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 15 20:06:44 2025 GMT
            Not After : Jul 14 20:06:44 2025 GMT
        Subject: CN=631d807a-668e-4640-8f88-69c49e025e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cf:fc:e4:19:18:9f:18:5c:36:14:f9:c1:50:
                    72:54:2b:26:d9:ef:64:9c:e8:32:ec:51:03:a8:12:
                    0c:79:75:0c:be:42:3f:a5:68:cb:09:1d:d6:76:e6:
                    4a:8c:fd:ef:11:51:1e:c5:09:1b:d3:7d:35:aa:3b:
                    8e:8c:c7:f0:dd:ec:d9:6b:da:f0:bd:a6:5f:10:8e:
                    e8:fe:47:37:5c:22:b1:f9:21:ea:d9:83:e4:ff:cf:
                    15:75:6a:c6:bd:6e:4e:c1:41:e8:be:7a:a2:07:33:
                    b4:4c:84:42:fe:05:42:a5:29:88:6d:a1:ac:00:99:
                    83:90:7e:ac:c4:71:27:ea:e8:00:2a:6f:5b:a7:a4:
                    fd:02:1c:f3:b7:03:ad:09:73:d2:0b:ed:bc:99:da:
                    0a:ce:72:f7:bd:a1:b2:5d:cb:7f:99:15:17:a3:d7:
                    50:fa:f4:2d:1a:45:71:05:44:b0:51:46:7a:ba:9e:
                    b0:ee:1c:02:58:6a:3a:d6:dd:e9:0a:5e:55:61:ac:
                    eb:c8:93:da:fa:1d:4c:5c:9d:61:4e:9e:05:7e:0a:
                    cd:01:6a:86:ca:bd:af:51:6b:36:fe:9d:28:43:a9:
                    94:e2:f7:bd:6d:09:ce:9d:9d:1d:49:95:3c:db:6d:
                    c8:fc:6e:66:de:4e:05:dd:86:fb:2d:00:f3:98:eb:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:AF:76:CA:B5:17:B9:7B:47:C2:F3:AC:C3:18:9A:7C:79:AD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/a36775dc-21a9-3010-a61d-2eea3636aea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:91:b4:ef:fc:c9:f2:35:ee:6d:bf:67:25:f2:a6:69:33:
         26:0c:f4:49:61:8d:73:05:25:9c:63:cc:46:a1:0f:29:a3:fc:
         96:68:3c:60:8e:b3:91:17:3c:f6:ce:77:79:9f:63:9d:d2:06:
         14:85:a8:81:09:40:ea:4b:eb:37:b3:a9:c1:30:73:80:82:58:
         ee:a2:f5:6e:0d:8f:21:2c:02:fd:2b:88:d6:84:7a:b8:03:d1:
         cf:b0:f7:7a:81:fa:a1:3c:11:7b:f7:81:44:41:4f:be:02:f9:
         d4:5e:41:8c:29:c5:54:74:84:ba:92:22:d7:0d:1e:42:20:d6:
         48:bc:5e:b7:28:0c:99:8f:98:09:d0:bb:78:3b:ac:06:07:a1:
         05:87:7e:7e:e7:76:72:9e:69:14:b8:e7:75:19:e7:f0:07:91:
         c0:d9:d2:2e:a0:ee:20:52:bf:77:d5:b3:dc:1c:00:ee:cd:2a:
         cd:dd:e2:48:f1:b3:92:cf:14:01:58:b2:5d:ac:d7:0b:22:29:
         c4:ec:ac:ce:e4:33:27:b6:6a:6f:2f:b7:72:75:b6:38:02:47:
         4d:53:0b:7d:59:ad:70:6e:a7:79:b6:03:9a:ec:92:1a:b2:b5:
         4d:41:02:59:63:0f:64:c8:3a:ee:83:36:27:3d:fb:5e:0d:76:
         bb:4c:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:26:08 2025 by rpki-client