Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c92b1589-85d9-3d07-b616-df79c5aff832.roa
File:                     c92b1589-85d9-3d07-b616-df79c5aff832.roa (raw, json)
Hash identifier:          Ajy6aUmDS1Iu+M/zEpyOYYsU8uZNRvBJAZGHmRrfmPs=
Subject key identifier:   E3:64:D7:D7:F4:75:4E:8B:80:0C:F8:1F:97:B8:EF:E4:E1:CF:4C:2D
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB16B6612F79F906A0A0080
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c92b1589-85d9-3d07-b616-df79c5aff832.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     46385
IP address blocks:        131.153.61.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6b:66:12:f7:9f:90:6a:0a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=32ec4985-7d2f-4df4-a542-e646ceb09499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:5c:fa:07:0a:ff:82:9e:ca:f3:ad:2d:b3:
                    56:14:c6:cf:2a:06:5b:ba:4d:21:29:35:71:4a:0f:
                    d6:c5:ce:7f:33:01:cf:4f:30:93:28:1b:96:43:1c:
                    de:fb:b1:c2:f5:22:b4:89:c1:68:cb:7f:f4:dd:69:
                    90:12:ca:28:80:c5:32:3b:54:47:f6:c7:a2:d6:4c:
                    07:66:b2:79:b7:fc:4c:d5:0e:6b:58:69:58:a0:f8:
                    f6:b8:3c:9f:c6:2f:7a:e4:17:b2:42:f8:42:d8:42:
                    d0:97:78:b4:5e:36:86:47:b8:3d:39:22:85:f9:f6:
                    5f:bf:62:73:a3:1a:aa:fb:14:15:31:99:ec:c7:81:
                    72:8d:6b:02:59:34:3d:ca:f3:fe:9b:81:77:97:57:
                    16:a0:81:b0:9c:a9:16:32:3b:6f:9d:e9:48:81:b2:
                    68:61:9f:11:42:66:18:67:7d:01:c9:cb:dd:07:bc:
                    dd:09:8c:3f:a3:51:37:cb:d8:fe:29:4d:3d:17:0a:
                    36:32:0d:09:f7:cb:e3:ee:f3:07:4a:bd:4c:ef:93:
                    d2:be:a8:99:d1:0a:00:18:8f:ba:be:2e:a7:6d:6c:
                    5f:c8:91:fc:35:cf:e4:b7:35:e4:3d:41:16:7f:80:
                    15:75:68:fa:30:5a:91:4e:ad:11:b6:11:73:57:45:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:64:D7:D7:F4:75:4E:8B:80:0C:F8:1F:97:B8:EF:E4:E1:CF:4C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c92b1589-85d9-3d07-b616-df79c5aff832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:5c:5f:55:a3:a2:61:9a:92:10:5b:42:73:e2:30:5a:69:44:
         e7:fb:6d:55:27:e5:20:60:03:77:50:e1:bc:2e:28:9f:41:ec:
         2c:11:08:df:dc:f5:d2:2a:24:9c:54:86:9e:ac:ea:f3:22:86:
         56:f6:75:06:88:f5:77:e5:12:9e:1f:9f:9d:2e:a8:61:8a:d0:
         94:2f:bd:b0:38:45:95:3a:90:de:a6:b3:3d:8c:44:64:97:03:
         af:4b:cb:37:77:cd:9a:9b:ec:c3:17:f3:84:cd:ad:a1:31:91:
         8f:b1:ad:e9:51:9c:ad:84:e3:64:67:ed:64:25:80:b3:44:d9:
         a6:93:33:bf:96:75:9e:cd:c5:b6:26:26:8a:36:ab:a4:d7:38:
         fd:db:3d:06:c0:0e:6a:07:48:97:68:a9:4f:49:56:7b:9e:f0:
         55:57:d4:d7:4c:96:58:9b:98:4b:01:bd:68:08:63:50:76:8b:
         aa:44:83:73:c5:a6:ef:89:02:73:44:db:62:57:12:ac:81:e4:
         0e:f3:68:40:30:4a:58:3c:9b:0a:f4:bf:0b:50:65:63:c6:24:
         f5:90:a9:c0:31:09:75:04:e9:36:d1:70:a8:28:9b:24:be:29:
         9e:af:c7:15:28:ea:3f:bc:88:ca:57:0d:8d:6f:d2:8a:7c:7e:
         49:30:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:22 2025 by rpki-client