Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
File:                     88630cac-7d18-3b8e-8847-9847e81f16d8.roa (raw, json)
Hash identifier:          HelLDtTtwpGv3WfSWMTpf5SxYlHI/IdUw2v7tiFUPrE=
Subject key identifier:   C6:D0:7A:84:57:C3:59:F5:66:88:EB:89:B6:0D:41:0C:41:15:78:8B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AE89127EFE3FBBFF44BAD0280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     29538
IP address blocks:        128.1.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:27:ef:e3:fb:bf:f4:4b:ad:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=03162e3b-1871-45e1-bd51-ea6b3de741cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:53:27:a8:25:7c:88:f5:c4:2b:a6:95:57:
                    37:4f:c8:23:7e:4d:e3:6f:9c:15:48:a6:c3:95:d9:
                    03:f5:5d:97:1d:95:fa:98:32:67:d7:6b:ba:03:7b:
                    d8:d2:7c:12:08:df:38:c8:d9:14:22:32:6b:27:33:
                    1a:8d:b1:5e:6d:a1:71:b9:f4:b6:dd:d1:f7:f8:5f:
                    94:b2:bb:b1:4b:94:ec:c7:09:50:87:62:5c:c9:0f:
                    54:08:48:ba:61:dd:32:02:a4:d3:2b:40:d7:93:f8:
                    05:5e:c3:b0:b9:08:06:3c:10:86:bf:2e:62:ad:5e:
                    12:7e:d4:7c:84:c4:58:86:6d:15:d0:13:02:05:78:
                    17:50:35:cb:94:df:54:e6:ab:48:3f:68:09:98:16:
                    d4:9a:49:c4:ff:55:20:d6:2e:ae:20:20:de:d1:bb:
                    c3:a2:15:c2:ed:97:1b:b9:79:91:5f:1e:84:23:e1:
                    ec:55:b8:8c:58:44:b4:30:30:1c:75:fc:1c:b9:e9:
                    94:59:6e:da:74:75:1a:65:a8:9a:10:2b:28:89:16:
                    29:59:11:d2:9a:91:44:d6:43:1f:34:ee:61:a9:31:
                    c4:29:3d:dd:ae:51:4c:0f:dd:03:2b:4d:cf:c9:c2:
                    da:97:03:fc:e4:a6:28:f9:97:63:af:00:8d:45:42:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:7A:84:57:C3:59:F5:66:88:EB:89:B6:0D:41:0C:41:15:78:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:99:76:be:1f:c4:5b:00:bb:50:f9:38:79:2e:25:21:ba:
         1c:91:bd:dc:8c:75:aa:6c:ee:e3:f3:51:16:d6:9d:05:f4:c0:
         1e:00:96:81:a0:d3:cd:60:ef:2f:77:c7:34:f7:62:a5:6f:fb:
         a8:ce:00:67:b0:be:73:9f:f8:64:c8:9b:d1:ae:3d:31:a4:2b:
         cd:b6:bb:b6:da:05:ce:2d:4e:64:c2:7d:3c:42:db:4b:39:11:
         e5:97:09:23:5c:84:a2:c9:f9:67:6c:57:13:c5:5a:9a:58:f3:
         89:9f:1e:9d:1f:c2:0d:11:a1:29:66:4b:81:85:61:af:66:51:
         dc:3d:79:4e:71:8f:90:85:62:bc:4c:e4:73:7a:d2:e4:da:6a:
         39:f4:c2:87:5c:5f:2c:71:ee:14:e6:c1:17:f1:6f:c3:38:50:
         ef:96:75:db:f0:3c:d5:54:93:fa:15:5e:48:12:fa:7d:c2:fa:
         01:4b:bc:35:5d:79:d6:ac:c6:a1:94:69:fb:a2:f3:5d:89:8f:
         b4:d0:52:f6:cc:33:04:ed:d9:a3:5b:0d:c2:1d:0a:9e:32:79:
         5f:33:ab:27:a9:90:d9:a7:b1:22:0c:83:96:07:85:3b:0c:65:
         32:6c:41:91:4d:87:32:67:6a:b7:22:03:2f:ad:7f:c4:b2:6b:
         d1:35:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:35 2025 by rpki-client