Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa
File:                     c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa (raw, json)
Hash identifier:          N6SF3tWlaRAP3U1OrbEbEp7zKFAGU7VC/ksGtJvFig8=
Subject key identifier:   06:7F:8E:23:0E:CF:73:3C:51:28:36:3F:47:87:CC:B1:7D:61:77:9A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584A4F05C49377D58F02A51CD2A0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     20454
IP address blocks:        131.153.225.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c4:93:77:d5:8f:02:a5:1c:d2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=284598d7-c811-4dbe-9521-657a2277a350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:f6:90:ed:43:f8:7f:c2:4c:90:9f:f4:8e:
                    f2:90:1f:45:7e:0c:3f:0c:d1:57:b0:48:f9:b5:20:
                    f9:d5:63:56:ab:a7:aa:ea:6d:6e:8f:79:f7:1a:09:
                    31:d3:6f:5a:64:2b:dd:a1:60:9a:a8:72:da:c0:e7:
                    b5:0c:f7:87:38:ba:bd:f3:f4:f8:34:ec:d9:c6:4a:
                    bd:00:2a:24:50:45:a9:ae:50:b7:48:fa:ed:95:c4:
                    aa:ae:cf:b9:d3:dd:b5:74:09:ff:7e:46:b8:c4:a2:
                    f8:21:d4:03:5d:53:ae:94:e4:af:a5:cf:2b:89:30:
                    c5:cb:e0:af:0c:0d:58:29:57:bb:e7:36:d7:b7:04:
                    71:0e:6a:70:2a:b4:8b:bf:d2:b2:68:3c:c7:43:59:
                    ef:93:b4:de:7a:48:e2:f1:2a:a2:fa:26:f6:30:15:
                    eb:85:36:8c:af:71:04:57:ec:8d:f3:ca:56:d9:be:
                    97:d7:16:01:43:b4:74:26:60:42:fd:42:16:dd:00:
                    a9:02:17:67:4b:e4:ed:43:3f:76:9d:df:e8:e2:8c:
                    89:ec:cc:f9:8e:b2:63:06:a6:6b:43:71:6f:3c:5c:
                    f5:88:6f:f4:78:77:27:ba:8a:e0:61:cb:7d:cd:45:
                    42:8b:c2:14:4f:7a:fe:32:c3:e7:95:4d:6e:8e:d1:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:8E:23:0E:CF:73:3C:51:28:36:3F:47:87:CC:B1:7D:61:77:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:19:5c:67:3f:e2:9d:d6:29:0b:04:31:05:b8:87:cc:25:
         9b:0d:50:95:e6:1a:80:03:93:87:cd:12:f2:04:cf:95:62:19:
         35:c4:44:6c:55:fd:e5:fd:05:fd:55:41:b9:cf:8a:9c:55:02:
         62:09:ac:60:66:bb:be:a9:04:12:d7:96:31:7d:19:04:59:3f:
         e0:d2:49:3d:52:f2:52:ea:4e:2b:86:dd:b3:e8:d0:91:dc:4e:
         fd:b2:2e:85:05:ba:1f:c8:e1:d4:c1:bd:76:d7:2b:e2:f2:2b:
         54:ba:e0:ef:d3:cd:da:0f:39:cc:0b:3e:37:a0:ec:77:8e:03:
         f2:e1:ef:b3:17:5d:0e:5b:5d:5e:83:68:3f:09:6d:1b:ad:85:
         c9:98:6b:a6:5d:4c:95:68:97:df:4d:9e:4a:7d:6d:fc:1e:bf:
         78:d0:57:13:0b:98:34:4a:9a:4f:45:c2:9b:51:53:39:59:30:
         36:26:e7:0c:c6:e1:be:6a:50:35:c1:73:63:0d:35:bd:e4:b2:
         30:d7:b0:e6:90:ed:19:91:74:b9:c3:21:bc:b3:24:81:04:aa:
         3f:14:1f:1c:f7:36:4d:36:c1:12:86:08:af:a8:da:58:ef:de:
         07:79:32:71:d7:1c:24:ed:ef:ff:07:30:c9:45:4f:31:e8:20:
         ed:20:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:48:10 2025 by rpki-client