Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
File:                     dc04b1c3-67b4-3531-afdf-7c1d39073812.roa (raw, json)
Hash identifier:          NkyexZkexCSo7ZsJT+97Oqalld3TuQ/FD+dgZFu4gSQ=
Subject key identifier:   2E:A5:42:61:48:A3:D4:D1:A2:8A:8C:F7:C6:5A:AD:0D:08:95:DE:18
Certificate issuer:       /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial:       010D0C9F4328584AF0F147A68251C1CFB3F428C0
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     10490
IP address blocks:        128.61.0.0/16 maxlen: 24
                          130.207.0.0/16 maxlen: 24
                          143.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:47:a6:82:51:c1:cf:b3:f4:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=f9ad5017-9348-41ad-9b5c-6a7300ae166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:e1:ee:c6:93:24:5f:df:99:46:fd:5f:ba:
                    da:43:5c:84:d7:06:36:20:49:2c:28:38:95:3a:18:
                    d5:c1:f1:3e:96:80:df:6f:52:32:1c:fd:80:55:c8:
                    bf:0a:51:29:98:19:43:7c:f6:5f:1f:3d:87:02:de:
                    3f:91:d6:1e:36:4b:82:96:b9:10:21:3d:8c:b1:88:
                    10:f0:36:9d:ba:74:87:b3:45:5a:a5:6b:6d:7b:7f:
                    72:48:52:1b:2e:6d:ca:ea:e8:02:59:3a:81:3f:9a:
                    5a:b6:60:75:73:77:f9:01:b0:9c:11:8f:12:ea:0f:
                    a1:04:95:e2:27:7b:ae:43:6f:e5:3d:02:64:4f:15:
                    36:97:d0:c9:f1:70:32:0f:61:eb:d2:53:db:78:3d:
                    d3:73:1d:9f:02:73:02:e0:3a:91:b9:7e:3d:2f:d3:
                    dc:86:9d:43:30:3b:97:86:d0:35:d0:3e:bf:6e:3f:
                    45:86:92:32:a8:eb:3e:49:06:87:0d:9f:4a:4b:52:
                    66:6b:ec:2a:c4:24:55:9b:fa:b4:b5:99:07:f2:13:
                    e9:ae:c9:64:f0:fc:35:61:bd:38:e4:cb:31:bd:8e:
                    67:2a:2c:76:b7:08:74:76:b8:b9:02:c9:c8:8b:fc:
                    17:f0:a9:a1:91:63:5e:2e:25:79:24:8a:77:bb:13:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:42:61:48:A3:D4:D1:A2:8A:8C:F7:C6:5A:AD:0D:08:95:DE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl

            X509v3 Authority Key Identifier:
                keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.61.0.0/16
                  130.207.0.0/16
                  143.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3b:8d:81:82:2c:ee:43:34:1c:04:e7:4f:09:e4:40:cc:3c:
         d6:88:51:97:ed:93:e8:b4:de:82:98:46:56:55:a7:7f:76:41:
         25:62:9e:ea:d3:a0:7d:48:fd:a0:a9:76:21:f3:ae:98:cb:a6:
         01:4e:10:29:74:99:57:93:c2:81:06:28:a0:15:26:90:d9:15:
         16:2d:23:88:c5:26:43:ad:11:4b:8e:88:82:ca:df:27:4a:fc:
         a2:71:78:10:f0:f5:68:b6:1e:55:c6:58:b1:cc:3d:77:5d:6a:
         87:f8:6d:bd:73:41:2e:34:1b:5f:b8:ee:4d:56:4a:08:5d:fe:
         92:bc:48:ea:43:19:53:87:68:a4:98:7f:cf:d5:ec:0f:1b:bf:
         15:33:e8:df:15:f8:50:1c:a5:bb:48:42:2c:66:6e:0b:b4:cb:
         bc:26:03:68:03:30:97:19:97:0f:68:c6:71:47:4d:85:ca:60:
         2c:13:0c:3d:ef:f8:f2:4a:b0:d1:73:9c:07:d5:ac:a0:bb:3d:
         5a:8b:1e:b9:1a:d2:29:c0:2c:01:73:c2:51:b7:3e:8e:2d:27:
         34:06:9b:88:51:4a:ac:a1:bc:53:b9:1a:c6:a8:3d:ce:9b:c9:
         e3:5d:3d:44:f7:8f:8b:f2:ae:ef:c1:12:6b:9e:ac:87:b8:cd:
         1b:67:e2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:58:11 2025 by rpki-client