Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/20e88352-3861-3495-97d6-3a5e655c6113.roa
File:                     20e88352-3861-3495-97d6-3a5e655c6113.roa (raw, json)
Hash identifier:          A5yx94LDAOxGgewXu067Hl/xC28JTrgOs/LtaVgff9Q=
Subject key identifier:   C3:8B:3D:2F:34:CD:1D:62:5C:00:16:9C:5D:F1:10:4A:D8:09:08:5C
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584A560051FDDBF1C9788DA09D00
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/20e88352-3861-3495-97d6-3a5e655c6113.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     7896
IP address blocks:        129.93.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:51:fd:db:f1:c9:78:8d:a0:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=726f8bfc-a0c2-4a90-98f8-3c98304548fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4c:c3:5d:df:cc:27:17:b6:ce:3f:2b:be:a3:
                    f6:81:96:4d:6b:ba:4c:49:6f:61:f8:4e:39:70:44:
                    df:73:7a:b7:f1:c4:5d:b6:3e:d5:65:60:db:9f:79:
                    a1:e9:66:30:c1:38:d8:cf:38:ec:27:24:2f:d9:2d:
                    2f:a8:20:d1:c9:c2:2f:bc:7b:16:8e:60:da:01:c8:
                    c8:b3:9e:0f:15:7e:34:09:26:1b:4b:d1:98:f4:ee:
                    7f:bb:6c:a1:37:e9:b2:02:99:e1:51:f0:9a:ca:7f:
                    d3:a5:08:d2:cc:b5:2e:be:8a:c5:33:5f:b4:6c:02:
                    71:2a:a2:88:57:36:0b:fc:ef:9d:b0:c3:15:d3:2b:
                    a0:e2:59:63:ec:aa:f1:59:e5:37:51:02:c4:e7:33:
                    7c:1a:38:5c:5a:e9:ea:7a:4c:c5:e8:78:d8:4d:23:
                    c6:88:e1:7f:43:1d:2f:40:f2:fe:8d:a2:b9:60:16:
                    08:fc:46:87:59:4b:44:55:26:fb:35:79:a6:f7:ee:
                    eb:7c:61:c3:f3:c4:ed:fc:72:c7:13:ce:63:ad:d7:
                    9d:48:44:7c:0e:1a:ce:1f:88:5e:ac:03:b3:0d:ab:
                    cd:e4:a0:ed:66:74:16:8c:c1:2a:28:e3:84:94:d2:
                    e8:0f:2c:a0:4c:7d:25:61:8d:a1:0f:bd:86:0b:86:
                    19:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:3D:2F:34:CD:1D:62:5C:00:16:9C:5D:F1:10:4A:D8:09:08:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/20e88352-3861-3495-97d6-3a5e655c6113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:c4:e7:20:2f:5b:ec:fc:04:b8:8a:ad:eb:bc:d5:45:2c:
         62:b9:91:1f:78:94:09:e7:4f:89:1f:6f:e1:98:1a:d6:d9:d3:
         39:8e:7d:4f:06:76:c4:c1:85:41:02:9f:c4:de:a0:c4:47:08:
         ad:3f:be:fb:6c:54:b0:4d:98:d4:20:a2:dd:48:fc:83:32:43:
         90:00:2a:72:d2:af:bd:a7:12:39:27:bd:cf:9e:e5:30:49:fe:
         41:f3:33:ec:9b:8c:34:8a:fe:a2:17:9c:41:60:94:49:eb:40:
         28:79:d6:93:38:5b:44:d2:b1:e1:2a:98:df:f6:a5:7a:4a:8a:
         e5:83:fa:04:3f:b2:c5:8e:10:c8:9f:90:a2:83:7a:01:47:25:
         32:e9:70:d9:59:50:b6:3c:48:bc:db:17:d6:77:e7:67:b9:76:
         f7:1d:a1:35:1f:bc:f8:84:cd:0f:08:16:ba:b7:a1:ac:f8:24:
         d6:a6:d2:63:32:82:e9:86:4b:60:f1:79:c9:08:dc:7f:50:3a:
         b4:63:7b:c1:70:d3:9b:9a:f9:87:51:04:26:21:ee:63:b7:1b:
         4e:c5:7d:32:ec:54:77:36:ae:89:6f:92:c8:ca:81:07:98:b8:
         85:5e:81:ed:47:47:4f:93:e0:30:e6:ff:08:7c:f5:db:9b:c0:
         5d:ea:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:34:40 2025 by rpki-client