Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa
File:                     7776e941-b405-3bce-be48-def35de489d4.roa (raw, json)
Hash identifier:          f8urWE3YzowfKU3qj+GNswJ8SnCVxeS4OV52wf8hli4=
Subject key identifier:   97:2A:8E:C0:B6:B9:15:9C:0E:4B:4B:33:55:C2:4F:28:07:C5:00:7D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858494303F1D34DC16AEF9077BE00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     20454
IP address blocks:        131.153.236.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:f1:d3:4d:c1:6a:ef:90:77:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=e78ed756-72b3-4aaf-9914-eaf69cb87fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:b4:4a:2a:37:21:58:d9:06:a8:3e:0c:68:
                    b0:5d:27:7f:ab:de:9c:ee:1c:2b:1b:fe:f5:2b:45:
                    54:ce:30:0c:64:47:20:54:61:97:c0:f3:cd:a3:41:
                    11:0c:a5:4e:9d:c0:cf:cc:02:54:3c:ac:fb:fd:4f:
                    27:2c:2b:46:06:9d:e0:be:cb:ee:d3:7b:9c:42:7a:
                    62:29:cf:2a:b5:3c:63:dc:70:4a:05:86:ee:a5:dd:
                    3d:01:28:7b:5a:12:f3:ed:f3:96:20:b3:df:88:12:
                    d3:4a:cf:cf:4b:b9:62:db:f3:48:79:c3:bd:52:90:
                    92:44:bc:c1:0f:6a:e1:80:9a:8d:0a:f7:01:f4:ba:
                    2a:43:4a:b4:5d:52:5b:0e:26:d5:cc:87:f6:df:67:
                    c4:04:94:ed:5f:be:ab:9e:c0:6d:b8:4d:aa:16:7d:
                    fa:f6:e2:81:5a:80:c1:d4:bf:c2:0b:f7:27:14:d1:
                    a0:32:1c:60:dd:57:1f:5f:bb:8a:4c:e9:02:f2:07:
                    f2:bc:62:0d:94:f8:31:69:3f:ba:d2:17:60:4b:35:
                    cc:5d:14:dc:32:34:bf:3d:03:eb:3d:1a:e6:43:ef:
                    0e:e1:30:cf:4a:00:8f:9a:bf:55:a8:3e:b1:62:8d:
                    64:78:17:97:e6:20:bb:9a:89:52:5d:d9:1f:92:e3:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2A:8E:C0:B6:B9:15:9C:0E:4B:4B:33:55:C2:4F:28:07:C5:00:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:0f:e4:bb:44:8c:71:1a:9f:fe:70:be:f0:a9:3a:b9:a4:
         14:8d:d3:79:4c:b7:f5:82:29:2d:dd:8f:1c:96:91:15:fa:64:
         4e:f8:34:ea:bd:a7:af:53:80:af:ad:d0:78:65:39:8e:43:0f:
         bd:20:d6:04:d6:f9:60:dc:8b:36:94:b5:10:33:6f:98:08:36:
         95:b4:d2:63:5c:ba:7d:2a:8e:45:3e:a6:cb:47:6d:75:be:aa:
         d3:3c:ff:f7:2d:c3:e5:5b:df:39:8b:4e:85:2f:c4:ab:ed:4e:
         6e:a8:d3:4d:ce:81:ea:3b:64:c8:b9:de:07:00:62:7c:ce:78:
         17:64:3a:c9:9f:13:b7:0d:24:e2:46:70:86:84:50:ae:22:39:
         e9:21:c0:43:d4:ef:46:60:db:a0:5f:79:84:fc:49:9e:96:ea:
         2b:13:6f:51:9e:d1:38:66:19:08:57:6b:0c:f1:ce:1e:a2:14:
         e8:60:af:7a:d2:53:20:9f:e8:8d:39:37:70:6c:60:f0:2e:f6:
         d6:04:0c:07:a0:ca:3d:85:2b:23:ba:53:2f:d2:6b:f8:1d:9f:
         6b:37:97:20:43:26:67:d6:13:87:3b:c4:80:f9:22:13:f1:1c:
         2b:f3:aa:c1:bd:12:77:0e:5b:dd:d2:34:02:8a:fc:01:4c:0a:
         1e:b0:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:22 2025 by rpki-client