Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa
File:                     436267ae-bf59-3390-b958-3a31c5690391.roa (raw, json)
Hash identifier:          uZY1X9soVmWwtj1iiKnP6/CSBe5mRG152bKHtnX+UQU=
Subject key identifier:   A5:E4:DE:D0:CC:81:EB:41:60:67:D2:33:F1:A1:A1:5F:8B:3D:C5:8E
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F4328584A4C3B0B36F2BFB79249CC8180
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     18994
IP address blocks:        162.134.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:0b:36:f2:bf:b7:92:49:cc:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=4d12feb0-5ea2-4dac-a86c-49da8108fdb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:40:72:22:a5:43:8a:39:bd:af:24:19:29:18:
                    40:ea:e3:4f:33:b9:49:5e:42:1f:be:99:92:84:a6:
                    d1:88:a5:d1:9d:88:b8:74:2c:99:e9:ec:29:b4:d6:
                    ff:d2:f2:bd:7b:45:29:6f:65:27:61:b7:b4:f7:c6:
                    29:e4:c6:27:09:5b:24:e3:5d:62:ed:85:f0:80:c6:
                    dd:2c:3d:4d:90:20:e5:b2:c4:ea:1c:be:a7:e6:b7:
                    54:c4:e8:ef:dc:54:75:75:ba:4f:e0:31:df:5a:07:
                    62:fd:b3:e4:01:11:45:07:76:49:fb:13:20:d5:e5:
                    21:ba:5c:6e:4a:95:32:1f:38:59:aa:b2:20:16:3f:
                    ed:d8:99:04:d8:d5:b2:a1:9f:70:b1:19:47:4a:82:
                    51:5f:4c:46:39:43:40:38:47:1f:13:f1:32:c7:2e:
                    df:73:d1:11:69:2a:da:3f:47:79:ee:32:53:43:45:
                    99:4c:3c:d9:53:98:70:21:26:70:65:7e:84:42:1c:
                    97:ec:86:92:69:f4:12:c1:da:32:4f:37:45:21:a7:
                    b2:f4:e9:5e:37:b6:67:28:64:70:91:f1:96:b0:72:
                    f2:d7:43:37:5d:d3:91:03:cc:f6:74:7d:d5:f5:ee:
                    0f:4a:c4:37:a1:3e:a8:ac:89:f7:89:54:1d:73:b9:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:DE:D0:CC:81:EB:41:60:67:D2:33:F1:A1:A1:5F:8B:3D:C5:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/436267ae-bf59-3390-b958-3a31c5690391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:92:9d:11:3a:3e:00:1b:e9:e2:4d:89:b8:7e:6f:3e:60:e3:
         f7:42:ad:ba:ee:35:aa:6b:d4:24:23:e4:e3:e0:f8:49:ff:55:
         2f:77:03:fd:c5:34:d0:1e:39:0f:56:bd:e2:ed:e5:fd:a8:f6:
         6e:4c:1b:8a:ea:49:e6:a3:90:2c:2b:3f:70:e8:60:e4:21:dd:
         2d:08:b1:80:da:a5:e7:fb:58:86:8e:e2:0c:69:de:2a:c1:cc:
         6e:cd:34:04:20:78:b9:f8:db:0b:14:08:c0:d3:1d:b8:a0:bf:
         92:2d:69:c2:0e:e9:99:93:cf:a4:d0:13:5d:1e:ca:5c:6b:54:
         b5:de:2f:8c:d0:a0:ac:02:ea:ab:07:80:f1:ee:80:d6:b7:75:
         59:26:86:89:71:d2:1c:23:2e:ad:fb:c9:72:ac:01:9c:aa:2d:
         d9:9c:9a:d3:c9:2f:3e:fd:27:6c:02:af:e9:2a:66:0a:a7:22:
         e7:53:c5:99:63:a5:fc:d0:50:a9:2b:b6:59:b2:77:34:d2:2c:
         5b:e2:7a:d4:2a:65:14:f9:36:b2:73:96:61:cb:d7:e9:16:8a:
         28:90:93:47:aa:2c:75:0c:84:ad:5f:9f:46:68:17:3a:67:3a:
         eb:48:39:e5:d8:0a:fc:6f:22:be:20:26:1d:45:57:39:fb:7d:
         5c:ff:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:50:32 2025 by rpki-client