Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa
File:                     aa896354-1055-31e1-aee8-cb3f9151aabc.roa (raw, json)
Hash identifier:          DsFZyfJ/nYyK9vKQMcCfGJzkqMrtOIvCf4rDYgze7CE=
Subject key identifier:   68:D0:98:62:93:CB:A2:3F:E1:00:9D:B0:9D:D5:AE:05:F1:E5:75:D7
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584ACB41234CB2502B7272E6E900
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     49
IP address blocks:        129.6.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:23:4c:b2:50:2b:72:72:e6:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=55e30765-56b1-4428-9f49-4733d5b76227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:7c:16:b9:6f:59:1d:20:2f:bc:07:83:03:
                    c7:7d:d4:35:45:47:7d:8f:0d:b4:59:62:37:0b:1f:
                    ee:00:6b:33:10:72:03:93:a8:89:22:d9:47:52:95:
                    3b:33:50:b9:b0:41:32:f4:77:fd:3a:a4:70:22:de:
                    f4:4a:ed:58:6f:fc:c9:de:db:fb:db:a4:fd:ee:f1:
                    6c:e7:4f:b0:2a:86:e3:3b:1e:82:c4:c4:94:5d:44:
                    6e:65:fa:41:67:f3:4b:2e:64:3a:31:9f:55:98:23:
                    08:cc:1b:d2:4e:24:00:6e:69:62:24:30:7e:76:af:
                    6e:05:4c:57:1c:dc:37:bf:1a:a8:a5:a5:67:66:45:
                    58:f8:71:af:3d:fc:62:e3:bf:90:c1:ea:b8:3f:6b:
                    e4:75:3e:58:ac:9b:aa:b3:09:f0:c4:f0:bc:55:96:
                    32:63:14:82:93:ec:ba:f8:2e:85:a5:cd:f2:a7:4d:
                    5e:67:20:ea:7c:16:3a:c6:0b:af:43:3f:2d:bd:eb:
                    3d:02:31:fa:60:21:1a:1f:2c:77:f0:55:88:70:5f:
                    10:7e:db:0f:4a:5d:2c:81:9e:e2:bd:fd:aa:0f:d3:
                    68:a9:08:23:1d:5c:6f:16:03:19:5a:a1:0b:a2:d0:
                    cf:28:b5:e5:0d:25:e9:e7:27:eb:05:d7:9f:01:dc:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:98:62:93:CB:A2:3F:E1:00:9D:B0:9D:D5:AE:05:F1:E5:75:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/aa896354-1055-31e1-aee8-cb3f9151aabc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.6.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:de:c2:96:fe:77:a0:db:0f:a5:76:28:be:89:79:51:b3:67:
         2a:cf:e2:fb:55:f2:10:37:ec:62:53:66:f3:2f:e7:1a:78:03:
         a9:04:ea:3a:69:5a:22:85:29:d8:44:79:d9:56:52:dd:79:3f:
         1a:04:7e:19:50:b7:6b:b5:a8:52:53:24:68:f6:5f:4e:0e:7d:
         60:15:7f:cf:25:96:26:02:55:d3:a2:92:89:02:3d:f7:f9:03:
         ac:f6:d6:91:f2:93:53:a8:7b:fa:b6:9e:4b:10:ea:3f:36:8d:
         07:12:26:51:6e:39:70:37:78:75:9c:25:e0:30:42:d1:ac:60:
         57:f2:de:29:08:da:af:c0:02:99:4f:ae:af:d9:b9:38:7d:c3:
         53:2f:0e:5b:8a:32:8a:66:f8:19:42:fe:38:94:95:01:3f:8d:
         ad:c3:13:81:b0:fb:40:3b:e5:6a:a3:24:d3:5c:13:20:e9:f4:
         1f:79:b2:78:ff:0c:1d:f4:42:93:46:04:9f:0b:db:9e:53:53:
         7d:29:d7:ac:77:b0:49:0e:42:42:f7:ef:29:1a:ae:c9:d7:ce:
         2e:a8:15:15:a2:68:14:97:f0:97:0a:c9:50:fd:5c:91:fc:b2:
         60:d2:56:04:f4:1e:d9:4b:72:fe:86:e7:58:52:40:b4:03:e3:
         2a:5f:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:15:31 2025 by rpki-client