Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
File:                     bb18ad33-5add-3198-87f4-b7c59f066532.roa (raw, json)
Hash identifier:          dcThstcnVOIhMt+SQYFZFlG4XOFbcQ4QkwmbBXGRSMk=
Subject key identifier:   B5:52:3E:7F:BC:7E:87:DA:32:DE:8B:9A:9D:42:AD:ED:D2:2F:BE:ED
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F4328584A374AE050253326EF9AA1E880
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     29831
IP address blocks:        128.254.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:e0:50:25:33:26:ef:9a:a1:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=4c8d522b-0f89-431f-b6ca-5eb4e8938662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:97:3e:7e:4d:da:98:9c:ab:8b:fb:3d:3d:
                    d1:7b:27:df:1b:4c:bd:6a:41:ca:da:31:0b:c6:f0:
                    34:4f:d3:2e:f5:15:15:b7:43:49:89:bc:d4:09:42:
                    76:19:b4:e4:69:de:2a:49:81:2a:da:95:bb:6b:d5:
                    9b:25:a9:76:25:3b:de:f9:9a:b8:b4:80:1c:38:34:
                    eb:27:9d:df:a5:82:11:82:9d:e3:86:c3:e9:1a:d1:
                    69:9d:83:55:05:eb:64:55:a3:d3:65:74:93:cf:03:
                    e2:ae:8d:d2:fe:ad:3d:cc:cd:75:a8:78:92:16:ec:
                    a7:bd:f8:db:ae:c3:13:2f:a8:f8:dc:bb:21:11:a2:
                    72:6a:45:17:ab:3d:69:49:4b:80:08:3a:8c:0e:f1:
                    b9:60:58:3f:11:90:42:bd:80:e4:5e:a7:a0:b5:e1:
                    52:5d:d4:54:8e:91:7a:f6:56:25:19:20:10:50:7d:
                    89:5a:ae:1e:ab:35:4a:06:4c:88:1c:e6:c9:dd:64:
                    cc:41:99:40:e3:39:a2:e4:80:61:e9:4b:46:36:84:
                    94:4b:ab:ad:e7:39:b2:58:b7:62:fe:a5:60:f8:9c:
                    74:a1:aa:50:59:66:d3:50:7a:26:08:12:33:02:37:
                    2e:a8:8f:be:7b:09:0c:2c:f5:d1:b8:a5:6e:fa:bc:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:3E:7F:BC:7E:87:DA:32:DE:8B:9A:9D:42:AD:ED:D2:2F:BE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:44:7f:e5:12:9c:4f:3c:af:4a:d1:8a:7f:8f:d6:bb:17:
         70:1f:ba:e9:de:65:19:3c:f8:da:9a:cb:16:73:c5:89:74:8a:
         23:71:88:3f:3f:92:87:67:be:d0:89:01:16:e7:f2:e7:b6:62:
         5f:03:19:79:59:c5:4b:00:0c:96:b6:ca:2e:20:29:6a:ab:19:
         ae:37:31:af:a3:02:b9:b2:bc:39:b9:76:af:da:e8:6b:3f:a9:
         57:d3:95:f9:c7:94:bb:73:c0:b3:00:17:6b:54:be:0a:0c:92:
         28:43:a8:1a:d4:e4:10:33:1e:ae:47:92:fa:b1:43:6a:8a:ee:
         48:5c:f3:ff:f7:89:73:1b:23:4d:50:a2:39:2b:79:87:4a:8c:
         04:8d:a8:ba:a5:cc:66:cc:57:74:d2:25:76:89:f6:1c:ad:cb:
         d3:17:ad:ed:3d:a3:8b:06:c8:a4:b9:c1:3b:b0:9d:6c:fc:e1:
         4f:6d:de:68:82:fd:b9:a2:77:fe:5f:22:ae:63:3c:f8:9a:d9:
         a0:b1:2b:63:a1:78:52:4e:f0:01:b9:6a:23:6b:f0:68:dc:70:
         ea:e9:3d:67:27:d0:ba:c7:1b:c2:56:36:cc:12:e3:6d:51:94:
         d8:33:66:36:22:2d:85:09:62:07:6a:39:f0:05:27:54:4d:61:
         fd:fe:c7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:07:44 2025 by rpki-client