Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa
File:                     cd1d2995-4610-3bd4-b98d-17721b22293f.roa (raw, json)
Hash identifier:          J9kvI4iL/wPKwL+2vsD47ZFE+Fqv3LMXdj47MeBhpwM=
Subject key identifier:   F8:03:B2:E2:FE:D1:75:7B:F0:39:59:95:2D:3D:D4:9B:E9:EF:2D:CD
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB16BB0DF2650A85C3609C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     60558
IP address blocks:        131.153.86.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6b:b0:df:26:50:a8:5c:36:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=14f72034-a98f-43b7-a290-f77bc525d8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:50:b1:5a:c4:3d:63:44:92:3f:c5:d8:f3:
                    e5:4d:f4:00:5d:1a:83:be:7f:4e:e5:61:60:2d:73:
                    8b:24:af:82:77:1e:0d:e4:96:17:4d:93:d5:d4:74:
                    69:56:fb:73:fb:c8:78:59:c5:77:77:ce:0a:d7:8d:
                    b3:71:ce:4d:fb:3a:8d:4f:79:b1:47:a0:a8:a2:b1:
                    14:04:89:95:34:6c:a6:00:85:19:ab:10:1a:5e:c5:
                    05:e8:fa:d1:43:45:6b:63:dc:e3:27:e0:5a:c7:7b:
                    7d:be:a7:7e:38:c1:8e:ed:de:7d:4c:7c:dd:d9:95:
                    62:8e:19:cc:06:36:15:49:78:e3:1c:6f:a0:4a:42:
                    79:0b:d5:4e:b7:2e:1f:50:e3:b3:e3:6b:c3:3c:7a:
                    f9:61:65:c6:d5:fe:f1:cb:69:d1:30:1d:c6:e9:f7:
                    d6:d3:0f:e2:40:65:2f:4b:fa:49:4d:1c:3e:a2:e7:
                    82:d3:4a:63:b3:d9:c3:96:20:5a:97:82:16:59:58:
                    85:03:68:35:aa:1c:72:58:de:3a:dc:f8:b3:28:73:
                    a4:93:a9:e1:5b:d2:f7:8f:3f:26:9a:76:4b:5a:fc:
                    46:79:f2:bb:2a:a1:3c:d7:ad:e8:8d:3b:a1:24:07:
                    6a:86:4a:a4:76:8a:b4:23:56:cb:d9:dc:01:a0:a8:
                    53:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:B2:E2:FE:D1:75:7B:F0:39:59:95:2D:3D:D4:9B:E9:EF:2D:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:f3:71:34:28:fa:4f:88:20:38:22:58:f4:97:1d:91:b5:
         3b:59:a6:c3:18:d4:dd:8a:b3:0f:e8:65:dd:04:0b:59:68:f1:
         19:55:23:b9:1f:9a:55:d9:4b:55:f6:61:54:62:ec:17:e7:bb:
         f6:37:7a:7c:18:94:65:77:43:07:31:73:c6:45:9a:b7:73:69:
         42:8e:6c:dd:1d:2b:c2:c6:66:29:bd:e3:c0:be:c8:d1:14:f6:
         b3:72:b7:93:02:06:04:01:8a:9c:fd:da:b5:49:f7:32:f7:16:
         5d:16:77:b4:9f:1f:c9:cf:d1:79:1c:5b:0b:58:76:66:1d:3d:
         05:39:c1:69:06:6e:18:10:f6:b6:53:2f:d7:a0:c7:fb:f9:89:
         40:af:a1:85:2c:8a:90:6c:c9:50:6c:8b:af:df:88:3e:a3:e5:
         92:60:44:43:e4:c8:d2:7d:60:b5:1e:3a:a9:80:a7:a8:4d:36:
         1c:a9:7e:a5:16:1f:25:ce:4d:12:79:33:bc:d0:ce:66:e9:87:
         50:cc:29:91:6a:6d:cb:b8:6a:41:21:dd:a1:80:0d:7f:f3:91:
         9e:cf:93:3b:c8:a8:d7:6f:7a:ad:68:1c:e4:a1:e0:aa:e0:48:
         e3:dd:bd:1c:7d:5b:fc:90:9b:a1:40:9a:86:b8:a6:37:79:f7:
         0b:f6:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:50 2025 by rpki-client