Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa
File:                     26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa (raw, json)
Hash identifier:          8JNRS/FVlfHyZw2ShjJczQ5qk1qeuQO+tMkBgrLu70M=
Subject key identifier:   AE:AA:DD:F8:01:BA:6B:7A:3B:BE:2A:7F:49:74:03:18:2E:BC:3A:FB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858490F7C05E34CE65C4F4EDD5A40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     54113
IP address blocks:        131.125.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7c:05:e3:4c:e6:5c:4f:4e:dd:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=80ed2596-8b57-413f-a73f-a4ac1dbe44a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:14:bc:a4:13:ff:da:15:db:62:6d:6e:0a:
                    3a:b1:ab:c6:48:05:fa:47:43:d2:f1:c1:d5:cc:3f:
                    86:eb:28:16:03:e3:70:1d:7d:43:00:d4:90:30:04:
                    0c:bb:83:d8:e6:27:cd:46:f2:db:b0:40:9e:0e:70:
                    e0:3e:e6:9f:03:d6:58:7e:5c:b2:5e:2c:ea:07:4f:
                    84:f9:72:a5:72:45:22:50:34:e0:91:85:63:01:29:
                    26:71:9f:b0:e2:14:db:78:b6:c9:64:62:2c:f8:95:
                    ab:a2:2f:f0:bf:d4:1c:e9:7d:de:a5:b8:4d:34:d8:
                    6e:62:94:10:5c:18:76:32:0c:bc:b9:85:b2:b9:bc:
                    89:70:03:81:95:b3:ff:ea:c1:1c:f8:61:f5:ae:1d:
                    14:11:d8:4b:97:6d:d5:94:33:5d:17:43:ff:d2:e2:
                    7f:1d:ed:29:33:0e:59:39:fa:b5:4f:aa:02:6e:d5:
                    5a:40:fe:12:41:fd:9d:f7:27:f5:ca:6b:7f:49:5b:
                    25:a6:f8:d6:29:28:3d:b2:dd:f3:81:7b:dd:fc:4c:
                    5e:69:11:55:e6:fb:db:59:bf:f4:4f:eb:d7:67:ea:
                    53:d7:27:4b:d0:19:3c:d3:c7:95:45:87:a6:93:4e:
                    af:4a:a3:21:c4:97:97:f3:83:bc:37:64:e6:34:90:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AA:DD:F8:01:BA:6B:7A:3B:BE:2A:7F:49:74:03:18:2E:BC:3A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:85:d4:b3:41:7c:ac:cb:ad:6c:b8:be:7e:b2:51:52:97:97:
         a1:6c:77:b5:7e:d7:07:ee:6d:3a:2c:f8:58:fc:71:0f:03:98:
         cf:23:1f:4b:f0:51:6b:c0:2b:58:43:35:c2:fc:4f:39:82:d5:
         fe:8c:99:58:51:7c:dd:f5:a4:a3:ff:2f:63:d3:73:5c:eb:32:
         6d:4e:39:0c:6f:b1:0c:fa:76:20:5f:2b:b9:e8:ac:53:b8:54:
         5b:37:0e:48:93:4b:b9:9d:8d:59:ed:8d:54:67:54:89:41:cc:
         d7:26:a8:ba:f0:e0:8f:fc:df:7e:27:fa:5f:82:1c:f8:13:bb:
         a0:4f:29:05:e6:40:a3:6d:ef:aa:ad:67:78:50:29:07:f7:3a:
         74:79:02:b6:26:3d:6e:90:f4:30:b3:a5:f2:70:19:76:21:6d:
         ca:51:e6:69:79:2e:d8:2a:8a:fb:d5:42:ff:d0:48:cf:87:db:
         33:e0:47:d5:47:ac:3a:f9:99:a9:c8:28:9e:58:75:e8:bc:ca:
         96:f3:e7:1f:3a:3c:74:97:82:f2:94:f9:4c:75:db:cb:d2:c8:
         c5:4c:36:34:45:fe:56:82:d8:85:09:dd:61:4d:d0:9b:fa:38:
         2f:d4:a0:bb:1f:92:33:21:56:cf:3d:95:4f:c7:f5:c7:9b:5e:
         28:f7:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:01 2025 by rpki-client