Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa
File:                     c5005106-9415-31d1-8d7a-361d6382eb35.roa (raw, json)
Hash identifier:          2dSJvSmPKJz+FwlRtjUORrHASJb2f0NHVIIv5ZMU6S8=
Subject key identifier:   D5:1D:BF:CC:88:7D:13:E2:FF:2B:2D:BC:DD:F2:96:1A:A7:A4:D2:AB
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F43285849CBCF97C98986FECB4D1679C0
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        131.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:97:c9:89:86:fe:cb:4d:16:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=7a0b13c8-aea9-4d06-9877-3afca41086d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e5:b4:76:12:a9:4b:3f:41:d6:ec:6a:9f:ac:
                    ef:73:45:51:30:28:0c:6e:d2:5d:4d:d1:5e:b9:de:
                    3e:67:66:8b:ce:58:4e:e5:b0:28:d5:9c:bb:b8:47:
                    30:47:c7:1b:91:85:41:4d:e8:2f:b9:82:a5:af:93:
                    1d:d5:9f:41:4f:e1:cc:5e:90:a0:1c:f7:5f:ef:9a:
                    ec:04:62:37:39:c5:95:60:cc:81:c8:ab:b3:03:59:
                    00:e7:c7:4a:e2:86:09:91:54:d6:75:b5:f1:58:74:
                    14:e6:15:5c:28:7e:f3:87:4e:9f:95:ef:96:e9:72:
                    e4:f7:5d:24:67:4d:18:fd:0f:e4:7f:11:be:24:cc:
                    8d:50:ae:86:8d:9b:ce:97:b3:99:7e:be:9f:11:ac:
                    e1:83:11:80:da:2e:4f:3f:f2:f7:a9:df:92:ab:db:
                    f3:d4:a1:0d:c5:d8:3f:b4:37:ee:35:2c:db:56:79:
                    af:b8:1f:80:66:fd:ec:80:74:a2:98:ee:01:c2:88:
                    bb:f2:8c:8b:5f:9f:de:53:f3:f8:0b:d1:0f:7a:87:
                    cf:1a:a2:23:fe:39:27:a8:79:ec:ad:79:64:e9:4d:
                    eb:9b:a7:50:61:c2:fe:48:c0:5d:7a:7a:a1:37:b9:
                    d6:de:08:bf:9d:4d:cf:fa:0f:7b:50:8c:f1:90:03:
                    ea:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1D:BF:CC:88:7D:13:E2:FF:2B:2D:BC:DD:F2:96:1A:A7:A4:D2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/c5005106-9415-31d1-8d7a-361d6382eb35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:e2:c3:a5:5f:01:b8:1d:aa:ef:0a:86:4e:df:d4:bf:a5:
         e8:36:9a:67:04:83:e4:1b:df:bb:05:ad:36:dc:91:01:d6:69:
         dd:ec:a3:d2:6e:c4:61:da:03:52:68:34:1f:25:f1:2d:24:9e:
         2d:ac:45:36:a3:ee:a0:a7:49:d3:d4:ff:5c:10:ae:13:d4:c5:
         21:8d:7c:19:b0:f2:09:dd:f7:ae:d4:a2:ac:1d:72:21:98:35:
         3e:b4:9d:25:ca:9e:f0:de:15:71:6a:8b:ef:c8:39:3c:26:89:
         db:e2:c3:c8:4d:52:cc:5e:70:ea:81:4e:87:1c:d8:53:50:f3:
         10:3b:a5:06:cd:e8:fc:b9:87:7f:2b:bc:3d:78:2c:7e:79:ef:
         37:f1:47:6d:f3:97:f2:04:4e:83:a9:02:92:97:21:e3:0b:4f:
         7a:75:6a:23:f8:b6:8b:58:6f:b6:f1:81:d1:3b:e1:9b:19:25:
         78:13:0f:bb:7e:57:24:88:22:c2:6b:d4:ed:68:93:15:95:72:
         cc:62:37:45:d0:c6:67:a1:02:59:3c:ee:42:d0:90:c1:04:fb:
         83:72:93:50:9d:66:2e:77:25:da:dd:41:25:3f:d8:de:3d:49:
         4a:3e:f4:51:b8:58:2d:72:5c:44:88:bb:7d:09:eb:5e:3c:37:
         fa:c5:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:39:13 2025 by rpki-client