Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa
File:                     4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa (raw, json)
Hash identifier:          ByDZNtqob8SqMDbXGUWfxR6xydW8KygFsoepy5PH6KU=
Subject key identifier:   39:13:A6:31:24:F1:49:C0:DC:0F:F8:18:46:B3:2D:D1:4F:7F:2D:04
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858493ED3D5B4AD839F1ED792E9C0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     57043
IP address blocks:        107.182.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d5:b4:ad:83:9f:1e:d7:92:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=0c3c7fda-5bab-41e8-a68b-30f0d3fd78c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:30:66:f9:3d:75:de:86:22:e7:6e:c7:76:
                    83:be:52:82:77:09:90:86:1b:f4:e1:92:c7:7d:75:
                    55:e0:05:70:72:b0:8c:0e:72:11:1a:14:93:9e:72:
                    69:3c:47:30:cc:94:56:1d:b1:04:a0:5e:50:05:c0:
                    9e:c4:86:7e:93:58:61:40:73:73:5f:72:84:01:7b:
                    a2:84:c0:20:5b:44:39:c7:e0:3f:dd:e1:e5:f6:23:
                    27:89:a2:13:de:2d:9a:03:22:c4:00:62:02:73:d5:
                    02:d1:23:d8:46:c2:73:75:90:6d:8c:60:3d:fe:85:
                    67:3e:53:f2:0a:a3:c4:ba:96:fd:fe:4b:38:1a:55:
                    9a:77:89:d6:9f:d3:2c:d3:31:87:e1:ff:54:ba:b7:
                    01:80:32:ce:04:56:c7:7f:71:3e:75:43:07:71:e0:
                    b2:89:fc:7d:c8:73:3c:80:b2:bc:22:b9:45:5f:16:
                    33:c8:4a:ce:24:41:3b:16:69:b7:a7:b6:ed:a4:8c:
                    b6:8d:e2:96:17:dc:5f:50:6f:13:02:75:49:0b:1a:
                    af:b9:47:a6:0d:3a:af:44:3d:90:08:b0:b0:f5:ac:
                    f9:d9:94:c9:28:32:5e:f5:8b:f5:95:af:37:66:1a:
                    43:6f:b0:c2:5b:49:5f:71:8c:0d:09:05:ba:49:7f:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:A6:31:24:F1:49:C0:DC:0F:F8:18:46:B3:2D:D1:4F:7F:2D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/4231c7b7-c38f-358f-b43c-b41b8e0f9017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:cb:6f:6a:77:63:b9:a8:17:14:98:e4:fb:b6:e0:a3:06:22:
         e8:c2:aa:83:da:87:2e:80:93:14:d1:20:d2:cb:08:41:59:56:
         bc:2e:50:23:cf:c3:57:ae:f8:c4:23:71:ea:8f:ad:fd:0f:e0:
         55:f7:19:31:58:0e:73:d2:cd:3c:2c:60:ac:f4:9f:6f:2d:21:
         aa:82:1a:1d:21:cd:03:1d:8d:d4:2a:36:8c:5e:81:dd:44:ab:
         86:25:10:88:97:05:66:fc:9f:32:72:7d:7d:8a:7b:c0:77:89:
         25:56:c7:c6:c0:94:ae:52:60:0d:85:39:2c:ca:69:3d:cd:d9:
         73:0b:3b:72:a0:b4:51:cd:6f:9b:93:4e:43:34:9a:15:ec:8b:
         c3:5b:18:ca:aa:ba:d6:eb:50:ca:56:40:eb:14:a2:30:c2:78:
         13:98:a3:90:85:5b:b6:df:6d:cc:b4:9f:ed:9d:89:13:c7:a0:
         c9:b0:f3:5f:ae:7b:69:3f:01:61:7d:54:21:35:ca:8c:32:47:
         aa:b1:51:cc:33:41:a5:46:ac:32:db:e1:ae:1a:63:80:f6:20:
         c9:95:8f:71:25:b8:d0:ce:5f:56:57:a3:2a:55:6e:23:8e:78:
         4c:18:62:76:e9:af:12:66:ff:2c:fa:d8:7e:f6:82:16:d1:e1:
         a2:d3:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:09 2025 by rpki-client