Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa
File:                     7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa (raw, json)
Hash identifier:          q4tZvcedS4uheyZ4RCXEp0TpnEzhJ/rn3tePUSdfVBg=
Subject key identifier:   03:2A:24:CD:7F:F5:98:56:E1:AF:61:02:FA:77:18:99:30:EF:3D:C2
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584AEE269000022511E65AFF3C40
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     21949
IP address blocks:        134.128.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:90:00:02:25:11:e6:5a:ff:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=21442149-2fda-4749-b0a0-04be248098eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d1:20:2e:b1:e9:0b:43:0e:71:b4:b3:35:4d:
                    e2:9e:b0:a2:81:7e:03:9b:80:51:b2:47:9c:08:50:
                    22:2f:da:03:2f:fd:11:96:0c:ff:f8:df:63:52:67:
                    d5:4c:fb:6c:56:7d:27:04:89:07:61:26:62:a8:99:
                    21:e9:3f:ad:31:0e:84:a5:0c:7d:d6:1a:36:99:37:
                    e4:3c:fb:c5:ca:6a:3c:eb:e8:87:98:52:2e:51:25:
                    42:06:3c:f2:89:a5:2c:3a:5f:1f:f4:ec:0e:3b:e8:
                    83:44:a4:ed:94:96:94:d0:28:b4:40:a0:09:b0:89:
                    a0:9b:21:a9:2e:2f:5a:20:01:51:23:06:2d:60:23:
                    f8:bd:db:8d:b6:cc:44:9e:34:fd:bf:07:51:f0:a0:
                    fe:68:82:b0:9a:d0:5a:d4:10:a5:73:0a:53:05:f1:
                    a2:80:70:7c:33:aa:77:d9:0a:46:66:8c:34:15:ca:
                    db:88:b3:6a:10:12:16:0a:07:5c:2c:b7:2e:d9:a3:
                    a5:9b:2c:2e:c8:d2:1b:1f:22:06:e9:87:a9:1e:bd:
                    d2:6c:0a:14:7f:58:97:fb:a9:d9:5a:0f:de:ee:30:
                    39:67:48:d3:1b:35:a4:e3:e0:2d:62:26:c7:cd:ae:
                    ec:c1:65:65:be:2b:bb:57:c4:ba:28:d3:7b:22:38:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2A:24:CD:7F:F5:98:56:E1:AF:61:02:FA:77:18:99:30:EF:3D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.128.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:83:69:4c:f1:56:94:2b:36:aa:61:41:7b:65:cf:8c:f9:cc:
         63:fd:c5:8d:53:c8:09:88:85:50:6b:12:3c:ab:ea:01:4c:1a:
         5b:be:cf:82:82:a2:d2:b9:2b:99:82:a4:32:ec:0f:35:70:7c:
         b2:2f:31:66:87:08:cb:91:dc:69:e0:8a:ee:3d:b0:14:4c:64:
         1a:6e:3a:a4:e3:e2:31:f9:1c:cd:f6:f3:8a:00:82:68:00:a6:
         1c:5a:74:55:9d:b5:99:06:e1:3c:f7:22:22:3a:ba:dc:84:77:
         b4:61:b2:36:71:32:c8:b5:b3:f7:6e:56:71:6e:14:86:ce:37:
         2d:1d:2d:57:e3:81:8f:06:e0:6e:96:08:04:c8:a1:ce:0e:56:
         a9:8e:e7:07:e4:e2:4c:61:af:67:c4:bc:85:0d:e8:f0:d6:e3:
         7a:9f:6a:d9:c6:77:21:1e:73:4f:a8:9d:97:46:79:a8:84:9f:
         78:ca:29:97:30:94:d0:ca:7f:79:6a:09:3b:14:59:56:9a:b9:
         fd:1d:94:85:e9:5b:4e:9b:e8:56:b6:f4:ee:33:47:90:d8:b8:
         2b:06:82:05:dc:22:6d:07:57:a1:21:01:37:ec:ba:51:ee:57:
         22:fe:7a:ed:fd:94:b5:5e:f6:10:81:6a:98:58:b0:ae:17:cd:
         35:79:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:07 2025 by rpki-client