Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
File:                     2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa (raw, json)
Hash identifier:          setLg7Cb/xWVwj0vC5PfAJkELMktk9xgHRWYyE4qDBY=
Subject key identifier:   5F:0E:FC:35:95:08:39:09:A1:9C:48:37:C4:37:A4:54:CA:05:F4:5F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584B2FC185393FD4B612ED4C1B80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     19437
IP address blocks:        131.153.239.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:85:39:3f:d4:b6:12:ed:4c:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=ee8b2a80-a3d5-4a07-bc30-c37f6c51191d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:d3:34:6c:b9:11:61:8f:db:d1:f9:f5:12:
                    75:ed:13:4a:80:d8:99:0f:e0:bc:c2:f5:51:e2:d4:
                    cb:1d:13:f5:10:f0:a2:56:05:96:a9:62:7c:2e:ef:
                    67:10:32:17:49:fe:c4:61:4a:0d:ff:20:fe:69:35:
                    b9:21:cc:84:e9:28:99:1d:bf:2e:9c:fe:85:85:ef:
                    21:6e:6f:19:43:de:bf:ea:0a:5b:73:35:a7:b4:1a:
                    56:b9:f4:62:a1:45:81:22:79:e3:c5:0c:88:68:a2:
                    b0:7c:c0:5f:ee:fa:2a:0f:cc:11:64:80:70:69:73:
                    e4:11:90:4b:dd:22:40:cf:04:c5:f7:dd:16:8c:0c:
                    d3:c8:c2:90:50:68:fd:3d:ec:43:ff:37:49:39:b1:
                    b5:a3:27:c0:6a:eb:1d:6c:61:f5:6c:eb:ce:18:0c:
                    97:17:80:ef:62:0a:76:a3:cf:2f:b7:f4:c0:74:8d:
                    e2:3a:fe:d0:63:8a:04:7e:0e:39:75:76:08:59:fc:
                    d3:1b:97:c1:7c:7c:e2:a0:d7:14:72:d5:63:8f:f1:
                    ad:45:81:b3:9b:21:19:af:bc:6c:85:60:89:bb:70:
                    c7:d5:db:7e:71:eb:74:85:c8:49:21:99:35:82:a9:
                    36:f0:46:23:93:81:73:e9:8b:2e:fd:67:dd:42:14:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0E:FC:35:95:08:39:09:A1:9C:48:37:C4:37:A4:54:CA:05:F4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b3ded98-54a2-3aff-a1b4-19dcf10efd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:c7:48:13:5e:1b:de:4d:91:01:6f:21:52:91:55:82:42:
         e0:12:5c:a1:c0:43:37:bb:f5:17:d8:da:af:ec:72:66:55:64:
         e2:f5:7a:42:ab:24:42:e9:8e:e8:2c:a2:54:90:0e:eb:3c:b2:
         d0:71:e6:07:06:07:6d:d7:ed:60:cb:1e:a2:70:9b:f0:b8:96:
         9d:0e:40:54:eb:1f:40:8e:5e:84:c3:09:0d:15:bc:b5:c2:8e:
         8c:6a:4d:f4:94:c2:ae:2e:d1:ce:bd:f5:e1:99:7f:5b:59:5d:
         4b:aa:5c:fa:14:6e:32:b0:86:68:ed:d9:b5:52:d4:8d:7b:46:
         18:b3:67:4a:ba:ea:b6:05:3e:26:72:3f:d4:b2:bc:7a:98:ec:
         b0:59:2b:5c:c1:32:c2:fe:e1:6d:ad:c1:0f:34:d4:f4:71:16:
         30:68:79:f7:72:ef:b5:23:5d:eb:37:a9:d1:d3:37:95:e9:23:
         ef:16:eb:93:e7:0c:d7:8c:f6:18:3a:13:0b:1e:b5:f8:0a:2f:
         75:56:4f:4f:20:ba:15:bd:42:b0:8a:88:b5:02:b4:0a:81:4e:
         33:1c:08:d9:83:72:fb:f4:7f:9d:f9:8b:82:c3:b8:4a:36:d4:
         da:d6:40:6c:96:fa:5f:3c:1f:f7:fb:da:b5:cc:41:1b:86:44:
         eb:d3:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:44 2025 by rpki-client