Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa
File:                     f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa (raw, json)
Hash identifier:          W/p7/faB11wLBgrX8LXquDhps5j0MLMDgoTssSLEJEU=
Subject key identifier:   19:B2:BB:28:09:25:31:42:D9:E8:16:9E:9C:94:F0:BB:C6:70:2D:6A
Certificate issuer:       /CN=2aebbca8-597b-4522-9ea6-9c6cdcbcb889
Certificate serial:       010D0C9F43285849F127820A70D2984027800680
Authority key identifier: 36:C5:47:43:D9:2F:6A:EE:69:3B:BB:21:F0:A0:96:DD:5F:30:6F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa
Signing time:             Thu 22 May 2025 22:03:14 +0000
ROA not before:           Thu 22 May 2025 22:03:14 +0000
ROA not after:            Wed 20 Aug 2025 22:03:14 +0000
asID:                     3128
IP address blocks:        131.210.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:27:82:0a:70:d2:98:40:27:80:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aebbca8-597b-4522-9ea6-9c6cdcbcb889
        Validity
            Not Before: May 22 22:03:14 2025 GMT
            Not After : Aug 20 22:03:14 2025 GMT
        Subject: CN=6c629174-a1b4-421f-82e2-2a0ed7664ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:89:b5:9b:ea:1e:69:18:e2:d0:12:0d:e1:
                    45:a2:4a:62:8d:b4:52:68:54:c7:60:eb:3c:fe:0a:
                    14:60:34:d2:34:06:be:5e:72:9b:ef:5d:f6:fe:6e:
                    1c:d8:41:84:d9:ab:a2:46:63:32:4f:06:09:86:f8:
                    e1:b9:32:60:d3:c2:24:fb:5c:13:a5:dd:4e:7f:29:
                    dd:95:91:52:bb:2a:71:c7:07:80:d4:e9:86:e8:ae:
                    ed:f9:27:f6:d4:9c:18:3a:d3:f9:a9:f8:80:52:66:
                    c8:be:1a:11:90:06:f6:47:e0:9e:80:4b:ed:32:a8:
                    ba:8e:02:55:87:eb:27:0a:52:a7:66:d3:07:65:d2:
                    62:e4:e6:63:b8:af:58:1d:9f:ec:a1:28:10:11:97:
                    13:77:b6:44:18:13:11:47:3a:9e:f6:85:a3:77:81:
                    2e:1d:79:38:9f:47:7d:3e:e1:d4:be:42:f8:68:92:
                    ba:9e:51:6a:43:2b:d9:07:a1:fe:88:8b:4d:df:9c:
                    17:96:34:4b:dd:4e:9b:56:8a:8a:95:37:62:99:0e:
                    8d:26:9b:de:a7:1b:06:ee:e0:5a:a5:7d:7c:a4:d0:
                    20:0f:1d:57:93:97:cf:b5:b3:66:bc:3b:af:d9:03:
                    eb:94:6d:1e:ca:20:d7:b2:3a:10:b0:8e:05:ae:00:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:BB:28:09:25:31:42:D9:E8:16:9E:9C:94:F0:BB:C6:70:2D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/f7bb53c2-40b8-354b-85e6-ff5e1c51bc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.crl

            X509v3 Authority Key Identifier:
                keyid:36:C5:47:43:D9:2F:6A:EE:69:3B:BB:21:F0:A0:96:DD:5F:30:6F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2aebbca8-597b-4522-9ea6-9c6cdcbcb889.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:05:0a:c2:35:f0:ed:3b:9f:f1:9b:ed:f9:60:0f:c1:e1:55:
         a2:e4:5a:6b:13:1e:d8:99:be:aa:16:2c:3d:e3:75:ed:28:bc:
         68:47:dd:7d:80:ce:ee:70:20:22:a2:57:76:a4:67:f1:33:e5:
         eb:cc:f7:47:93:aa:a0:65:43:36:1e:bc:8d:64:6a:1c:30:df:
         76:6b:7a:27:d4:86:c2:01:61:ad:5d:c1:70:2f:66:95:10:7a:
         6b:c2:8d:00:e4:eb:cd:35:ad:67:1e:59:68:6a:b8:47:cf:31:
         d6:27:2f:03:1b:24:df:d1:8f:ba:72:90:2e:f1:d5:3a:52:ce:
         d3:d3:ed:8f:67:f8:08:09:b2:b5:0f:c7:5c:14:f2:71:23:96:
         41:9b:75:a7:90:f1:e9:cb:48:f1:97:6b:2e:00:1c:4a:b5:cd:
         8f:1c:cb:bf:73:ba:11:6b:3f:46:de:37:08:8d:7d:d5:cd:2e:
         9f:70:46:83:63:10:19:4e:08:a4:cd:bf:c0:27:aa:ee:7b:e1:
         2e:78:2e:7d:74:e8:ef:77:aa:d2:57:09:b3:56:62:ce:7e:ff:
         f6:28:a2:47:04:7d:02:9a:9e:87:20:89:b7:ec:1e:8c:b8:bf:
         19:ac:6f:8f:da:da:d6:56:bc:39:21:33:ec:56:99:d1:01:6a:
         b2:bd:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:29:33 2025 by rpki-client