Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa
File:                     d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa (raw, json)
Hash identifier:          yLtM0+kbiViDHN1VQTksuo4qDu+BOAoDCewDLYKE+aY=
Subject key identifier:   53:16:B6:5B:0B:75:4A:17:26:01:28:B5:A1:15:C4:6B:B8:21:47:91
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285848F4F69B7D61864DF315AB5E50
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     16509
IP address blocks:        144.81.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:9b:7d:61:86:4d:f3:15:ab:5e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=51fb4dde-318a-4010-8ee9-f407bcc14385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:f4:3a:e7:88:dd:a4:ae:40:ce:8a:0c:9c:
                    77:12:ef:76:92:47:eb:a4:65:db:46:48:3f:1d:15:
                    35:7e:16:16:0b:b9:fe:82:81:b5:86:57:00:75:2f:
                    0b:9b:43:b8:06:47:36:ff:dd:e8:86:e8:4e:f6:85:
                    19:a4:42:4d:56:e9:bd:c9:da:84:9a:02:90:42:6b:
                    2a:f9:07:75:b2:bf:d0:a4:fc:3c:43:b1:c6:df:4e:
                    99:ba:7a:6c:ca:da:3e:d3:f2:c3:c1:18:c3:ec:e9:
                    eb:d7:22:df:13:59:b2:28:a5:f4:af:2a:bd:65:aa:
                    2f:4c:5d:16:1e:4e:e5:62:31:3a:31:e3:ab:48:c1:
                    7d:b4:de:29:23:9e:ac:6d:7f:6d:4b:04:9a:48:16:
                    c2:6c:74:ae:46:34:7a:1e:69:4e:9b:64:ac:68:ab:
                    8c:7b:53:10:a4:a0:fa:5e:10:9c:f8:97:25:7e:b9:
                    7b:d4:78:84:6f:4d:18:a7:1d:9c:3b:51:31:26:1c:
                    35:bf:15:76:cb:d0:72:5e:f1:c6:57:5c:68:a2:16:
                    3e:cf:fa:fa:00:1d:42:f5:75:fa:0b:df:aa:78:ea:
                    6e:a9:a4:28:14:2e:c7:46:ee:87:8e:09:d5:6b:95:
                    f5:d1:b2:f9:84:f5:da:03:75:e4:fe:15:81:ea:85:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:16:B6:5B:0B:75:4A:17:26:01:28:B5:A1:15:C4:6B:B8:21:47:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d3fbe63d-51b8-3a6b-bf54-1e5fa9641f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:80:b0:68:18:d6:4b:61:9a:33:a7:f9:7d:43:39:5a:5a:
         a0:f3:a1:83:54:84:85:d1:da:45:58:3b:c0:51:3a:06:2c:47:
         6f:97:b5:13:8b:20:5c:bb:86:ed:38:eb:77:66:4b:88:5a:fb:
         a7:7b:eb:21:46:7f:c0:c3:2c:b0:d0:08:65:8b:85:9c:51:09:
         51:03:9a:b3:95:ae:08:22:c6:a3:4d:10:96:b1:8d:82:4a:7a:
         73:2a:c0:70:90:d1:32:12:ec:75:ff:91:26:e8:cf:28:a1:5f:
         a0:a1:0b:be:95:03:4b:60:a5:58:e4:2c:60:c6:87:75:1d:9b:
         06:68:d8:3c:49:2a:cd:6c:0b:56:05:1e:dc:0e:72:27:1c:85:
         53:f3:54:e8:17:39:8d:db:d4:6a:78:04:fd:39:ea:4a:6b:c9:
         86:6b:23:5e:fb:23:97:10:04:dc:8e:78:7a:3f:1d:32:b1:28:
         28:37:8a:b9:8f:93:37:73:68:e6:43:96:2e:ed:fd:fa:ce:44:
         74:c4:36:79:c8:25:ed:f8:3f:6a:00:3c:7b:ea:22:79:4c:09:
         5e:36:4e:70:77:a0:95:61:1f:a2:8a:c0:45:84:5f:ec:10:a4:
         c7:5c:e0:eb:6a:50:9a:89:04:17:69:f4:bc:33:5b:aa:f1:a2:
         27:cf:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:19 2025 by rpki-client