Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa
File:                     81f766cc-e7d1-391d-bb13-9792ad47c246.roa (raw, json)
Hash identifier:          yEjyk8HXu/tWiD2fO+Y3Vleu7NPzS++998ofCT3ceDg=
Subject key identifier:   3D:02:38:FC:72:DE:49:4E:4A:28:63:00:A0:FD:41:20:03:7E:2C:25
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584A7FE09785F48F2FB04E38D400
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa
Signing time:             Sun 13 Jul 2025 01:00:50 +0000
ROA not before:           Sun 13 Jul 2025 01:00:50 +0000
ROA not after:            Sat 11 Oct 2025 01:00:50 +0000
asID:                     213122
IP address blocks:        104.249.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7f:e0:97:85:f4:8f:2f:b0:4e:38:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Jul 13 01:00:50 2025 GMT
            Not After : Oct 11 01:00:50 2025 GMT
        Subject: CN=a27f6767-3d88-4678-9fc5-64d659574131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:6e:9d:4a:37:9f:d4:ad:41:7f:27:04:33:
                    61:2f:78:48:69:da:6e:e8:53:99:ba:05:68:b5:30:
                    9b:03:0a:57:0e:12:33:69:49:03:df:44:e1:08:0f:
                    82:a3:a8:98:cd:c7:62:06:b1:44:0e:24:ca:8d:0d:
                    b2:90:92:16:7b:69:78:b7:0d:0e:87:27:7e:a8:93:
                    29:99:af:f5:39:14:97:b6:b6:a5:00:6c:73:e9:ad:
                    88:32:3a:94:39:87:07:96:48:32:e0:da:2f:9e:c9:
                    f0:44:cd:7f:2a:cd:5a:88:ce:d0:06:48:ac:c8:b7:
                    aa:2d:02:e4:2b:9b:c7:fe:db:29:86:aa:da:12:d0:
                    81:27:d4:1f:e3:4e:a3:21:97:90:21:95:10:70:3f:
                    64:73:39:cf:a7:59:34:6b:40:e0:ef:1b:31:79:f9:
                    55:80:26:eb:91:10:e0:54:c0:84:71:3e:5d:40:b7:
                    5e:df:f6:fd:08:ac:c2:93:ae:a3:00:0a:ae:44:fe:
                    5e:f1:42:74:2a:e9:00:14:95:83:8a:7f:bb:16:a2:
                    93:fd:08:7a:2f:ab:c8:ac:91:3a:7e:e3:ff:ed:7e:
                    c7:4b:8d:52:cc:39:24:e7:ac:aa:6e:0e:c3:55:cb:
                    8d:35:8f:38:24:39:9c:37:b9:c0:54:4d:3e:a1:38:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:02:38:FC:72:DE:49:4E:4A:28:63:00:A0:FD:41:20:03:7E:2C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/81f766cc-e7d1-391d-bb13-9792ad47c246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:65:a5:05:0b:81:78:91:97:09:1b:b6:0c:9a:4a:36:c1:be:
         fb:38:60:35:c8:e3:1f:44:c7:40:ca:f0:55:58:bf:c3:04:ae:
         b5:2d:2d:11:9d:f0:47:43:08:0c:12:80:23:ac:60:50:8a:20:
         0e:e0:bf:bd:f7:3d:ce:00:21:4f:3f:03:53:be:87:ee:d6:25:
         00:7e:7d:2c:a4:6b:8f:65:36:78:2b:7c:34:f4:83:42:f5:c8:
         35:af:5c:a7:27:63:81:88:80:6c:5f:92:34:80:5a:1a:5a:b1:
         af:4c:e0:3d:51:78:d7:20:2a:f8:1a:d4:3e:e1:42:b9:f1:e2:
         61:3e:9b:93:71:6e:fd:c8:74:f3:c1:62:96:e0:57:9e:c6:81:
         30:c1:da:61:66:cc:1e:e9:b8:cc:50:cd:f5:a4:6d:78:58:28:
         be:37:2a:88:a8:20:3e:c7:44:91:d3:b3:b9:ac:41:b3:8e:85:
         a6:41:93:0b:f6:be:a5:71:0c:8e:ae:c5:be:7d:5b:17:88:ca:
         f2:1f:51:f0:8a:a0:e1:22:e2:ca:ac:1e:25:f9:c5:38:36:1c:
         82:f6:31:6d:f4:a1:a4:5c:c2:f4:6a:fc:5a:a9:d2:15:b5:0f:
         49:9a:f7:22:2b:09:40:28:66:c5:8f:65:56:db:f1:20:c5:80:
         ad:ec:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:56:26 2025 by rpki-client