Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
File:                     2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa (raw, json)
Hash identifier:          ksNWfd8ZsOu6Z3J/6WZpHIuKVieMqt9zM18CCGLCadw=
Subject key identifier:   D0:84:60:8C:40:9D:9B:AA:94:DD:3E:52:6D:0E:98:33:86:F7:9B:9F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584A4F05BDE8F1CD460577F8F740
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     19437
IP address blocks:        131.153.239.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:bd:e8:f1:cd:46:05:77:f8:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=d4991f55-dde7-4905-bd78-cd0db5ab958f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:7d:80:71:6d:2c:f4:50:35:78:0a:8e:39:
                    11:a4:39:85:56:1d:2f:0b:fe:46:83:e7:85:7b:a6:
                    c8:ef:49:a4:c9:c3:01:cd:a9:db:cc:46:63:1b:cb:
                    b3:fb:a5:6d:e1:cc:05:f5:32:53:03:cd:3f:0a:74:
                    57:e7:d4:f0:7b:e8:bb:ad:08:c1:bd:69:bd:9f:f3:
                    9e:a9:36:93:33:56:0c:0d:53:46:cc:54:f9:57:89:
                    8a:7a:6f:2f:92:fb:86:59:a5:bd:ce:24:76:30:44:
                    e0:a0:3a:ba:fe:ba:55:c9:f9:41:9b:69:cf:a6:8e:
                    f2:d6:c5:21:dd:92:02:21:6c:6b:26:11:56:01:35:
                    c5:f0:99:c7:46:8d:21:01:b5:b3:7b:56:5c:d8:6c:
                    e5:28:db:88:5f:88:4a:e8:d0:61:fc:27:d4:ac:a7:
                    8d:31:6f:87:79:de:66:36:e4:08:1d:19:a0:43:a3:
                    e9:ef:f4:60:bc:87:80:67:1b:5a:bb:18:59:2e:87:
                    d7:2a:da:84:55:35:57:ed:0f:10:2b:d3:b6:17:b8:
                    78:c1:8a:d8:be:2a:3a:df:dc:4a:e3:32:bd:fa:07:
                    7d:50:66:78:8c:69:66:e3:f7:c2:c6:9b:94:22:9b:
                    44:5d:54:c9:14:25:c4:1a:56:76:c7:9b:44:0c:9f:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:60:8C:40:9D:9B:AA:94:DD:3E:52:6D:0E:98:33:86:F7:9B:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:52:25:a1:65:67:9a:26:24:e5:fb:5c:af:60:cd:88:d2:e1:
         ab:3f:bf:6e:22:f0:2e:fd:8a:fe:9c:97:b4:c9:2a:e7:d5:0a:
         82:b8:6f:cd:7d:a4:c9:8f:76:aa:ba:40:52:1f:ff:dc:c0:0d:
         60:6b:f0:76:f7:7c:f9:30:a4:1f:1f:7a:e3:6a:c2:26:c3:95:
         12:b3:c9:c7:fc:fc:ba:0d:99:d4:b6:75:eb:19:f5:5b:63:69:
         54:9c:6a:64:1c:ff:51:09:a9:a9:dc:09:2a:a9:99:05:27:d5:
         49:2c:89:44:91:7c:4c:96:ed:e2:e7:8f:a7:7e:48:66:a8:4a:
         18:09:aa:3d:57:7c:34:d9:ca:51:f8:a1:e7:68:de:0e:df:89:
         f3:77:71:96:4c:a0:8c:af:fc:48:d3:96:21:fa:dd:23:8d:3e:
         66:2f:a5:38:eb:05:05:44:43:67:02:10:63:00:f1:25:60:60:
         17:11:0c:dd:fa:88:23:39:61:7d:ab:b9:8e:8d:0f:ef:00:ea:
         78:45:b5:10:fb:35:43:d4:70:39:07:d5:f9:58:dc:1e:21:68:
         92:dd:87:94:31:64:f4:b7:b1:52:b6:68:bb:4e:5d:45:62:ff:
         53:2b:31:81:9f:67:b3:32:a2:23:ed:a0:9b:fe:a6:a7:4f:f6:
         27:5b:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:35 2025 by rpki-client