Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/f08439e1-3980-3bc6-847a-4d8c0935209e.roa
File:                     f08439e1-3980-3bc6-847a-4d8c0935209e.roa (raw, json)
Hash identifier:          D3WpGeGbd956YL5QN6/yicWizpqojfBuZ7tON9g0mcI=
Subject key identifier:   B1:85:9D:BF:68:A1:9C:48:BA:46:84:72:F1:BD:FE:EE:D7:1C:F8:DC
Certificate issuer:       /CN=54ef2b12-4c16-4f8f-88fb-0070607e9754
Certificate serial:       010D0C9F43285849ABB4A7F155454E4A7C0CD700
Authority key identifier: B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/f08439e1-3980-3bc6-847a-4d8c0935209e.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     36222
IP address blocks:        136.143.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a7:f1:55:45:4e:4a:7c:0c:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ef2b12-4c16-4f8f-88fb-0070607e9754
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=998cce60-ec58-4f0e-9c54-d9e9c54f3ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:00:05:d0:cd:7e:06:76:3c:59:1a:ce:b2:
                    47:a0:57:b7:a7:c8:f1:60:89:6e:e4:04:ed:71:ce:
                    91:dc:66:98:b0:07:ed:70:c6:1b:9d:87:2a:12:a6:
                    53:9b:58:bb:48:58:10:05:eb:59:94:d7:2e:af:17:
                    6e:63:bc:f3:b0:e2:85:05:62:1a:71:72:65:79:63:
                    df:40:3e:cd:3b:da:fa:47:34:f2:ce:97:92:49:2e:
                    87:33:83:4e:39:e4:09:95:20:c0:a4:78:ab:95:dc:
                    94:a1:95:ce:21:9d:39:bd:21:45:94:0d:1b:aa:b3:
                    01:b4:4f:79:8e:7d:a6:b6:4d:35:b1:ec:11:1b:98:
                    a5:17:6f:fa:9a:cf:9b:b7:b1:96:91:f9:6f:63:57:
                    2b:8b:23:dd:ad:63:8f:cc:35:0f:26:09:6c:83:df:
                    20:6c:6e:82:28:d1:ef:02:7d:4d:93:92:b7:38:d8:
                    10:0c:a7:88:7a:f0:57:80:42:a3:13:27:4a:8c:c8:
                    42:a2:13:f8:b4:db:d6:f6:e4:a0:b2:d0:cd:3c:87:
                    17:54:af:7d:79:e1:16:b6:f7:28:57:37:a3:81:21:
                    fb:4f:3d:ae:b5:7d:83:3c:6d:ea:71:99:29:da:51:
                    2b:49:3c:74:81:79:ba:76:59:9a:6c:14:f0:75:f5:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:9D:BF:68:A1:9C:48:BA:46:84:72:F1:BD:FE:EE:D7:1C:F8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/f08439e1-3980-3bc6-847a-4d8c0935209e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.crl

            X509v3 Authority Key Identifier:
                keyid:B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:9a:9e:48:03:59:f0:85:b6:27:9c:58:3d:2b:75:7b:95:
         dc:8c:37:5e:1c:7d:4b:e6:86:18:8e:fd:c3:23:59:8e:1d:4a:
         73:c0:8c:50:64:61:1d:cc:79:0f:1d:6d:a9:b5:a7:e0:1e:28:
         16:47:a6:90:09:a6:39:b8:2c:b6:13:b8:13:2e:ae:7a:b3:49:
         53:d8:c7:49:9c:82:ad:58:f9:b5:94:56:58:ff:f5:86:0c:44:
         b7:74:46:36:af:6e:2a:da:12:f9:fd:07:0f:49:65:ed:0b:ec:
         8e:84:0c:86:69:ce:ad:bb:ac:7f:d6:84:f7:97:81:f3:41:58:
         e3:c0:94:20:92:bf:99:ba:29:e0:ec:24:c8:97:be:fd:82:83:
         37:b5:0e:0d:c8:19:5a:f4:bf:56:f8:9c:89:09:41:39:8f:16:
         95:36:db:e4:ac:79:f9:60:b8:ac:21:3f:86:4f:58:5e:a2:29:
         6c:fe:6e:6b:4a:c7:ac:fa:95:ab:ae:f9:c6:e0:25:33:83:bb:
         d8:9d:c9:76:f3:c9:5c:1f:b7:3c:7e:bc:a1:d0:04:91:dd:3b:
         25:f9:f8:03:aa:6a:8b:77:9c:f8:2a:df:0e:57:59:a8:9b:5b:
         b9:c3:21:d1:4d:f7:c6:b9:59:dc:6a:f2:a9:05:2a:ce:d7:3f:
         5e:2a:11:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:06:48 2025 by rpki-client