Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/3f7ff58b-79f3-3eed-af1d-b305778eb3ec.roa
File:                     3f7ff58b-79f3-3eed-af1d-b305778eb3ec.roa (raw, json)
Hash identifier:          Yl+2YqK4fuaHkQKUOTwkBksisGs31YsU7/EVCdN9Lt0=
Subject key identifier:   BC:27:6D:95:0D:54:95:74:F0:FC:8E:DF:94:A0:45:D0:7C:77:33:F3
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F4328584A549B20B93DAA47C5B3620300
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/3f7ff58b-79f3-3eed-af1d-b305778eb3ec.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     140543
IP address blocks:        134.195.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:20:b9:3d:aa:47:c5:b3:62:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=136e85a7-afbb-4640-abbd-22722b2acb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:74:e5:d5:00:b1:1e:a1:17:32:fc:de:da:
                    55:2d:fd:ca:fa:fa:13:de:3c:25:99:bc:1e:69:30:
                    ad:74:c2:28:58:e8:e6:e5:77:d7:4b:65:5f:2d:76:
                    1a:ac:ce:9d:e2:9a:8f:8b:f7:bb:79:b2:0b:51:60:
                    65:04:d7:0e:69:81:ab:03:79:64:2c:f4:78:b3:5a:
                    f4:87:4f:a0:a4:b3:2c:ef:60:91:77:70:4b:e5:50:
                    a6:32:66:2e:2b:4b:53:07:f3:1d:b6:bc:b5:76:11:
                    e3:a1:00:a7:19:06:a7:3c:08:38:2b:3d:0e:b5:bf:
                    22:15:07:3c:d7:c5:39:e5:36:17:ac:78:70:30:f9:
                    77:91:7b:2e:5c:9d:2b:d2:e2:9c:be:8a:6d:8d:3d:
                    4e:e8:53:0c:c4:ee:36:cd:b2:7e:49:06:a9:ef:e2:
                    8d:5b:f9:15:7c:f4:00:35:c8:5b:4d:84:8d:61:32:
                    9c:f5:a6:c6:33:cb:78:00:d1:11:57:63:07:f6:2c:
                    a5:2d:79:2e:10:1e:8d:45:63:31:7f:39:97:2b:ca:
                    e8:ca:1f:97:46:20:70:5a:2b:ee:35:5b:5b:24:8c:
                    8b:00:03:ca:dc:f2:f4:27:84:81:a1:11:5f:d8:f7:
                    29:c5:1b:a3:78:9b:d9:b9:3c:9d:bd:ce:d1:17:a1:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:27:6D:95:0D:54:95:74:F0:FC:8E:DF:94:A0:45:D0:7C:77:33:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/3f7ff58b-79f3-3eed-af1d-b305778eb3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:6b:cb:ed:38:0d:d9:91:c6:78:de:ef:53:09:bc:5b:a2:
         2c:88:48:d4:f1:fb:c1:49:de:3d:ed:80:d3:82:34:76:24:d1:
         d3:f1:7d:f0:07:20:50:d2:7d:5e:30:7b:7a:e2:96:e8:f9:b1:
         bb:33:52:ac:73:ed:1a:b9:e2:cc:03:0a:46:f5:4b:76:9b:16:
         98:4b:b5:c3:74:fc:84:5e:da:5e:3b:f7:bd:df:7b:1b:be:84:
         de:90:09:bf:4c:f6:d4:b5:41:38:18:40:3d:4b:5a:79:e3:d4:
         91:92:db:0a:58:f7:f6:f6:a2:c0:88:6f:05:35:6d:a6:50:8b:
         53:d6:f1:c8:b8:b8:2f:36:3f:7e:8c:cb:5e:15:d8:85:30:de:
         a8:8d:b5:9f:76:56:b0:39:a9:95:62:64:f4:c9:36:80:e2:38:
         50:a5:e0:ed:c6:d5:36:bc:48:be:44:8f:e2:84:a3:61:1d:0b:
         8b:28:ca:20:2c:96:3c:9d:25:b6:33:82:81:d5:41:d0:32:e4:
         4e:36:6a:ff:96:cf:58:9f:11:66:96:b9:fa:26:92:69:52:91:
         c9:f3:3b:a9:7d:3a:0d:29:ee:25:1a:a7:f4:44:47:b2:d3:01:
         a3:62:ce:23:36:56:7d:28:9e:e6:64:c3:0a:37:ba:5a:78:89:
         73:75:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:45 2025 by rpki-client