Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1bbef87a-b5bd-3c48-b58e-948148c25a34.roa
File:                     1bbef87a-b5bd-3c48-b58e-948148c25a34.roa (raw, json)
Hash identifier:          LAlrOXhim6nMeUnlqTo9xPh3U/iNIAQJQHvd10LlGk8=
Subject key identifier:   43:2A:7C:D8:55:20:0B:1A:74:D6:8B:B6:D3:18:F7:B8:AD:D4:E1:DC
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849B5B788F58610D7036AB2F7C0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1bbef87a-b5bd-3c48-b58e-948148c25a34.roa
Signing time:             Thu 01 May 2025 15:04:56 +0000
ROA not before:           Thu 01 May 2025 15:04:56 +0000
ROA not after:            Wed 30 Jul 2025 15:04:56 +0000
asID:                     136501
IP address blocks:        173.213.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:b7:88:f5:86:10:d7:03:6a:b2:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  1 15:04:56 2025 GMT
            Not After : Jul 30 15:04:56 2025 GMT
        Subject: CN=b710fdcf-78c6-414c-8424-319496155553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:8e:78:6a:9b:26:12:cb:0e:9f:bc:b8:a0:
                    ef:ba:78:5b:f4:f0:ad:dd:4b:37:5b:fe:39:17:c4:
                    74:7a:bd:8f:76:4e:9b:e1:62:58:c4:0f:b2:d1:20:
                    75:b3:39:53:0f:7b:f8:70:5e:32:b8:66:42:5c:40:
                    8f:45:6d:0a:fd:85:d4:9c:74:c6:f3:74:ef:0b:92:
                    65:ee:a5:6f:47:69:46:5c:24:8a:96:6e:b0:59:64:
                    88:ba:09:39:0b:a4:fc:da:d3:33:74:07:28:a3:27:
                    09:ce:aa:5e:1a:60:21:b8:1c:6a:31:d4:1e:79:59:
                    e2:3a:4a:a1:82:4b:50:94:9f:94:77:d4:ad:b1:3f:
                    f2:5d:6f:8e:a5:6c:ce:19:2e:0d:a5:eb:95:1f:1d:
                    c1:8b:06:65:06:c0:ed:5f:b1:34:4a:ea:cb:d1:30:
                    23:a7:ba:4e:71:1a:60:13:ae:33:ec:6e:a2:fe:41:
                    d3:cb:1e:a4:22:2d:35:ad:1d:7f:7f:15:9a:3e:0e:
                    89:78:14:ba:f6:ac:63:25:77:bf:bf:a8:79:3b:90:
                    ab:14:45:0a:c5:62:cd:0c:0d:00:dd:ea:0f:a5:4d:
                    ce:b1:f0:44:bb:db:c1:24:bd:cd:b3:84:3c:70:5c:
                    3b:31:99:ba:b4:06:db:f1:37:7e:a6:e7:2c:99:93:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:7C:D8:55:20:0B:1A:74:D6:8B:B6:D3:18:F7:B8:AD:D4:E1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1bbef87a-b5bd-3c48-b58e-948148c25a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:69:4b:4d:34:e3:29:ea:71:cf:56:36:65:ee:f0:83:a5:29:
         8f:88:65:5f:db:fc:1e:03:89:84:c1:dd:6d:9e:79:cc:cd:71:
         1a:3d:93:56:05:86:d0:e0:a6:cc:ad:4e:90:6b:7a:14:ca:b9:
         95:fb:99:53:9b:7a:6c:e2:e6:23:b3:c7:81:c5:1c:64:e2:bf:
         ed:a2:e6:99:4b:02:12:6e:92:54:7f:99:73:ca:05:d9:e9:53:
         b7:57:49:52:10:c8:81:53:31:23:cd:3c:6d:2f:bf:59:b3:6b:
         a0:f4:d6:16:9e:d4:79:a5:7a:0b:2e:96:11:ef:bb:ef:58:59:
         27:b9:a4:03:e3:be:eb:1e:bd:27:d6:1e:74:07:d5:b3:36:b8:
         80:29:e5:c5:f6:dd:1c:a6:fb:14:55:38:0e:03:53:93:a8:0e:
         ef:81:af:97:7d:0e:f9:19:81:a8:de:01:a5:74:9a:4c:d9:c5:
         1c:b4:ca:90:29:28:98:7e:6b:4c:e1:ad:e2:75:cc:0a:c1:d0:
         b9:b8:0c:f2:0f:42:1d:3c:2e:f2:ed:33:a5:39:5b:52:db:9e:
         90:14:87:1c:f8:66:4f:4c:7c:fd:17:1b:fd:0a:94:10:1b:87:
         a0:db:7a:23:f8:c3:2d:79:81:8c:02:b9:a9:85:f7:7a:6c:50:
         54:08:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:26:03 2025 by rpki-client