Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/13a40295-ddd8-3d23-bffc-0787858cfa1c.roa
File:                     13a40295-ddd8-3d23-bffc-0787858cfa1c.roa (raw, json)
Hash identifier:          bPum9Oo2d41O3POdKIiAm0p2RPqHxhbnj7F53h4OMSQ=
Subject key identifier:   74:3A:CB:01:1E:19:8D:0A:69:8A:5C:CD:1D:CF:6A:0E:CE:F0:14:99
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584AC8765910200D8CAA11EA961E
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/13a40295-ddd8-3d23-bffc-0787858cfa1c.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     16580
IP address blocks:        131.232.7.0/24 maxlen: 24
                          131.232.10.0/24 maxlen: 24
                          131.232.27.0/24 maxlen: 24
                          131.232.30.0/24 maxlen: 24
                          131.232.72.0/24 maxlen: 24
                          131.232.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:59:10:20:0d:8c:aa:11:ea:96:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=8b200f50-ec8e-418a-9ebd-a712ea1e20b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:8c:61:42:0a:20:9f:68:07:e0:81:6f:3d:
                    74:73:bb:12:7e:be:01:48:aa:4c:79:f4:7a:46:d0:
                    03:e0:c7:f3:68:0d:7d:aa:00:e3:05:45:6e:25:46:
                    a5:35:5a:95:e1:86:c2:e5:e4:ce:c0:90:99:53:ac:
                    ca:f3:e3:22:de:96:72:db:5f:6e:da:3b:49:8c:76:
                    9e:34:b1:be:3a:b7:d4:a4:0d:68:9c:d2:f2:db:2f:
                    e3:9e:03:ed:76:94:ed:34:51:bf:02:29:f7:26:54:
                    3e:2e:7f:c8:3b:8a:2d:14:b8:c9:4c:97:81:7f:81:
                    c1:03:ed:61:6a:05:4f:ab:89:89:30:14:2c:ae:5c:
                    6b:d5:48:6b:59:34:fc:37:8c:7c:f2:c7:3c:f9:a2:
                    41:1d:51:56:78:d6:b5:46:86:b2:e3:71:fd:b3:6f:
                    ca:1c:e0:cc:52:fa:e5:16:0f:72:ff:65:b7:ad:53:
                    c1:95:f9:76:b1:0d:08:a0:40:6d:87:6d:0b:a8:40:
                    2c:90:6e:45:e0:e6:59:91:2f:e8:9d:20:8c:7d:bf:
                    4d:f4:ae:52:2e:ed:26:15:97:c0:66:66:a8:ba:86:
                    d1:b1:f9:6b:5e:57:84:bb:80:b0:48:c1:9c:28:0b:
                    c3:96:46:08:e8:f7:71:64:97:83:61:90:b2:0c:81:
                    64:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3A:CB:01:1E:19:8D:0A:69:8A:5C:CD:1D:CF:6A:0E:CE:F0:14:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/13a40295-ddd8-3d23-bffc-0787858cfa1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.7.0/24
                  131.232.10.0/24
                  131.232.27.0/24
                  131.232.30.0/24
                  131.232.72.0/24
                  131.232.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:cc:97:28:62:fa:69:c1:52:02:3f:50:de:d7:02:5d:18:9c:
         89:05:74:24:65:28:77:75:c3:92:90:20:f4:01:7f:2c:41:a9:
         21:03:d8:0f:93:65:f9:d3:ef:27:0f:5d:b3:51:3e:56:67:b1:
         8e:aa:31:7b:9e:f2:42:ef:d5:e2:a8:c2:25:24:7d:3e:59:ea:
         c5:00:b7:b7:0b:6e:9d:7e:9f:93:68:a1:f3:d7:61:7c:41:fb:
         e0:bb:9c:ec:f9:68:b9:9f:6b:7c:29:ac:29:e3:f6:75:b8:a7:
         8f:42:45:3d:50:65:d7:64:24:50:d2:c1:cd:95:a2:bc:6c:64:
         5c:3d:e1:05:06:f4:49:5e:bd:81:bc:c5:d2:b1:52:b8:58:3b:
         45:a3:89:48:99:e2:3b:af:00:de:11:24:f4:96:9d:4e:d1:a9:
         78:91:fd:b5:04:c7:52:75:f8:f3:42:d3:1f:0a:9a:7f:3f:f7:
         65:b5:68:67:21:31:86:24:ff:c7:1c:c5:10:65:f5:b1:97:b7:
         cd:77:58:55:ea:4b:3c:d5:5c:c8:1c:73:14:36:4a:42:31:29:
         60:07:7a:95:61:74:3f:11:98:9b:da:25:f3:0f:f4:fb:8f:19:
         3c:ab:aa:f6:ce:72:33:2a:31:37:22:32:07:2a:d8:ac:a6:45:
         6d:2b:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:55:40 2025 by rpki-client