Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa
File:                     5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa (raw, json)
Hash identifier:          9KlPZ6LGp8e+VZ6/GM5Bn0EJq8nVsCdBwnChjxQRNLM=
Subject key identifier:   4A:7D:1A:A6:16:8C:36:07:B5:B5:1A:3F:B2:C3:A7:0D:B8:2A:A6:E5
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584AE1966EBC72606A9FF4125E80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     59210
IP address blocks:        131.153.205.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6e:bc:72:60:6a:9f:f4:12:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f148f146-4020-4a62-aa15-e4e400fd96ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:85:32:ae:55:a4:42:96:07:0e:87:10:c4:
                    52:9d:be:c1:54:8e:ab:f8:d7:ce:77:12:8e:6f:22:
                    55:c7:40:97:82:36:f1:9c:d1:57:23:77:6f:c9:0b:
                    25:b2:90:df:91:30:b1:04:ba:cf:a9:e5:34:f2:19:
                    57:80:87:27:8a:56:b4:6d:12:46:92:b1:80:67:f7:
                    9a:ef:4e:00:2e:ad:1f:8c:15:60:df:a8:bc:35:4d:
                    b3:92:21:82:81:6a:77:16:0d:b8:d5:4d:f8:44:f3:
                    c3:94:61:97:c2:4b:53:ff:63:57:c4:e7:e3:79:71:
                    24:bc:48:6b:c9:32:53:4f:5e:ab:44:e3:74:40:f1:
                    cf:3c:fa:29:ac:7f:68:52:5e:53:b4:dd:8f:46:e3:
                    50:d7:f0:d8:cb:42:02:a0:e6:52:4c:9c:cf:9a:26:
                    7c:98:c5:f5:5b:c5:c8:cf:97:1d:24:70:2f:39:ba:
                    67:48:d1:1c:90:63:ef:08:cc:8c:7d:d7:68:04:c1:
                    60:61:65:1b:ae:6d:43:90:f6:2f:2a:d1:b0:50:98:
                    80:1f:18:7d:cd:13:d0:19:d3:15:5f:0c:dd:2b:ea:
                    2d:37:89:91:63:d4:27:a2:50:d1:dc:fa:d6:78:76:
                    18:f7:64:4f:88:c0:e9:b2:6c:c0:90:f2:42:ec:c2:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:1A:A6:16:8C:36:07:B5:B5:1A:3F:B2:C3:A7:0D:B8:2A:A6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5adb5827-e6ce-3d30-9b00-b6c58c3bca62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:54:c7:28:45:ae:03:25:13:7a:39:da:c3:17:96:42:88:
         b0:ed:ee:8e:a4:a2:4a:e9:14:21:ae:86:d1:65:b6:61:2f:db:
         d7:32:f4:2f:35:5e:98:3c:09:cd:4a:ee:9c:58:e4:eb:42:10:
         76:56:2e:e5:eb:a4:90:2d:d1:4c:93:a9:6c:b0:de:1c:d7:56:
         1e:88:54:60:ae:5f:61:a7:33:41:aa:46:7a:05:bd:a0:5d:fd:
         31:50:d9:79:6d:4c:86:36:3e:59:8b:f3:d9:75:8c:46:43:12:
         69:e2:64:64:98:3b:07:1c:23:f1:53:8e:b5:54:f4:0a:13:90:
         7b:83:ac:fd:ba:27:6e:06:af:06:bf:67:8d:b8:59:b8:02:7c:
         3e:65:a5:23:1e:e1:3a:fe:03:d1:d1:fe:2f:df:a3:c4:4c:4f:
         c0:d7:f6:33:71:92:86:48:70:a4:61:57:8a:b4:5a:4b:67:c1:
         cb:d5:7b:ce:1a:06:86:3d:a3:b9:87:df:d3:bb:98:b6:aa:40:
         4b:85:88:74:a7:55:5f:b6:52:bf:d9:b7:b7:74:7d:04:7c:de:
         e9:30:42:10:df:4c:d7:c6:17:9a:84:0e:de:cb:92:2a:38:91:
         96:74:d9:37:0d:82:30:87:bb:b0:a0:9e:25:66:70:d9:83:1f:
         9e:ad:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:54:20 2025 by rpki-client