Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/90f16660-59f3-3ec9-9144-12e8ebfcd334.roa
File:                     90f16660-59f3-3ec9-9144-12e8ebfcd334.roa (raw, json)
Hash identifier:          FRP3c60XEQCutqQD8yh98u/hJybiQQBPP/EbqhuTygI=
Subject key identifier:   CE:AA:52:0F:D7:1B:66:72:48:D6:B9:B6:30:A5:FA:41:DA:6F:A6:11
Certificate issuer:       /CN=bd1b51cc-6012-4051-ac58-1514226329e4
Certificate serial:       010D0C9F432858495D8963B58EF676F2CCC1B180
Authority key identifier: 9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/90f16660-59f3-3ec9-9144-12e8ebfcd334.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     18711
IP address blocks:        134.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:63:b5:8e:f6:76:f2:cc:c1:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd1b51cc-6012-4051-ac58-1514226329e4
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=c0570124-8db1-4765-a3e6-6849694723fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:3c:c3:66:9f:27:05:ab:86:f3:29:a9:c6:
                    17:5e:2f:e8:31:59:03:df:96:b9:6e:65:b1:5b:3a:
                    40:17:10:68:fe:b3:a2:39:f2:d5:5b:5a:ba:3b:0f:
                    65:d6:16:91:73:a6:d7:f2:29:16:d8:6a:d5:55:64:
                    42:34:fc:34:c2:89:97:a3:9f:ae:1c:1d:45:91:89:
                    5c:c7:13:f5:c6:3e:24:0a:1b:9f:1f:0d:57:34:3d:
                    2f:6c:64:f3:58:db:1c:58:3c:ed:46:c6:0f:f1:ca:
                    21:af:f7:b8:a1:90:e7:1e:f5:8c:a1:b9:de:08:b0:
                    66:f2:ec:52:f7:7d:cf:73:50:15:67:12:6a:aa:08:
                    ea:bb:7b:fb:41:f5:7f:b2:b2:52:76:0f:1d:19:7f:
                    fe:16:61:1a:51:35:5b:3d:5b:52:61:2b:6c:9a:81:
                    8a:a7:e4:93:64:b2:a6:7e:a9:e3:5b:ee:fb:67:16:
                    9a:f0:93:fd:f5:81:c8:07:6d:e3:b5:9d:b3:79:86:
                    f9:2f:70:c9:fc:9a:33:11:b7:64:06:45:65:a9:6b:
                    09:16:11:ea:78:46:ab:0e:dd:18:f9:e0:f9:d2:c0:
                    a4:f0:ef:05:03:80:a2:47:6b:53:2d:26:47:12:5f:
                    a0:73:ac:07:64:8b:98:2d:33:dc:54:c3:35:ed:c7:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:52:0F:D7:1B:66:72:48:D6:B9:B6:30:A5:FA:41:DA:6F:A6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/90f16660-59f3-3ec9-9144-12e8ebfcd334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl

            X509v3 Authority Key Identifier:
                keyid:9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:47:5f:a5:a7:2e:20:47:21:c3:5f:fb:31:2a:2c:ab:3e:93:
         2e:68:e7:df:0e:10:e4:42:7c:78:f5:38:07:e6:85:38:46:c8:
         26:c6:91:16:fa:3c:ca:e2:cd:01:3e:7d:ff:34:ea:b6:55:5b:
         23:00:b3:9e:da:db:a1:53:93:c8:31:9a:11:de:f0:5d:73:f5:
         fa:f7:0b:5a:23:ae:ef:d0:c0:3a:8b:84:c3:7b:f1:31:9d:d6:
         54:a7:cd:72:85:62:94:cf:c8:fe:f4:a4:03:40:3f:af:f2:99:
         18:a7:6d:1a:5c:a7:49:5b:9c:da:51:53:06:3e:e5:8d:9d:3d:
         05:75:ae:02:60:b1:03:eb:6e:45:2f:02:fc:d6:d2:97:28:7c:
         f8:8f:d5:44:d4:9d:4f:c5:03:22:70:ba:ac:16:22:12:ad:c7:
         98:48:08:2b:a7:9d:9b:76:49:5b:0f:f6:8b:8b:70:a9:55:c0:
         d3:cf:cd:2e:8f:f5:75:fa:38:38:28:f4:cb:bd:96:de:df:fd:
         b6:68:fc:81:f0:2d:28:7d:de:68:b4:12:b6:82:89:b0:2c:d7:
         ad:be:02:98:10:73:af:e9:46:59:7b:24:33:1e:c5:af:83:51:
         d1:5a:b2:d1:28:0b:e7:ff:e2:20:4e:6b:6f:bc:04:47:df:95:
         05:0b:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:18:27 2025 by rpki-client