Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa
File:                     f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa (raw, json)
Hash identifier:          tOJwn40kKbG8eKYVxogGU80qt7x3jmQXmijvHJvTmtQ=
Subject key identifier:   CC:C7:B4:53:BF:45:9C:74:61:80:B2:82:C5:EB:61:2D:0D:E6:7E:E6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849EEB506C3A7AA20814955AC80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     54113
IP address blocks:        131.125.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:06:c3:a7:aa:20:81:49:55:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=d4891245-6fb3-47d7-a5f7-781a9d14d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fe:09:fe:7d:ae:97:8e:18:3e:a0:f4:42:6d:
                    55:15:0e:42:ed:bd:65:87:d8:91:8a:d5:ec:24:c8:
                    92:75:62:49:55:6f:99:fa:16:34:5b:76:42:1b:69:
                    a1:2f:9e:61:29:1d:9b:80:b2:8e:d6:f8:ae:ec:08:
                    24:44:a6:24:ee:ee:11:29:f7:84:15:76:18:b9:f2:
                    65:86:9b:2a:fc:e7:d6:ac:dd:dd:c5:a0:4b:30:c7:
                    e9:74:3a:3c:7d:1a:0e:7a:69:17:1e:d7:8f:62:29:
                    f4:49:bd:f7:6e:09:f8:7c:e0:a2:ac:06:44:39:ff:
                    1e:59:11:19:01:bf:90:3c:43:12:48:47:6c:42:c0:
                    83:c8:19:a0:69:0e:e4:3c:42:5d:f8:d9:e1:6b:03:
                    9b:f0:27:bc:96:2c:60:83:fc:3d:4c:e5:a1:fd:20:
                    fd:7b:18:62:0d:55:b9:3d:e8:89:6a:ec:27:d8:91:
                    e7:fe:63:1c:40:bc:7b:44:e6:aa:7a:aa:ea:b5:ce:
                    1b:5c:1a:86:ed:a0:3f:8f:95:ee:3f:a6:85:b5:84:
                    fa:1e:31:e4:73:a3:0b:d5:ce:3a:95:62:1e:d2:54:
                    77:48:56:3e:94:40:1b:d7:33:48:0a:7f:1a:df:bf:
                    17:31:9a:00:33:ce:a0:68:a5:b4:3c:20:c0:19:22:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:B4:53:BF:45:9C:74:61:80:B2:82:C5:EB:61:2D:0D:E6:7E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:76:50:f3:78:9a:21:42:f8:5b:90:44:e7:e1:6c:bc:14:47:
         7f:20:0b:1f:e2:af:3a:c0:31:dd:97:99:2f:07:19:24:12:ec:
         1d:ae:dd:97:08:ae:2e:93:6a:b5:61:0e:fd:68:fe:a5:fd:81:
         78:86:71:50:a5:17:75:89:2c:1c:9c:f2:fe:c8:ad:f9:66:e5:
         29:a3:fc:3d:45:07:f8:8c:b6:9e:77:66:12:39:cd:98:21:f4:
         e3:ef:b0:96:ab:a8:0c:ed:2d:20:77:80:f0:ea:8f:29:4e:71:
         2b:30:6f:c6:a4:a9:d4:f1:67:4a:b9:27:4a:fb:55:b9:0d:36:
         67:69:ca:6a:b6:6f:d0:31:ea:7e:6e:7b:21:7f:2f:4e:4a:cd:
         e0:6b:86:0d:0d:b6:b6:65:49:ac:12:72:37:6a:a2:4c:80:f2:
         55:3c:aa:8e:cb:1e:ff:21:c8:4a:4e:b1:f2:22:29:a2:d1:35:
         a2:af:c6:f8:15:cf:70:05:d4:1a:27:86:70:f9:b3:3f:57:19:
         54:bd:da:7a:ef:5f:88:1c:c4:ce:3a:29:e4:1e:3f:03:4e:08:
         ba:ca:6f:51:e6:b3:95:14:05:06:58:b1:d9:2f:e4:34:a3:80:
         46:eb:7e:8d:09:45:d7:c8:dc:43:04:75:dd:a3:12:00:b8:69:
         fb:16:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:50:13 2025 by rpki-client