Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
File:                     b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa (raw, json)
Hash identifier:          l+6NHAunpB7rrTgpcG640S0NHTRC7/ELvey+vFCr4yQ=
Subject key identifier:   E4:AF:D0:FB:0B:5F:D0:74:A3:DB:8D:CA:4D:44:0A:04:7B:E4:AA:65
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C66E3F4E6149145960A4328
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa
Signing time:             Wed 16 Apr 2025 19:54:18 +0000
ROA not before:           Wed 16 Apr 2025 19:54:18 +0000
ROA not after:            Tue 15 Jul 2025 19:54:18 +0000
asID:                     31898
IP address blocks:        131.229.189.0/24 maxlen: 24
                          131.229.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:66:e3:f4:e6:14:91:45:96:0a:43:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 19:54:18 2025 GMT
            Not After : Jul 15 19:54:18 2025 GMT
        Subject: CN=24f1492e-c330-4cf6-9135-3cb439e5dfdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d4:c4:ff:ee:99:ba:74:11:81:eb:26:dc:0a:
                    66:7b:85:f2:17:ac:04:27:39:5e:0f:b7:18:9f:1c:
                    1b:83:af:b3:0a:63:6c:d2:24:26:37:91:3f:c4:0f:
                    46:4f:b3:18:b8:42:0f:c5:6c:ce:db:ac:ea:f4:d1:
                    af:bf:8b:3d:95:75:c9:fb:42:f0:92:7a:1f:55:13:
                    ea:87:de:54:e3:74:3a:2c:be:6b:97:ec:bd:d1:01:
                    40:44:df:dc:6c:5d:ff:01:23:50:e9:a2:43:a4:41:
                    da:76:af:c7:8f:93:8e:df:59:66:37:94:11:ff:9e:
                    cb:ac:1f:d4:ff:15:70:1c:53:78:5b:cf:5e:4b:1a:
                    b5:10:f4:b2:4f:6d:2e:c2:ef:49:c0:14:84:b3:21:
                    65:2b:3a:27:3c:22:8d:97:9f:c3:ea:cf:a2:70:76:
                    ec:7f:14:71:08:50:eb:b1:34:2b:59:96:97:d5:21:
                    82:7b:16:52:35:d9:0b:52:5f:29:9d:54:4e:e5:02:
                    fc:44:e0:27:bc:48:d3:e1:31:51:a2:24:86:4c:3f:
                    22:70:ee:ca:cf:56:a8:5e:54:6b:6b:3b:aa:a7:4f:
                    48:7e:58:a9:50:84:5b:ad:5c:25:78:42:07:1a:81:
                    fa:db:66:6e:cb:f4:3c:fe:35:a8:56:fb:d1:23:5d:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:D0:FB:0B:5F:D0:74:A3:DB:8D:CA:4D:44:0A:04:7B:E4:AA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/b7cdcb78-7816-3f00-aec1-4c0866d82a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.189.0-131.229.190.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c4:a3:c3:37:fc:dc:7d:76:ee:97:67:25:55:f8:92:01:ec:
         d9:fd:b1:da:84:2f:84:82:2e:87:49:21:73:7b:4d:a1:28:3d:
         8f:ea:92:ab:9b:98:a1:e9:09:3c:70:bd:23:1b:b7:c9:11:b1:
         c1:33:ed:93:cd:bf:f0:0c:f5:41:80:ea:95:26:48:f1:a7:e6:
         6f:a2:7f:a9:0c:89:81:05:75:b1:b0:3d:94:23:38:3d:9c:c5:
         04:04:2d:3e:4d:14:0e:23:48:ec:4f:30:a9:99:eb:db:b5:fe:
         fd:67:9d:90:a8:de:f8:6a:ed:67:65:9b:4d:02:b9:26:7e:7d:
         90:8a:f4:6c:66:74:6b:01:a7:de:1f:99:25:2d:19:98:5f:79:
         be:56:1a:26:57:9b:47:a9:1a:e5:21:d5:17:9b:81:b4:cf:db:
         ef:24:62:a0:b6:f3:a1:e9:97:f9:1e:47:76:38:d1:56:fd:94:
         d0:1b:37:0c:4b:cd:a2:0e:a7:d8:19:40:ef:94:b2:70:9a:0e:
         94:c5:a0:b3:7c:1f:cb:ce:35:b4:82:8e:62:81:05:2f:fa:24:
         f1:79:8f:55:c1:a0:d0:6d:82:48:ad:7d:30:0a:bb:16:f3:d1:
         00:06:b9:46:1a:69:74:33:42:80:6a:f4:6b:36:a5:97:0d:16:
         09:8b:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:28 2025 by rpki-client