Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa
File:                     d924e41a-9907-3a14-8ffd-e0cba482d05c.roa (raw, json)
Hash identifier:          A+rQGqBMsaFqeJj30Zbk3TIrJn5tLvGnSlZBYZuY/gg=
Subject key identifier:   80:52:B5:92:E3:EE:64:D6:A2:B7:5A:08:BA:5A:21:A1:F8:6B:2E:9C
Certificate issuer:       /CN=bd1b51cc-6012-4051-ac58-1514226329e4
Certificate serial:       010D0C9F4328584A3CE02E114115B245AAB3A100
Authority key identifier: 9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     21976
IP address blocks:        134.210.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2e:11:41:15:b2:45:aa:b3:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd1b51cc-6012-4051-ac58-1514226329e4
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=304059d4-b980-4e08-a26a-e33b7c69a0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f8:97:38:38:ef:4d:3e:b3:90:7b:f5:19:fd:
                    d7:6a:39:ae:98:90:55:9f:52:64:a9:6c:f7:42:6d:
                    fc:91:90:68:99:d5:37:af:b0:33:48:b7:54:fb:5e:
                    d4:12:ca:23:6c:e9:f9:9c:90:1d:cc:64:21:aa:51:
                    af:5f:b2:84:1d:d6:fc:f8:9e:9b:ed:7b:89:77:e9:
                    f1:96:1e:a1:ca:14:a7:29:6c:59:a6:d0:01:56:10:
                    3a:ab:b2:32:ac:d9:07:97:c2:54:a1:f3:23:61:41:
                    57:20:07:85:8a:67:a3:5d:0a:4c:a3:d5:5a:5a:fc:
                    86:d0:25:af:d7:09:53:fe:a9:a3:1e:46:7e:58:2b:
                    50:60:dc:2a:1c:d4:75:d4:3c:9a:56:a0:26:04:2f:
                    f2:58:d5:54:3a:ee:6c:b7:e1:a4:19:6b:a9:72:dc:
                    73:45:bf:bb:da:91:37:6c:94:51:d7:b4:30:80:87:
                    90:02:99:a3:1c:87:26:71:e0:59:34:b3:c5:f5:d2:
                    73:3a:4a:14:18:8f:a0:b2:e9:f2:57:de:d8:e6:80:
                    2d:c6:ea:bd:a8:4e:8d:2d:c8:f5:63:2c:5e:a0:42:
                    7c:14:4a:d6:01:aa:8b:3f:4e:3a:4a:ad:12:18:2c:
                    e6:b1:05:b1:f0:82:7b:db:69:9f:ed:ec:5a:d5:2a:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:B5:92:E3:EE:64:D6:A2:B7:5A:08:BA:5A:21:A1:F8:6B:2E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/d924e41a-9907-3a14-8ffd-e0cba482d05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4/bd1b51cc-6012-4051-ac58-1514226329e4.crl

            X509v3 Authority Key Identifier:
                keyid:9F:34:A0:AA:FC:F1:DE:55:BA:2D:D5:AF:61:9F:1E:B4:57:D6:8A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bd1b51cc-6012-4051-ac58-1514226329e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:51:5e:d0:7b:51:4a:8b:55:35:21:cb:6d:ac:67:28:26:
         43:7b:21:d8:8b:dd:63:fa:95:bc:d3:1d:37:11:f0:00:48:62:
         6e:56:e1:95:ed:9c:ee:22:63:e3:09:cc:63:78:be:e2:7c:c6:
         0f:6f:a6:0c:c3:84:6c:cf:10:9e:95:35:73:e0:b3:4b:a7:e7:
         89:a1:d0:36:45:d1:ad:c3:fe:e5:85:f9:91:ae:3f:3d:5a:8a:
         f3:35:cc:4e:d4:9d:51:30:f6:21:b2:2b:e7:40:cc:1c:ff:da:
         55:ad:97:4c:38:78:2b:a4:3a:ee:76:5f:51:5f:70:85:a4:33:
         56:71:5b:2b:9a:94:af:fe:07:69:33:ec:40:02:32:a1:a1:e1:
         d7:87:3c:20:0a:fe:d2:b5:f7:c7:52:9d:64:c7:b8:be:1c:61:
         09:63:c9:42:be:1d:95:1d:7d:0b:a5:da:a0:b2:32:e8:9e:f7:
         c8:d4:80:ce:de:eb:a8:74:fd:d0:12:96:d9:8e:7b:0e:9b:e0:
         5a:85:02:72:bb:6e:87:74:19:6b:27:e9:9a:41:e4:a3:c6:8b:
         95:c8:59:ea:25:7e:7b:7b:31:02:1f:29:b6:f0:26:a9:f6:c4:
         5c:ba:40:54:52:c5:50:e6:4a:84:38:4a:a8:e8:6a:a1:33:ba:
         34:53:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:08:29 2025 by rpki-client