Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/08efbae2-5477-331b-b473-38399917c289.roa
File:                     08efbae2-5477-331b-b473-38399917c289.roa (raw, json)
Hash identifier:          isZyTEu9JV7ixyzzTpH5gT+pQS70BcNpJeU2o2ZbplA=
Subject key identifier:   BB:36:6B:6C:D1:E4:D5:44:3F:9D:F7:83:39:4A:0A:1D:90:8A:83:E8
Certificate issuer:       /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial:       010D0C9F432858499AF47A28CF1DB177FF910580
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/08efbae2-5477-331b-b473-38399917c289.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     14325
IP address blocks:        131.109.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7a:28:cf:1d:b1:77:ff:91:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=e13d6d06-617f-4832-8483-ea85ec7f000c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:ff:2f:65:ee:05:ed:cc:6d:ab:92:d5:f0:
                    e7:23:b5:74:03:e0:93:4f:b7:0f:8f:d9:04:ab:67:
                    5c:c1:59:64:c9:e8:a4:d3:fc:06:ef:c5:dd:fd:6d:
                    9d:a7:60:c9:cd:8e:63:80:74:0a:53:86:7b:0e:93:
                    58:74:d9:60:53:5f:2d:96:24:1d:db:29:c1:3c:ae:
                    e7:9a:85:03:d0:9e:c2:40:0e:6a:7d:6a:ee:c8:94:
                    09:a3:71:d3:f1:c0:1d:7e:ad:c2:e2:2b:08:70:3a:
                    7f:93:4b:f1:a6:24:7f:82:bb:f2:08:fe:81:b4:d9:
                    65:bb:7b:bf:fd:b9:41:97:53:8c:2a:f2:68:68:3a:
                    af:72:92:ba:66:e2:f7:61:01:7a:0b:a4:04:42:cc:
                    b7:64:b5:c9:01:8a:d3:58:17:c0:3e:5e:36:9e:74:
                    ca:c8:25:ac:0f:62:61:36:bc:97:8c:12:eb:cd:a2:
                    eb:d2:e3:4d:ba:04:e1:b4:d4:4f:5a:63:dc:6e:1f:
                    16:51:e1:4e:2e:34:c5:0c:7d:22:dc:d1:ba:56:4f:
                    ba:c6:d8:54:70:b1:ab:09:70:a4:95:7e:c3:99:c7:
                    45:eb:d6:ce:9d:a4:f1:af:23:17:a7:8c:32:88:a5:
                    47:96:79:0e:b3:c8:ef:2d:9c:34:2a:f9:72:af:e6:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:6B:6C:D1:E4:D5:44:3F:9D:F7:83:39:4A:0A:1D:90:8A:83:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/08efbae2-5477-331b-b473-38399917c289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl

            X509v3 Authority Key Identifier:
                keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:df:ad:18:62:d0:26:3f:ae:46:b5:46:5a:a3:0e:1e:7d:
         24:06:63:65:ec:d8:b9:11:27:d1:71:ab:57:f2:b3:97:39:20:
         7b:df:f5:3f:2c:2a:a4:c5:79:de:c3:8c:ce:2b:59:7b:5d:bd:
         4c:1a:55:0e:40:48:bc:e2:43:ee:d9:af:6b:4a:23:99:a5:01:
         b7:d5:3d:20:f9:53:52:a2:d4:16:dd:ab:ae:ec:30:7a:92:39:
         49:5e:13:24:95:3f:fd:98:18:2f:f7:19:9e:e5:4b:86:fc:a2:
         46:6e:f8:23:ab:88:49:87:37:99:69:3a:2b:b2:d0:63:10:48:
         82:96:27:fb:eb:04:a2:6b:9c:f5:1c:10:c7:f7:67:c7:33:2f:
         8e:2c:43:68:dc:57:82:a6:06:ac:0e:cf:c3:ed:40:f1:ba:ef:
         f3:45:d9:1a:67:fd:58:be:07:68:2c:6e:d2:1c:9d:4e:a1:c5:
         b2:c4:6c:f0:f1:e5:d2:b4:47:ab:53:60:a5:0f:bd:a7:ff:1a:
         84:86:0b:18:7e:8d:98:01:d5:cd:e2:89:bb:ee:fc:c3:7f:cc:
         95:ca:57:e9:cb:d1:5d:07:e3:02:6e:cf:93:5e:03:7a:48:fc:
         92:9f:1c:89:8b:07:dc:0e:40:25:03:c6:48:2b:09:72:e3:37:
         5e:24:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:15:39 2025 by rpki-client