Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa
File:                     2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa (raw, json)
Hash identifier:          ZsbNhPUFdFIlS28pBuDJVEbUqGcVpz/hk2NphIbMvz0=
Subject key identifier:   9C:6B:D9:1B:C0:A3:49:2B:DB:15:37:D1:21:48:12:C0:3F:30:B0:17
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584ACE0B9B5E122BC2A2237B85C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     11232
IP address blocks:        129.101.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9b:5e:12:2b:c2:a2:23:7b:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=9862fb00-a002-4c9b-97c5-db09ad5ba32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:cd:73:23:23:d0:ac:09:80:c3:e1:10:e8:
                    3b:5a:cd:2c:d1:65:8a:95:2d:1d:39:bc:bd:45:81:
                    fb:69:0b:b3:9d:04:98:b7:0c:0f:e2:de:4a:df:0c:
                    05:d1:c5:95:c0:3d:79:e4:ed:6d:59:73:3f:5b:d8:
                    e2:44:23:6a:f7:6c:0c:df:f1:6d:b0:6b:32:5a:ba:
                    dc:13:ce:aa:87:55:46:13:a0:a3:d3:73:f6:3f:b8:
                    dd:76:82:6f:ae:8e:69:bd:9e:58:db:27:03:e8:85:
                    3a:f6:e9:85:09:f2:2f:b1:5a:d7:19:3b:be:45:68:
                    6d:56:a8:d6:65:4e:36:7a:b3:60:0c:be:44:40:2b:
                    66:75:ef:74:60:03:a8:4c:68:32:5e:18:29:75:8b:
                    71:27:f7:ec:11:4c:25:06:86:b1:b7:e9:b9:3b:a7:
                    ce:70:69:05:5e:90:9b:4c:e5:19:92:d0:b6:8a:67:
                    c2:64:37:ac:1c:cd:95:d4:b6:c4:4d:c2:4b:0a:7e:
                    69:d2:44:41:12:27:46:af:82:3d:91:5b:40:fe:39:
                    59:d0:10:fa:71:fe:66:93:58:a2:c5:5e:56:ea:33:
                    f8:e6:50:e3:88:7a:d2:d2:74:df:c8:0f:22:f7:ed:
                    39:70:9f:11:68:80:bb:29:2f:c3:2e:9b:a5:bb:28:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:D9:1B:C0:A3:49:2B:DB:15:37:D1:21:48:12:C0:3F:30:B0:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/2289dde0-49d0-3a0f-bddd-d6fb1b70de51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6b:17:f3:12:13:d2:7a:51:d6:00:03:d2:f5:cc:36:2b:4f:
         8a:75:41:6a:54:4c:7f:ee:ae:82:21:cb:c5:dc:9a:37:40:0b:
         ef:8f:39:95:27:fb:f5:9a:a6:fb:db:b6:7f:22:e5:52:68:c0:
         82:d3:2b:ac:a2:46:70:92:24:86:67:4c:43:28:04:4a:97:07:
         82:26:e4:5e:09:eb:b2:70:d5:fe:83:49:80:a3:42:4b:a9:18:
         ee:c1:ea:e8:71:1e:82:78:32:bf:b8:8c:15:c4:47:9f:18:63:
         bd:e0:dd:7a:ef:70:9a:68:50:59:1f:9e:5a:df:39:6a:38:0e:
         e8:8c:e3:c2:c9:a0:96:9e:b9:91:57:43:39:56:3c:6e:fe:b2:
         81:35:a3:a0:1e:f5:8c:72:fa:eb:c9:c6:33:24:38:36:d7:69:
         a9:74:aa:20:cd:79:c2:c3:5d:a2:e0:e5:18:67:b9:5b:95:da:
         8e:bf:c2:2e:b3:6c:0e:78:21:9b:4f:65:92:b0:a7:1f:f3:3b:
         19:d8:88:9c:f1:69:1e:b9:cc:c7:d7:69:b7:8c:5b:97:22:e3:
         ec:cc:88:ba:3e:6a:96:83:ba:8c:22:fc:31:8f:3e:62:d4:8d:
         fd:48:30:11:4d:b8:d4:c3:7d:a7:0b:66:41:6e:64:a4:a3:e7:
         69:ee:c0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:12:09 2025 by rpki-client