Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa
File:                     ebd5f0ba-0855-35b4-b758-5607a432fd86.roa (raw, json)
Hash identifier:          9PZhEZXXiiI1aXwK/9YLwwHDt8VYq0vuo3crsPXM5Sc=
Subject key identifier:   6D:0E:26:2F:73:77:23:8C:30:B8:A8:DF:1C:73:49:D8:8B:2E:C8:8A
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584ACCA64D08901289A10E92FB00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     19437
IP address blocks:        131.153.102.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:4d:08:90:12:89:a1:0e:92:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=8902fe20-4001-4f52-81db-d631db51309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:5c:c7:cf:4b:a2:a6:34:0b:3a:8e:6f:93:
                    c4:68:5d:9c:d8:1c:48:cf:d8:69:d9:c2:3d:05:86:
                    6c:8f:fa:95:81:88:67:78:18:d7:b5:ad:6d:2a:2a:
                    3a:cf:c8:f8:b3:9d:08:cc:07:ac:87:27:f7:cb:b8:
                    79:95:30:62:5f:33:33:6b:4b:dc:e4:8a:64:ee:4b:
                    75:49:62:05:03:3f:4d:28:a7:cf:ab:d0:e1:64:28:
                    0e:1c:92:e5:d9:e4:2e:6d:ea:e7:1d:c6:6d:de:cd:
                    76:21:35:c6:04:cd:43:4b:8b:fe:50:f9:9f:0d:9a:
                    8d:9a:8d:ee:8d:d6:41:26:2f:77:63:be:22:ee:f7:
                    1d:1c:1c:66:7b:13:5a:88:8b:53:fd:c0:b6:1f:9e:
                    bb:45:0c:0c:ec:11:f3:dc:99:6d:1b:d7:86:b1:47:
                    04:df:5e:77:17:ba:a8:57:73:fc:e0:03:d8:43:9c:
                    0d:c9:2c:95:a5:2a:c0:c6:4f:96:b7:44:f3:e1:78:
                    c4:6e:38:44:ab:c8:b3:82:9c:e7:7c:8d:02:e7:1a:
                    e7:a9:d1:2b:b2:d5:9e:53:35:72:6b:30:73:09:6c:
                    5d:0b:2a:5c:be:18:f0:70:fb:54:56:c0:b6:0b:b9:
                    41:f6:ae:1b:d8:e3:24:71:09:c7:c4:cc:7c:d8:46:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0E:26:2F:73:77:23:8C:30:B8:A8:DF:1C:73:49:D8:8B:2E:C8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:0f:1b:e8:a7:d5:c8:39:a8:30:d0:ea:90:7d:e1:ff:71:
         f3:43:6e:a5:a6:c3:7d:59:59:16:38:3f:f5:db:86:be:40:2d:
         5a:23:57:34:31:81:b1:f9:12:5a:75:8b:1d:0a:4d:71:19:2b:
         72:bd:d1:bf:dd:e0:98:b7:9e:19:22:02:53:34:85:21:63:4d:
         0d:29:3d:ef:cf:04:28:dd:06:47:89:24:05:bb:64:9d:a7:6e:
         55:3e:57:63:df:49:8c:e4:85:3a:3d:f2:56:04:ca:e1:55:7f:
         2a:c0:10:98:1e:a0:ea:d4:2e:3d:47:36:fa:8c:a9:71:45:95:
         d7:a0:e0:50:cd:68:98:ae:fa:2e:43:72:82:08:00:e3:8c:08:
         bb:0d:6d:cb:76:dc:7b:0d:f8:95:8b:4a:d5:6e:61:67:d1:70:
         73:36:de:7f:45:63:54:09:eb:60:ff:37:cb:d3:de:c3:5d:83:
         98:be:66:43:a3:69:8e:2e:55:5e:b3:93:eb:ec:af:3c:27:99:
         34:a0:ef:ef:46:6e:08:2f:5f:cf:78:73:09:85:de:8f:e6:26:
         ac:af:58:48:2a:e2:59:57:fb:88:31:9d:92:ae:d1:f6:b4:cb:
         80:da:a3:ed:e3:5c:c9:4e:a3:3d:36:3c:2c:d2:34:14:cc:6d:
         e0:ab:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:15 2025 by rpki-client