Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ab550f23-8748-3fdd-a517-18e7647b5ca2.roa
File:                     ab550f23-8748-3fdd-a517-18e7647b5ca2.roa (raw, json)
Hash identifier:          FX9rSWp6m+a96OXDhgmaTP/ckFYv/rKxsZltr2wjR1w=
Subject key identifier:   89:78:A6:1A:B2:F7:5B:A1:4D:B6:66:04:CB:13:C4:ED:E9:4B:A3:B4
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584A385D72B3623FC779C193C800
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ab550f23-8748-3fdd-a517-18e7647b5ca2.roa
Signing time:             Tue 17 Jun 2025 10:14:19 +0000
ROA not before:           Tue 17 Jun 2025 10:14:19 +0000
ROA not after:            Mon 15 Sep 2025 10:14:19 +0000
asID:                     203724
IP address blocks:        131.229.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:5d:72:b3:62:3f:c7:79:c1:93:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jun 17 10:14:19 2025 GMT
            Not After : Sep 15 10:14:19 2025 GMT
        Subject: CN=6e42c226-c186-404e-868d-3e3d96d7e96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:79:6a:fe:29:f2:c8:34:ed:c7:1a:0d:d0:
                    a1:33:35:2e:cb:50:b7:de:1c:0a:46:02:86:04:ac:
                    93:ff:d4:0b:7d:24:aa:b8:a3:f3:c6:97:96:0a:0d:
                    70:cc:bd:bf:ef:98:16:03:d0:63:18:2f:dd:bf:6d:
                    3e:e6:a6:3e:70:66:87:c1:f4:1b:b2:1e:79:a6:59:
                    61:04:5e:ba:f5:fe:91:0e:5e:36:a1:8a:80:c8:2a:
                    8d:5e:86:03:a7:a2:fa:19:82:18:6c:3f:aa:dd:1e:
                    dd:43:b1:e2:0e:79:e9:3c:85:6c:ab:70:6b:47:7b:
                    5f:f1:1d:a2:68:62:c4:13:45:b6:c4:b3:2c:c8:92:
                    40:50:ed:68:2c:3b:89:ed:d2:af:4a:f2:5e:ce:b4:
                    ff:82:b6:51:52:e7:c3:4c:95:eb:9d:59:a8:b5:62:
                    2b:0a:55:3a:71:34:af:e8:83:c1:b8:61:3c:60:62:
                    4e:df:1c:7c:1a:b7:e4:99:5c:da:ca:48:df:bd:a9:
                    45:83:2d:a4:18:49:d1:5c:a8:2b:87:8e:6f:e9:6a:
                    c2:ba:b8:3f:27:eb:9c:ba:64:94:1a:87:70:d2:3b:
                    74:b5:fa:07:45:12:66:35:79:29:0d:54:ef:c5:ae:
                    52:b6:2d:3c:42:38:19:e2:ea:32:af:74:a7:ae:f5:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:78:A6:1A:B2:F7:5B:A1:4D:B6:66:04:CB:13:C4:ED:E9:4B:A3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ab550f23-8748-3fdd-a517-18e7647b5ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ca:47:8c:d5:6c:eb:2f:b9:60:54:f2:f6:a3:34:7d:7e:24:
         cd:26:e1:1d:b2:ee:97:a2:31:5e:a2:f3:20:49:37:b6:7e:1b:
         e4:7b:9c:88:ca:e5:fb:df:fd:41:68:48:9a:8c:06:f3:13:2a:
         91:c7:e2:d6:36:6a:0e:a4:fb:0e:8f:70:4a:dc:68:f0:2d:b7:
         5e:ae:32:35:c8:6f:dd:d8:9b:71:2f:55:a7:9e:00:28:23:0d:
         a8:75:db:7a:f7:58:83:09:3d:29:a5:1c:f9:62:4d:8d:a0:aa:
         ba:07:1b:e5:da:9d:ac:45:72:99:63:1e:32:9a:7e:33:31:2d:
         30:69:7c:5e:41:9e:6e:cd:06:89:a1:54:74:cf:4f:95:84:ad:
         d6:8e:a5:df:88:f7:e1:11:95:e3:b4:a9:52:ba:e4:62:a1:79:
         c0:22:0c:5d:ee:c6:3e:c8:db:f0:a5:2c:fd:49:0a:54:80:77:
         42:d9:a8:7a:12:9b:5e:a2:06:fe:0b:20:5d:5b:cf:a2:b7:f0:
         b8:e1:e2:ee:76:2c:25:42:b0:20:d2:26:19:b1:08:88:69:e7:
         6a:8b:7e:b3:78:08:1d:95:71:26:22:9c:9b:92:8f:53:9f:fa:
         c6:23:5f:ae:4d:db:82:88:76:db:65:f6:1e:d5:0e:ec:c2:81:
         89:ee:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:40:34 2025 by rpki-client