Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa
File:                     4494a79c-8607-3624-b716-5c884c4ed442.roa (raw, json)
Hash identifier:          1M9kwXAgFaRDDKG4trNCu7xXB0GlbfyDHlbB2HNZCR0=
Subject key identifier:   16:63:27:E8:0B:B3:C0:BA:76:D6:32:12:49:CB:F7:CE:72:0E:47:9A
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584A68260A250A2F10B27D13DBC0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     11427
IP address blocks:        134.202.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0a:25:0a:2f:10:b2:7d:13:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=b62ac419-6ec7-41c6-9fbb-5f2ce1362415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:d8:82:79:6f:a7:29:d0:f8:74:26:6f:07:
                    ac:cd:c7:46:0f:ae:ae:a5:fc:c4:78:47:3f:b0:d3:
                    55:7d:9d:3c:2a:59:c8:e8:88:57:14:c8:ba:6c:61:
                    53:f5:9d:90:da:32:a6:88:9f:c7:71:85:f4:dd:22:
                    d1:2d:8b:68:2c:04:c0:b7:95:b7:df:3b:42:8f:87:
                    5f:34:9e:9a:91:02:7c:0e:24:d7:4c:a0:db:54:71:
                    46:73:c1:34:cf:be:54:f6:03:00:05:25:a3:24:5d:
                    db:b9:b8:2d:75:10:d6:1e:3e:54:9b:c5:61:65:9b:
                    15:0d:62:cc:28:a1:a0:89:3c:76:8d:3a:17:9b:31:
                    f3:60:e9:ba:c5:7e:7d:99:7b:8a:1b:99:8b:21:56:
                    88:35:31:6f:30:57:c1:28:af:1f:96:9f:5f:42:ec:
                    db:57:d2:21:ef:35:ed:57:81:2e:7d:e8:3d:b9:50:
                    9f:d8:d9:6c:c7:ed:8c:a7:17:e3:74:cb:68:42:0e:
                    72:f9:e2:84:9c:10:f9:61:9e:eb:39:d1:03:bd:e1:
                    5b:e3:24:82:5b:68:ff:85:30:ba:66:04:a7:6f:bc:
                    ad:34:b2:b9:4a:ff:27:6a:5a:07:0b:71:72:a9:90:
                    2b:e9:79:c2:8b:f4:ab:66:af:2c:16:74:1f:bf:fa:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:63:27:E8:0B:B3:C0:BA:76:D6:32:12:49:CB:F7:CE:72:0E:47:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:ed:ae:67:d8:36:4d:92:ee:0d:88:38:1f:d1:35:b3:0f:
         a7:61:ad:0d:ba:7b:0d:fb:19:a7:47:8c:32:04:59:2c:22:bc:
         f0:db:5b:ae:af:3b:3f:11:f7:e9:be:28:6b:1a:09:eb:4a:d2:
         09:74:85:ea:83:15:e7:b7:f1:c0:92:8a:84:f6:4b:c8:84:4b:
         28:89:b0:76:29:71:15:7a:fe:aa:ae:ce:ae:c1:e7:ed:1a:03:
         a6:ee:3e:93:99:9a:03:7b:8b:dc:63:5a:ba:12:59:c2:98:81:
         c6:16:05:43:fd:8b:86:cd:ac:02:66:de:d4:5b:d3:67:0d:1f:
         62:59:25:19:23:88:a3:4a:08:56:33:d6:71:31:d8:e5:98:3e:
         93:97:34:3f:5e:49:77:bf:eb:da:f9:c1:3b:39:ea:a9:e6:73:
         e5:16:5e:49:6b:6f:02:c4:e2:87:13:3b:e0:ec:4c:ec:6c:1d:
         13:b5:29:81:73:bc:0f:de:a3:5a:b5:8c:1e:9d:e9:f7:14:17:
         fa:a7:b0:b7:d7:81:f1:5f:02:0c:9f:ab:ec:87:77:77:43:4a:
         be:6c:24:c1:77:d3:ca:20:b5:7a:be:9b:ab:75:37:73:dd:84:
         64:9b:6f:b8:06:22:0b:45:f6:66:98:51:51:b0:23:70:6d:f9:
         6a:9c:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:30:32 2025 by rpki-client