Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/c4105883-b510-3eac-93fb-bb49566f1ded.roa
File:                     c4105883-b510-3eac-93fb-bb49566f1ded.roa (raw, json)
Hash identifier:          PbAK4XfIFdAy3S3i7kwEX1Dair0FMyYSYfEbCOq6JbQ=
Subject key identifier:   00:97:4D:1D:4B:AF:6B:DB:00:4B:23:4C:6E:3E:57:22:15:42:97:CF
Certificate issuer:       /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial:       010D0C9F4328584AF0F12E88AED2AE4814421700
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/c4105883-b510-3eac-93fb-bb49566f1ded.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     15267
IP address blocks:        138.129.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:2e:88:ae:d2:ae:48:14:42:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=41fff72b-375b-41b6-bfb9-04533752db14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:20:aa:34:ea:80:0e:f1:65:ce:ce:fe:7f:
                    b0:6d:ae:c8:04:c1:bc:70:45:c0:24:cf:6e:d4:f5:
                    c7:f3:2a:11:5e:15:56:12:c3:81:20:c6:7a:ed:d7:
                    1c:57:12:cc:a3:06:70:2f:af:8b:ea:92:55:b4:b6:
                    d3:c4:a5:93:50:10:55:a5:43:45:05:2b:ae:55:47:
                    79:52:3a:5e:97:9d:4e:4b:ec:0f:70:d2:ff:ff:1c:
                    71:b2:47:bf:1a:95:71:70:f8:48:d7:a2:da:f9:b4:
                    b3:a7:45:5f:a0:f8:02:b9:a9:18:84:95:2e:12:9a:
                    a7:47:ac:df:26:68:8d:31:5b:09:36:2b:e8:2b:1a:
                    1e:8b:24:b0:fb:08:68:e0:43:e8:16:5a:c1:7f:16:
                    0d:a6:61:21:54:ac:ff:3b:d5:3d:2d:d8:44:7e:b7:
                    b8:48:23:1e:55:6b:a6:a0:c7:22:8c:a4:3c:13:e0:
                    70:53:16:df:da:1c:1d:0f:20:6c:9c:ce:f7:9a:5d:
                    7c:01:56:26:8e:4c:18:7a:65:ca:dd:91:41:17:78:
                    cf:44:cb:fb:52:b0:89:78:1e:63:e3:a0:84:55:9e:
                    70:00:b8:72:0c:f5:12:28:27:51:62:3e:97:5d:e8:
                    47:ae:69:46:a5:de:b5:f6:49:ab:8b:72:8e:a5:a2:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:97:4D:1D:4B:AF:6B:DB:00:4B:23:4C:6E:3E:57:22:15:42:97:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/c4105883-b510-3eac-93fb-bb49566f1ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl

            X509v3 Authority Key Identifier:
                keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.129.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:43:e5:0b:44:bd:94:c2:e9:b4:13:5c:ba:0c:83:fe:95:2a:
         0a:b9:a4:42:cd:5c:04:86:be:15:84:5a:da:7f:21:7f:18:29:
         fc:dc:74:9d:2a:e1:0d:71:48:5f:4b:f6:35:46:7e:e9:a3:5b:
         4f:80:46:38:30:19:54:6e:c0:06:c7:4d:d1:a8:83:81:68:80:
         92:df:d8:13:9e:e4:b6:f8:48:2d:93:b8:66:26:bb:af:01:84:
         b3:52:a9:d3:44:43:06:a3:39:a9:89:52:47:c9:4e:dc:78:0f:
         e6:fb:43:ce:90:8d:3d:72:89:2f:74:e0:8a:82:dd:18:ba:06:
         87:1c:de:99:35:8c:3f:03:30:ef:f3:3e:b2:16:e4:a9:c8:bb:
         4e:07:01:86:97:a7:cb:14:34:19:6f:5f:87:d1:68:22:e7:4a:
         98:98:ea:07:20:e3:73:1c:cf:41:95:e0:a3:50:20:7d:c0:17:
         26:a0:ee:ac:95:96:85:f0:e3:6d:b5:62:7c:58:c2:8a:a2:6b:
         c0:34:9f:03:bd:3d:0d:11:26:0a:09:15:a5:4b:69:5c:b4:ac:
         cb:60:b8:d3:92:50:a8:b1:39:de:bc:cf:f2:ce:65:3e:46:94:
         5c:67:47:75:35:cd:dd:2f:ed:d8:2f:c1:f5:12:c8:03:16:c0:
         c3:61:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:00 2025 by rpki-client