Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/9930ebaf-afd3-3b14-b3f8-cdb9cbd686d2.roa
File:                     9930ebaf-afd3-3b14-b3f8-cdb9cbd686d2.roa (raw, json)
Hash identifier:          x5OOgOTLs0ONAIwd2VfaFbKaTnxUvyzCKhu9+3AKDy4=
Subject key identifier:   4A:EF:2D:DD:D6:E5:0A:40:E2:13:53:18:54:3C:30:AB:A6:B3:5E:78
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584A48939915F82B0944472C6600
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/9930ebaf-afd3-3b14-b3f8-cdb9cbd686d2.roa
Signing time:             Mon 23 Jun 2025 05:36:21 +0000
ROA not before:           Mon 23 Jun 2025 05:36:21 +0000
ROA not after:            Sun 21 Sep 2025 05:36:21 +0000
asID:                     11808
IP address blocks:        129.101.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:93:99:15:f8:2b:09:44:47:2c:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Jun 23 05:36:21 2025 GMT
            Not After : Sep 21 05:36:21 2025 GMT
        Subject: CN=93c92b3c-a506-4a45-ae52-766c7ae47da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:38:79:bf:9b:91:e8:9b:f9:5b:d4:9e:8b:
                    3a:47:99:39:2e:a7:75:da:c1:80:5c:2a:59:10:5d:
                    9c:ef:6d:28:4b:b0:25:71:12:ce:e9:f8:ba:89:20:
                    bc:41:c5:77:9c:b3:1d:2f:df:a1:f0:fa:fc:20:97:
                    c2:52:88:13:ff:53:ed:6e:13:ef:97:84:79:33:e5:
                    09:b4:3d:86:f2:e0:e3:5e:8d:94:b3:b6:54:11:0f:
                    2a:3f:12:38:49:5e:9e:3b:02:d2:60:73:58:4a:1d:
                    17:62:e3:83:b8:e1:7f:5b:b6:66:84:8c:df:8c:d0:
                    6b:33:26:64:8c:6b:dc:07:10:da:93:39:a1:37:e4:
                    64:56:07:8f:7e:90:f3:10:36:04:96:52:33:f5:6e:
                    f7:c3:06:35:6f:c2:a0:8a:2e:ef:95:d3:c3:fd:fc:
                    ab:13:9e:6b:f4:39:e7:34:9f:53:3b:43:2c:d0:37:
                    99:8e:4c:81:46:ca:11:35:6c:fe:3a:43:82:9a:86:
                    76:d7:c7:15:fc:bd:4c:de:a6:33:2b:27:d8:73:8b:
                    d0:f4:26:ee:25:4b:3b:a9:7e:67:05:70:f8:13:ca:
                    38:da:35:c8:7b:13:82:04:8f:29:a0:b0:be:b2:93:
                    bb:6e:23:57:48:bf:64:9f:a5:b7:b9:e5:8a:e8:5e:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EF:2D:DD:D6:E5:0A:40:E2:13:53:18:54:3C:30:AB:A6:B3:5E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/9930ebaf-afd3-3b14-b3f8-cdb9cbd686d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a4:30:21:fb:71:c2:7a:f9:70:35:62:6d:b0:65:03:5b:95:
         11:12:a6:9d:a1:c1:9a:a5:26:f7:42:c5:a1:be:63:cb:04:ac:
         fb:83:92:48:4f:3a:a7:c0:7b:f7:5a:c8:b2:c6:e5:c4:7f:89:
         b5:34:6e:6c:74:c4:d2:28:63:f6:4e:5b:fb:0e:3c:dd:3e:c8:
         f8:82:b5:fb:f5:65:80:2c:4d:ec:18:9e:56:5a:5e:50:1c:6d:
         aa:40:bc:35:2f:50:02:29:16:b4:8c:08:16:3b:32:cb:56:d2:
         76:1d:54:ad:95:18:11:5d:e8:2a:ad:57:87:5a:a0:f1:2a:09:
         c8:05:99:44:9e:03:a3:84:19:43:2d:3b:d7:aa:bf:54:e1:1b:
         5f:3f:a2:2f:02:94:16:88:2c:59:9e:71:96:b2:26:1e:04:91:
         fb:c4:a3:0b:a6:0e:d2:d5:68:83:07:5a:fa:6d:06:b8:30:65:
         09:fd:56:41:3a:55:04:ce:4e:54:44:1b:17:7d:94:90:45:d9:
         00:b3:84:60:a4:59:5a:f7:42:78:c7:94:f8:92:b5:48:9e:5f:
         34:12:a5:b1:8f:34:da:f8:e4:f1:e5:f6:59:bd:a8:e7:17:03:
         e0:9d:00:01:3b:76:2e:23:e2:c3:e2:da:fe:04:63:4b:92:09:
         67:3e:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:59 2025 by rpki-client