Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa
File:                     f26924a7-3907-31ca-928b-e3ff0f341667.roa (raw, json)
Hash identifier:          04Sz60EAUwDMbZhioEIo/sezqQxs85ITj3ieZtOVaGw=
Subject key identifier:   B2:B8:12:CB:0C:F4:9B:BA:13:6E:0B:80:82:25:71:9C:3A:A8:76:F1
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FC9C55839947F04B79A70
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     19437
IP address blocks:        131.153.168.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c9:c5:58:39:94:7f:04:b7:9a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=308cbbeb-9609-4805-bb6f-55691ffdeff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:c0:e0:f8:1f:76:23:08:24:8d:fd:54:39:
                    cd:b0:ca:57:aa:32:bb:82:d4:aa:42:e1:be:14:c3:
                    06:74:7f:40:64:60:f9:fd:f5:aa:08:12:72:69:53:
                    9d:2a:a7:2e:8d:55:90:74:38:1c:d0:2d:cb:95:6d:
                    61:a9:aa:8e:c1:30:2e:c8:d4:9b:77:ab:74:af:1f:
                    3b:22:8f:72:49:95:7c:3b:85:5d:a6:f6:ba:bd:87:
                    31:82:88:f5:a8:15:7b:0b:4b:f3:3d:0e:de:bd:da:
                    ef:4a:c9:76:e4:bc:51:4d:80:ff:b9:fc:74:6a:68:
                    27:f3:ed:b4:14:37:a5:56:28:22:02:2f:e0:a1:57:
                    79:a2:0c:62:9b:c6:6c:c3:d6:ba:90:33:03:7b:db:
                    81:6b:4f:32:50:0d:88:e8:39:61:6a:9f:c2:84:b3:
                    f3:61:85:b1:f6:c9:2c:39:e1:f9:16:8b:59:3a:93:
                    bd:90:c5:89:79:76:00:46:a2:1e:f7:35:12:80:a2:
                    7d:e4:fd:25:4c:6f:8b:ed:13:a8:c9:ec:f1:45:d0:
                    db:b4:33:b4:72:51:e7:7b:fa:42:23:49:2e:a5:b3:
                    d6:28:9d:02:07:70:41:f3:de:f4:e0:f1:b5:c1:e1:
                    6f:00:dd:11:66:88:7a:31:38:59:4a:cc:21:04:ab:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:12:CB:0C:F4:9B:BA:13:6E:0B:80:82:25:71:9C:3A:A8:76:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:ea:2e:e1:b2:66:3e:da:d1:e3:a5:08:81:b1:38:9b:1d:
         e2:48:ae:86:8f:63:23:45:9c:72:66:29:00:dc:d5:57:06:de:
         c6:16:2b:17:b2:68:a4:e9:be:45:f1:68:a1:9b:13:1e:a1:02:
         b6:79:4e:bf:29:51:52:76:de:78:bc:15:7b:be:4c:bb:b4:26:
         8d:9e:99:6f:f5:f2:cc:18:03:84:c3:8e:08:a5:2b:80:60:81:
         3d:7e:82:fb:d9:ce:87:41:f4:31:5b:6d:6f:ad:64:9a:87:6a:
         f2:d2:41:14:fb:8f:41:f3:de:99:00:44:23:29:69:1a:d7:2e:
         52:f0:25:e0:4f:a2:b7:bc:64:82:24:ba:15:06:66:8b:f7:da:
         6c:6b:41:90:5a:b8:5b:6a:9e:fe:5d:1a:96:59:a3:c4:1f:b1:
         06:86:86:b1:71:b9:1e:47:c3:66:a2:c3:13:1c:4f:58:8a:3e:
         a2:67:56:35:71:24:a5:38:50:d4:7c:4f:85:c3:08:7b:e7:d4:
         5c:46:62:82:3c:a3:9f:32:55:e5:af:eb:93:bc:d4:29:ae:51:
         4c:bf:5a:ce:ee:1b:72:a9:0f:26:db:7c:3b:07:fb:7b:d1:41:
         53:cf:1b:9a:d4:5f:c8:4b:1f:ac:d7:03:0c:21:25:32:1c:27:
         a3:ea:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:57:58 2025 by rpki-client