Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/fb94f34c-703f-3abb-9e10-7701e9a60545.roa
File:                     fb94f34c-703f-3abb-9e10-7701e9a60545.roa (raw, json)
Hash identifier:          khhiCFvmWg2pU6vO3LAO0fZEL20Sd602btGhCODkU/M=
Subject key identifier:   2A:D8:82:36:54:0D:1A:78:81:A0:10:FE:08:BA:DB:72:0F:74:44:54
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849B844BAFDBE1A1C3B1D944100
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/fb94f34c-703f-3abb-9e10-7701e9a60545.roa
Signing time:             Fri 02 May 2025 13:01:00 +0000
ROA not before:           Fri 02 May 2025 13:01:00 +0000
ROA not after:            Thu 31 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        134.231.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:44:ba:fd:be:1a:1c:3b:1d:94:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: May  2 13:01:00 2025 GMT
            Not After : Jul 31 13:01:00 2025 GMT
        Subject: CN=6a580039-096b-442a-ad5f-0e84c7fba6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:6d:86:0c:a1:44:55:1f:c0:d4:95:17:d8:
                    b9:d3:a8:5a:3b:74:22:19:33:bb:4c:f0:30:7a:21:
                    d5:56:c2:0e:fe:a5:97:e0:67:4c:da:e4:93:7e:ba:
                    0b:25:a3:a9:e4:de:bf:de:4a:de:05:f1:41:48:16:
                    67:29:0c:05:cc:9f:15:c4:54:cf:2f:7b:cd:10:5c:
                    8e:d8:73:8f:16:dd:7f:75:da:b7:5d:0c:d5:8e:db:
                    51:4e:bc:cd:ab:d6:1c:68:70:54:aa:a9:1e:c5:41:
                    89:2a:46:20:30:fa:50:c3:2e:0f:ee:7e:dd:f3:b2:
                    d3:1b:72:30:55:73:9c:8c:17:d8:6a:09:52:5e:5c:
                    11:a1:87:94:55:1d:5d:27:a3:0e:4d:48:f0:31:63:
                    17:59:d5:a1:f0:e1:ba:7f:ac:0d:08:7b:e3:12:60:
                    83:98:61:be:8b:7d:1f:e3:9a:e6:a5:5d:eb:0f:4f:
                    8a:f7:5f:ec:f0:eb:6a:40:84:d2:e1:7b:60:fe:72:
                    cb:c4:d2:41:c1:38:2d:32:e1:21:20:77:5f:ea:30:
                    53:5f:d9:58:de:d2:76:2d:56:f9:de:08:54:5b:07:
                    3b:58:f9:16:11:ab:3b:a9:6e:a7:27:5f:15:cb:bc:
                    5a:d8:71:15:f0:ba:ea:83:ed:4b:9d:85:04:48:c9:
                    db:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:82:36:54:0D:1A:78:81:A0:10:FE:08:BA:DB:72:0F:74:44:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/fb94f34c-703f-3abb-9e10-7701e9a60545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:3b:89:cc:99:b9:f1:dd:1f:fa:79:88:fb:8f:bf:ba:4e:
         62:b3:6e:a1:5a:d4:5c:0c:99:54:eb:ba:28:3e:6d:8e:a1:8c:
         63:00:54:a6:97:4f:33:9b:43:c0:67:2c:fe:d8:fd:fc:1c:30:
         74:f7:81:6d:22:c1:c1:66:b7:28:34:53:b1:a7:29:2c:a8:14:
         5c:e7:87:34:f1:46:b0:60:66:54:1a:42:21:9a:eb:1b:0c:3f:
         1e:2a:72:4e:40:1f:25:ae:c1:0d:17:ec:80:3e:fa:5c:f9:0f:
         96:b7:87:9d:47:3a:ad:64:75:b4:04:d8:c5:18:c5:5a:58:9f:
         22:1e:1b:c3:47:18:21:1e:4f:58:1e:fd:5b:0d:a2:f4:ba:5d:
         ef:30:39:37:38:09:00:c3:ae:23:ff:aa:91:5b:04:29:23:10:
         18:13:63:42:e0:09:b9:52:a4:c6:c6:0b:67:3e:92:af:27:ea:
         c1:d1:81:69:70:48:c5:b3:81:ad:4d:87:0c:2f:c2:3c:8c:c7:
         3a:6e:06:df:59:c2:51:d7:91:26:10:18:be:9a:54:72:3c:37:
         44:bd:d4:86:34:dc:a1:99:f2:87:44:8d:f0:0f:6b:92:29:67:
         bf:3d:5a:97:72:26:8e:1d:2c:fe:ac:ad:fa:60:c3:0e:93:e7:
         c7:88:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:53:31 2025 by rpki-client