Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa
File:                     1dea2b87-2ac9-378e-9508-bdc020438a1e.roa (raw, json)
Hash identifier:          rchQRowZY5XAtKroyghGpytFXQqFKgISKeyH17qcY7A=
Subject key identifier:   11:B9:11:1D:EE:AF:05:BD:D8:89:2D:E1:3D:50:F8:B7:DD:E0:C2:61
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AE8912776F51E344D0B1F998C
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     62610
IP address blocks:        128.1.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:27:76:f5:1e:34:4d:0b:1f:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=a564dfa2-179f-4bfe-8eeb-cb7ddd7dc375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:cd:2b:ce:da:8d:ea:fc:80:3c:7b:57:8c:
                    e6:c3:85:70:06:f8:24:4c:5e:d7:4c:06:38:ff:31:
                    84:d9:fc:ca:ee:33:17:d3:2d:fd:57:69:02:7d:ff:
                    a9:35:f7:46:dc:05:5b:f3:ba:27:f8:52:50:86:0f:
                    c8:a3:c4:13:f9:f1:4f:a0:44:74:19:12:48:6b:d3:
                    b8:60:14:5c:05:c7:b9:c8:d2:42:4f:58:67:80:da:
                    0d:41:48:30:51:b2:70:f1:a4:95:f7:a5:2b:4a:d5:
                    18:8e:8e:52:a6:8b:ac:87:81:f4:14:38:5d:4c:05:
                    27:62:e1:7b:96:c5:c6:fa:9e:59:73:59:ab:ce:51:
                    27:77:5d:5f:03:26:05:b9:5e:b4:82:15:d8:b4:0c:
                    cb:f9:e3:09:67:7f:96:6a:60:67:71:96:cf:ba:23:
                    26:60:5c:f1:bf:5e:67:53:a2:ca:24:aa:99:1e:61:
                    aa:87:d4:dd:b5:a8:e8:35:f6:aa:87:d6:e8:fb:24:
                    ed:d5:80:eb:82:fa:cc:aa:28:92:7b:c2:12:5e:a7:
                    35:d1:5c:a5:e1:b1:6d:10:76:2c:a6:1b:10:e0:80:
                    19:c0:84:2f:b7:fa:6b:fd:51:7d:de:3c:be:52:e6:
                    4c:14:44:08:f3:3f:36:9b:26:20:2e:7e:48:3e:99:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B9:11:1D:EE:AF:05:BD:D8:89:2D:E1:3D:50:F8:B7:DD:E0:C2:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3d:e3:4c:a6:76:e9:41:7d:41:be:45:ce:25:c4:da:72:35:
         0b:7b:30:1d:2c:dc:83:6c:7e:23:b6:67:a1:56:17:35:a8:93:
         fc:6b:06:a8:4a:d3:40:d6:27:8a:e3:17:ee:f2:c6:60:17:01:
         ec:50:04:95:d6:07:d1:4f:12:dc:1e:a0:30:53:fb:99:cb:ea:
         c5:15:a0:7f:35:22:76:25:09:77:a5:11:93:a4:8c:c9:ac:b7:
         bb:58:4c:0a:3b:09:ac:98:cd:50:64:a7:e8:f1:50:01:9c:6e:
         38:9f:6b:b4:a4:4c:e3:bf:44:d5:de:d8:42:7c:a8:05:29:4f:
         3f:6e:bc:9a:e4:fc:e3:9c:b0:04:85:f2:ce:6f:86:2f:ab:b5:
         00:fd:04:2f:60:75:ae:0e:f0:16:91:f1:9f:e4:cd:a5:3c:f8:
         3a:6e:40:86:3e:94:5c:4f:8f:1d:e2:40:25:9c:ad:4d:80:fc:
         04:98:c4:73:04:df:08:85:d9:e1:0c:18:ec:86:f6:f5:c6:5b:
         6b:80:18:38:76:8b:83:02:0a:ae:c1:fd:39:ef:85:c5:e6:4a:
         d2:29:d8:cf:bf:e0:4e:3c:5f:e6:ce:69:2c:88:ee:f0:f4:b7:
         03:22:c3:e5:00:83:c1:ae:b7:72:8f:c3:4d:01:f5:34:7f:17:
         b8:6b:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:20:36 2025 by rpki-client