Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa
File:                     4ebe83df-81c7-321e-a9a9-64378ff786f2.roa (raw, json)
Hash identifier:          JQyZxpRU0E5UM0vyfukFaPK46aQJOirFfY8exxjYZ5o=
Subject key identifier:   68:66:28:A4:5A:A4:43:E1:23:BC:E8:54:F0:50:17:E8:DF:21:C9:97
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584ACCA64C5152E8799518572680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     19181
IP address blocks:        131.153.83.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:4c:51:52:e8:79:95:18:57:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=1f6edc1b-e788-4896-99b3-09ff9e5f0539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e0:25:89:fc:41:e4:64:5f:d2:2c:ec:6a:15:
                    57:c2:dc:d5:f8:cb:e7:f6:1b:c3:f5:19:48:91:ce:
                    57:11:ff:bb:f7:78:ce:bc:26:1e:b5:d4:d1:dc:26:
                    ed:6a:e7:09:b6:15:f7:1b:2a:e5:eb:3e:24:6c:53:
                    32:3e:89:d0:bc:cd:57:98:29:2e:46:af:bc:f1:7b:
                    0d:c3:5c:a7:c4:77:ff:07:67:5d:4a:d7:20:5e:ca:
                    ef:b9:60:02:bf:95:e3:cd:ea:83:72:be:0e:ee:00:
                    16:35:76:dd:4d:13:98:9f:de:55:69:36:74:33:be:
                    57:07:c4:bd:16:9d:cd:82:67:4f:39:9b:b3:28:c2:
                    ac:72:d2:25:0b:d9:31:ed:4e:b7:70:c5:30:0d:cf:
                    5c:3b:7c:c7:5b:9b:7d:6e:75:1f:0f:9f:af:23:3d:
                    b2:63:37:41:ed:48:be:22:c6:35:ed:be:ee:66:bf:
                    5b:38:b6:eb:56:1c:6d:b6:75:58:a2:ef:9d:60:3a:
                    3e:ce:9e:d4:4c:c2:3b:39:6f:2e:a2:83:98:b5:7d:
                    1c:28:5a:24:64:21:68:63:78:68:9b:2d:1f:9b:69:
                    ca:31:ee:ad:53:ea:50:ae:5e:54:1b:05:23:b7:69:
                    f6:ae:21:c9:02:5e:6a:cf:5d:10:7e:b2:69:07:47:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:28:A4:5A:A4:43:E1:23:BC:E8:54:F0:50:17:E8:DF:21:C9:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0c:1f:46:27:0e:fd:60:d7:48:9f:dc:3f:eb:82:67:b8:0e:
         5e:2c:60:66:4d:58:dc:91:29:04:22:57:54:63:b8:f7:62:34:
         92:c4:46:78:43:5b:1d:d8:de:3c:fe:4c:eb:f4:cf:55:1f:a5:
         8c:71:4c:0d:c8:64:02:d5:bd:93:bc:ab:b7:8a:ac:75:67:27:
         66:51:bd:13:55:79:b8:1a:24:86:67:ab:2f:ce:4b:44:31:50:
         52:c5:6d:e0:d2:9c:93:16:a5:ac:c4:5e:6c:57:a1:26:5f:33:
         f3:de:01:bc:21:35:69:af:a7:32:fb:dd:3d:a5:34:00:08:a2:
         6f:6b:2c:88:be:3a:b6:fd:42:08:25:13:43:3f:3d:83:c8:99:
         b1:4a:cf:55:5a:4b:9e:30:6e:25:2e:6f:e8:4e:6c:3c:0e:52:
         47:28:65:cb:e2:78:2c:c0:56:be:e1:4d:7e:7e:b7:c1:c8:bd:
         c5:50:5c:cb:d6:9a:a6:c2:ac:0c:9e:65:e2:2d:e6:be:98:08:
         be:e7:91:2b:35:35:56:73:2b:1a:7b:0b:a8:fa:e4:c8:18:94:
         0e:2c:b0:6d:b0:bb:0b:ca:81:2f:88:c0:c1:90:f5:3b:fc:5e:
         8d:bf:13:2a:f7:e1:af:cc:90:b9:ca:2f:65:c2:7a:42:a9:7c:
         49:e2:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:48:42 2025 by rpki-client