Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/58b136c1-056b-39ea-bee5-62118806613f.roa
File:                     58b136c1-056b-39ea-bee5-62118806613f.roa (raw, json)
Hash identifier:          WMzOoIOhUrOKalouXwWBOy9GlUHeq9y1mPj4PtDiC2U=
Subject key identifier:   E0:ED:0E:EB:DE:89:42:8D:E8:CF:AE:5C:F0:26:14:F7:5D:2A:6F:BF
Certificate issuer:       /CN=231e7311-eefe-40ee-a478-3ca2852934bf
Certificate serial:       010D0C9F43285849CE9A46BF4A39E282109E50C0
Authority key identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/58b136c1-056b-39ea-bee5-62118806613f.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.190.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:46:bf:4a:39:e2:82:10:9e:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e7311-eefe-40ee-a478-3ca2852934bf
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=dfa4d804-907f-4bb8-bf10-7bdb494972ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:b4:28:a9:37:eb:5c:59:de:bd:53:8c:16:
                    a5:a2:90:6c:36:f4:05:fe:ff:92:c1:99:3a:73:b7:
                    df:5f:0d:d1:fc:9d:67:af:2f:b4:90:92:21:ad:28:
                    00:06:44:ca:36:91:5e:c7:70:c4:eb:4d:79:46:ee:
                    fd:39:4d:3d:0d:70:98:c7:10:47:ef:2c:11:42:46:
                    6b:4a:2f:ef:3c:13:4d:fe:65:28:41:51:e3:84:d8:
                    24:b6:31:8d:bb:23:b9:11:92:24:4d:28:93:8e:1a:
                    b3:8a:19:6c:2d:18:67:ff:d2:fb:39:bb:38:7e:f6:
                    79:3c:ee:87:8d:b4:1a:7a:5b:0c:ca:c1:cd:9c:81:
                    68:a2:8a:55:a7:a8:af:7d:7e:bc:73:29:b8:61:32:
                    ea:68:2c:01:fa:f1:8d:70:5a:8c:dc:f6:42:a8:7b:
                    b1:fe:f6:1c:a3:b8:0b:49:4d:3f:5b:f5:eb:cd:3f:
                    4a:0a:a1:34:fc:4d:96:9d:b3:a0:4b:58:f6:fe:10:
                    90:87:ee:ac:f7:b7:fb:a5:6a:ac:7b:15:75:a5:e5:
                    da:0f:70:5a:c3:1c:2c:65:16:be:89:3b:84:55:a2:
                    3f:03:e9:21:60:d4:03:1a:fb:eb:4b:17:71:4c:19:
                    fa:3d:c0:60:e2:10:08:63:1f:28:b7:03:0b:1c:5d:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:ED:0E:EB:DE:89:42:8D:E8:CF:AE:5C:F0:26:14:F7:5D:2A:6F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/58b136c1-056b-39ea-bee5-62118806613f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.crl

            X509v3 Authority Key Identifier:
                keyid:E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:9a:75:9c:b6:64:c1:39:d8:89:fa:2f:4c:3f:5b:09:31:
         15:24:61:fe:f1:71:6c:4a:6c:ea:d9:58:47:1f:5c:fd:52:ad:
         bd:e3:9b:3c:73:d7:91:0f:2e:f5:80:98:fd:43:fd:51:21:af:
         fb:49:08:a6:2d:c4:ec:a0:28:1f:ae:ed:1d:70:0e:c9:14:27:
         38:40:ff:d9:bf:dc:8d:85:d2:17:ad:53:3f:19:61:cf:91:71:
         db:3e:b2:fd:7d:c8:1b:28:1a:f2:91:30:ae:e4:6f:e5:e5:41:
         b7:ae:03:e2:39:f5:42:d9:f2:d6:7a:ae:27:62:17:cb:1d:3e:
         f4:14:85:52:b0:2b:4f:95:09:f1:26:e5:52:39:15:55:1a:31:
         10:8b:a7:a7:16:b9:26:3a:ba:28:70:69:2f:af:e3:c1:c2:83:
         42:ba:4c:36:98:97:4f:c6:9f:95:51:f1:c8:2c:38:bf:ee:15:
         ec:57:66:9d:80:ce:42:06:de:2b:51:04:84:b3:9a:0d:94:d5:
         fd:be:5d:9a:fd:ad:67:f1:33:fa:ec:43:1e:c5:76:db:f3:3a:
         a6:83:dc:11:f3:67:96:e5:00:6d:8b:f2:ca:42:ea:f2:f0:a6:
         29:ed:ae:16:fc:45:74:0c:bc:d6:81:ff:18:cb:4b:34:11:58:
         e2:89:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:18:51 2025 by rpki-client