Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa
File:                     49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa (raw, json)
Hash identifier:          h/cYf24K57UTsn70xj5vidw90LFVIBUx+QXvzSr8unA=
Subject key identifier:   82:51:88:EA:0B:CD:FB:BE:F3:5A:B0:02:11:BD:B9:23:FD:58:44:29
Certificate issuer:       /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial:       010D0C9F432858492E13C540D0EA9E769AC85480
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     2637
IP address blocks:        128.61.0.0/16 maxlen: 24
                          130.207.0.0/16 maxlen: 24
                          143.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c5:40:d0:ea:9e:76:9a:c8:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=9bc5593f-663d-4e1f-a354-c439c6e7a59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:d7:47:ba:37:9e:37:4c:5f:79:87:67:87:
                    e5:0e:96:6d:98:22:6b:36:a6:2e:c4:e3:21:12:66:
                    a8:ab:bb:67:e1:08:42:cb:6d:c5:db:1d:7c:e3:47:
                    7d:af:e3:ad:1e:9c:3a:14:00:5a:4d:14:a3:80:a3:
                    b3:8f:49:27:e9:ff:23:40:82:fc:d4:6e:21:b2:39:
                    b4:60:47:6b:b2:1a:cd:6a:3d:99:ad:9b:1d:a3:1b:
                    2d:7f:5f:18:e9:0a:8b:7f:aa:4c:0e:e7:37:4a:53:
                    a1:ec:2b:53:11:44:2a:39:6f:8b:50:96:a6:26:de:
                    78:3d:c5:ef:3e:86:1d:2f:c9:e8:07:e7:a0:96:a6:
                    22:8e:11:31:2e:3a:3e:13:03:b1:a9:58:41:d8:f3:
                    f3:3b:8c:5e:a6:c9:a7:cb:54:a5:8a:75:7b:96:0a:
                    f7:17:fb:8d:b9:2e:6a:47:3a:ef:80:7b:d9:8a:94:
                    4e:ab:bf:e8:4f:05:50:d1:49:00:5f:fb:23:c2:d0:
                    74:95:81:7f:8a:7a:e4:54:cc:04:b9:f9:9a:96:02:
                    1a:4f:3f:7e:09:40:2f:84:53:1c:5b:b6:26:e4:e7:
                    fa:fe:ff:f9:8f:7d:08:66:d0:c5:a7:85:dd:05:f0:
                    61:34:fa:61:65:f7:3a:ea:0f:0b:2b:61:3b:68:f2:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:88:EA:0B:CD:FB:BE:F3:5A:B0:02:11:BD:B9:23:FD:58:44:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl

            X509v3 Authority Key Identifier:
                keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.61.0.0/16
                  130.207.0.0/16
                  143.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:bb:f7:7d:d6:72:07:c0:fd:22:fe:b9:76:b2:3f:18:b1:67:
         f3:f0:f2:4e:29:aa:a0:c4:3f:11:28:6e:78:bf:54:4b:08:29:
         88:a0:b7:ec:44:ca:a2:c4:e0:ef:62:1f:db:91:b8:ff:4d:82:
         e8:7f:0d:ad:16:51:d4:d9:f8:4a:3a:b1:de:ea:cc:36:9b:b0:
         04:b9:5a:6c:cf:72:3a:e5:01:89:ea:25:f9:00:3c:52:24:b8:
         25:78:9f:a4:87:6a:2a:c8:b1:59:a1:56:66:68:32:43:d7:b7:
         bb:33:1f:0d:30:9d:fb:65:9a:31:13:25:96:28:44:1e:41:21:
         9a:a5:6d:35:05:e3:73:36:d0:89:eb:26:3d:d0:84:b5:3d:81:
         fc:4d:75:b2:02:8a:7b:f0:4d:25:5f:37:84:92:af:30:5f:4f:
         4f:f2:27:b6:51:41:12:b5:0b:56:ed:1b:bb:7d:83:bb:dc:82:
         f4:53:25:cd:eb:8b:52:d2:6f:91:5c:59:ed:83:b8:46:2a:ef:
         02:65:24:58:97:cc:3d:40:bd:ec:30:72:af:9f:45:e4:e5:36:
         dd:d9:9b:9d:49:d0:a5:7f:c0:50:e9:d1:04:5c:99:c7:6d:b7:
         94:69:6c:30:e2:58:0e:f2:75:89:6b:6e:3f:0b:53:a8:59:6b:
         8a:f6:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:48 2025 by rpki-client