Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa
File:                     b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa (raw, json)
Hash identifier:          WgWIZs9sG/WFwe1s57bqdVlvPzYzHDjS3rMrHUqrok4=
Subject key identifier:   E3:C6:F1:50:E9:CA:EC:35:7F:8F:67:8E:4C:90:90:11:20:68:CC:92
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C59C5C47948180569E97EA0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa
Signing time:             Wed 16 Apr 2025 19:27:52 +0000
ROA not before:           Wed 16 Apr 2025 19:27:52 +0000
ROA not after:            Tue 15 Jul 2025 19:27:52 +0000
asID:                     203724
IP address blocks:        131.229.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:59:c5:c4:79:48:18:05:69:e9:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 19:27:52 2025 GMT
            Not After : Jul 15 19:27:52 2025 GMT
        Subject: CN=53059f33-2bbf-4bbc-98b1-fdf6285e63b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:92:90:d1:ca:4b:4a:c9:61:ad:76:7f:d4:
                    dd:8b:c7:c8:6b:6e:77:a2:cf:00:86:ab:b9:d1:c9:
                    15:eb:e7:29:91:6e:21:28:f0:59:b6:08:96:53:90:
                    70:69:e7:20:16:2a:1a:43:13:f5:13:af:b8:67:b7:
                    0a:b7:99:82:d6:fd:ea:5c:4a:89:f4:a6:09:cd:b5:
                    d1:21:42:4d:5a:3f:5d:c8:57:76:e7:44:a8:e8:12:
                    6b:9b:ee:34:7e:48:1e:cf:64:0d:7c:59:91:1a:95:
                    74:b1:10:f5:a6:42:36:80:b2:1d:ab:ee:57:b3:ce:
                    cc:6c:81:78:42:68:2c:65:19:02:e4:12:6b:c0:4d:
                    04:cb:8f:2e:e5:68:b2:84:43:6c:b8:7d:10:c3:c6:
                    dd:5b:a2:9c:92:f2:c8:6a:e1:62:33:e6:97:6d:ba:
                    39:bc:2c:29:fb:37:ba:de:e0:31:71:1e:06:78:46:
                    8e:83:cb:d3:f4:0c:bd:0a:e0:e7:a7:f0:13:b0:7a:
                    50:8d:0e:cf:c5:ef:38:e7:ec:8d:8d:7f:29:79:88:
                    dd:c1:e7:6f:59:b3:2d:c9:90:24:b7:70:6d:07:7e:
                    fc:d6:ea:1a:2a:33:cf:fa:11:9a:87:b5:4b:13:a8:
                    15:1f:be:53:b9:bc:49:3c:0b:f7:34:cc:d8:1d:68:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:F1:50:E9:CA:EC:35:7F:8F:67:8E:4C:90:90:11:20:68:CC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7153a6e-9513-3ac8-8610-53d4d3e0b912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ed:d8:b8:9f:f8:48:21:c5:15:15:03:75:e5:bd:ca:c8:9b:
         8d:84:46:08:31:1c:9a:07:45:5d:70:5d:29:1d:73:c0:e3:db:
         da:e1:e0:16:0b:2e:65:4c:17:6a:d8:7f:c8:41:48:26:ce:b2:
         63:c1:85:be:b8:d7:3d:92:12:79:ad:58:2e:e6:7b:29:6c:60:
         90:b1:27:5b:98:12:2e:ae:83:d9:a8:eb:27:58:72:1e:1e:94:
         41:3e:8d:3e:49:76:a3:92:56:d2:3e:b5:a0:38:5e:63:dd:cc:
         66:ef:f7:89:8f:b9:48:c1:96:c1:f0:54:32:7b:cd:cf:1e:59:
         22:5b:92:e6:09:db:b5:41:bc:ed:ce:00:a1:86:24:c4:55:f9:
         b4:3f:16:13:04:87:e9:dd:db:ff:23:50:bc:62:93:13:a3:8d:
         a6:c5:47:d8:b7:0f:7e:b5:8f:46:62:ba:c5:b5:8f:bf:ad:03:
         0b:b6:c8:4e:11:53:c6:3f:e4:ff:2d:e9:4d:21:3f:d5:ad:01:
         eb:45:8f:90:0c:e5:a0:35:72:9c:0d:db:1c:f2:ac:e6:d0:a2:
         bd:10:2a:ab:f5:64:c4:16:01:90:f4:30:68:b1:1c:65:5d:3a:
         27:a1:d9:a7:ce:e2:b8:e6:e2:80:0c:27:d0:cc:e6:bb:a3:83:
         0c:90:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:59:55 2025 by rpki-client