Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/36900df0-0c64-38e9-a32b-d2bf819186c9.roa
File:                     36900df0-0c64-38e9-a32b-d2bf819186c9.roa (raw, json)
Hash identifier:          1oiJ0SRS6bTbG5M7ReboRu1mvlNykauxmh7NiWPdQ8Y=
Subject key identifier:   C3:58:3B:8C:A7:51:1D:2A:1F:52:F7:01:03:CF:18:85:96:95:32:90
Certificate issuer:       /CN=bbe97a67-0973-4bfa-934d-628e0334b705
Certificate serial:       010D0C9F4328584A4DA03F3551D3BFB1A4066480
Authority key identifier: 85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/36900df0-0c64-38e9-a32b-d2bf819186c9.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     395279
IP address blocks:        134.199.48.0/24 maxlen: 24
                          134.199.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:3f:35:51:d3:bf:b1:a4:06:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe97a67-0973-4bfa-934d-628e0334b705
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=c77235a7-dcd9-4d53-aa4a-7270d2dfae64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:ca:02:8b:1e:3f:56:f6:bf:77:76:06:19:
                    04:2b:d9:a8:00:55:2b:b6:65:85:28:30:23:4b:48:
                    f5:cd:10:2b:f3:1b:65:df:37:7a:47:c4:1d:77:79:
                    cd:b6:2a:da:56:ab:13:4f:f9:e1:d8:60:34:83:2f:
                    b8:fb:de:b8:c5:f4:b6:91:28:7c:91:e9:47:6b:4b:
                    4b:eb:9e:37:62:1c:eb:d1:f4:c6:21:1a:86:09:29:
                    41:17:42:42:de:f1:5a:05:e0:67:0b:77:76:ae:e4:
                    30:e7:d4:57:2d:ba:e7:53:b5:8f:33:60:ea:da:98:
                    3f:72:ea:66:bc:f3:5b:ac:7f:15:f6:25:36:d3:a3:
                    9c:d8:9a:59:44:ef:fe:18:8e:aa:ec:71:66:34:06:
                    e8:b9:e0:cd:22:ea:f0:58:3a:72:3e:ee:52:79:8e:
                    dc:d3:08:60:6c:03:ff:bf:e9:fe:20:33:c1:c3:a4:
                    31:f6:68:ad:78:37:b8:f2:d1:78:c1:71:64:29:6a:
                    15:7b:c0:10:e7:e4:69:e3:c8:09:3d:26:93:94:9d:
                    cd:c9:2f:08:b9:8e:94:71:52:7d:7e:64:d7:de:87:
                    29:b0:39:7d:58:30:d9:93:c3:ba:12:f7:14:64:75:
                    e3:c0:1b:8c:97:12:9f:d1:b5:3e:67:bf:2e:05:22:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:58:3B:8C:A7:51:1D:2A:1F:52:F7:01:03:CF:18:85:96:95:32:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/36900df0-0c64-38e9-a32b-d2bf819186c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl

            X509v3 Authority Key Identifier:
                keyid:85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:23:de:2a:7a:98:7d:f2:83:67:10:9f:5a:ec:e4:cb:4e:
         c6:70:ce:8c:31:f0:d0:db:cf:4f:0e:ed:fe:c6:87:1c:46:cb:
         91:09:48:37:bb:57:8e:ea:6f:4f:16:6d:ee:fe:f6:02:51:b1:
         f1:a6:d8:c0:d3:34:69:b0:db:d5:29:89:8a:47:ac:df:c6:a5:
         e6:4d:2d:1a:b7:05:d1:32:a5:0a:35:ef:1a:4b:f7:d8:d6:a9:
         e6:57:65:92:16:60:5e:25:b7:2e:66:a2:a2:8c:f4:88:fa:c8:
         5c:e5:10:2b:2f:49:32:28:34:a8:34:4f:25:8b:13:00:8c:f9:
         6f:09:d5:aa:76:74:89:e2:c3:0c:c5:42:81:25:5d:46:9e:94:
         f4:dc:1e:26:1f:e8:76:43:0f:ad:ba:90:f6:c8:41:d5:dc:ca:
         3f:e3:82:87:9a:a0:8a:14:cc:e2:e4:c1:16:9c:40:f0:0d:bb:
         5c:ff:2f:27:41:d6:1c:b2:a0:bb:40:26:1c:7e:46:d8:29:08:
         06:c2:4c:63:19:8f:55:d9:41:8e:d9:50:f6:33:8b:3d:ff:cd:
         3a:ac:b8:cd:7e:71:c6:97:40:83:6c:0a:67:54:e4:f8:ba:71:
         3e:84:ec:82:f1:7a:69:00:18:4d:6a:81:d9:36:73:47:30:2d:
         95:33:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:21:05 2025 by rpki-client