Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
File:                     ca174187-a544-3df0-8b36-2922d0060aea.roa (raw, json)
Hash identifier:          gK2TmwF6ONo2/VRDOd0t3eWl/XyaBzrZ8Zvwd6C1xFU=
Subject key identifier:   EB:43:AB:4A:F3:3E:AE:1D:39:EB:D2:E2:C7:D1:F9:CB:13:D1:C2:DF
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584AD23BAA4712E14479393B0220
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     0
IP address blocks:        131.153.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:aa:47:12:e1:44:79:39:3b:02:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=295ebb5a-2ab0-445b-9a8a-1653d3891408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:f5:54:bd:a3:d0:86:f7:a6:52:2e:ac:ba:
                    24:7c:a7:4f:5a:bb:5e:a1:e4:5e:d1:fa:a9:8b:9f:
                    58:ae:97:67:10:fb:50:19:2d:e0:66:0c:da:b5:78:
                    eb:a0:d6:33:22:63:82:ec:32:7a:9b:ec:1d:0b:c7:
                    67:d3:69:4e:fe:d1:68:3c:c3:96:6e:79:0c:14:67:
                    12:9d:fa:72:f1:69:1f:e3:04:a4:64:ed:b0:93:c8:
                    02:4f:c0:c4:e6:e0:26:f9:ef:8c:c7:ea:79:38:5b:
                    a6:4c:11:4b:7b:a4:b2:29:4b:2c:11:5c:95:1e:73:
                    55:bc:13:ce:f6:a5:76:7e:ef:97:cb:83:74:08:67:
                    25:db:ef:76:b2:11:d9:4f:a0:db:db:cf:7f:3b:2a:
                    bb:e2:35:c3:ea:8b:ab:09:b5:94:0c:68:9d:03:56:
                    75:a7:1f:94:67:0d:7f:65:c4:3f:5c:6f:28:b6:9b:
                    4d:3d:76:37:a0:92:4a:7e:e9:06:49:26:f2:a7:e5:
                    e9:23:aa:b8:91:32:51:f6:d2:f4:a0:0c:b5:b8:7c:
                    ce:c4:a9:97:42:5c:00:cc:09:a7:06:9a:4b:59:24:
                    76:40:de:a8:66:89:4e:5a:75:74:3c:eb:5d:ab:4d:
                    de:2e:0f:c7:dd:ec:39:5f:4d:58:c6:d6:90:1f:3f:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:AB:4A:F3:3E:AE:1D:39:EB:D2:E2:C7:D1:F9:CB:13:D1:C2:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fc:46:f1:fc:9b:c0:1b:1a:70:81:3c:91:44:c8:1f:32:7b:
         e0:37:8f:29:a7:b4:96:2f:80:0b:2d:78:e5:9d:9e:16:db:e5:
         5c:fc:ac:83:88:19:07:bb:87:bc:49:30:8a:4a:4c:ca:bf:92:
         7d:b4:28:33:92:e1:13:68:65:70:42:00:82:7e:8d:c6:be:86:
         f5:13:0a:cf:82:3e:39:86:d8:3c:e4:df:fd:98:d7:85:ee:da:
         87:78:d0:7e:22:2c:b1:08:c0:d0:62:6b:cd:bf:13:4a:c9:57:
         55:86:ee:8a:ed:8f:b2:7d:a0:d7:6f:50:b6:a0:93:be:ef:4a:
         47:10:cd:0e:be:b1:f3:d0:cd:c0:7b:67:cc:30:75:02:5b:4e:
         c6:30:5f:c7:7f:cf:e5:d4:8a:f8:7d:67:ae:ce:7b:b3:1a:10:
         86:86:f0:bf:fe:48:de:87:cf:cd:30:3f:1b:cb:9b:d8:a1:99:
         49:bd:a6:69:4c:8d:5e:0c:22:c3:f8:56:7d:52:de:41:60:c1:
         e0:21:26:31:5d:f3:c2:2a:3a:89:3d:5f:db:92:92:97:56:dc:
         21:b0:38:df:0c:7e:af:1e:a3:6b:12:39:a7:95:fa:09:df:5a:
         dd:e8:37:e7:c8:53:c1:02:47:19:57:e3:10:9c:8b:4f:56:bf:
         19:c8:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:49:24 2025 by rpki-client