Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/b14a3b92-f487-359f-8a55-3cc6a9abcd07.roa
File:                     b14a3b92-f487-359f-8a55-3cc6a9abcd07.roa (raw, json)
Hash identifier:          UAJuLKnkQCcVxq3UGqxoPHLrsARlQpy+t371u0mlBYs=
Subject key identifier:   E6:8C:B4:C1:8D:3E:4F:BF:B2:8F:B2:DA:C8:6B:B8:82:A3:13:E8:D5
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584A48935E87BFA07C68C2F10920
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/b14a3b92-f487-359f-8a55-3cc6a9abcd07.roa
Signing time:             Mon 23 Jun 2025 05:35:54 +0000
ROA not before:           Mon 23 Jun 2025 05:35:54 +0000
ROA not after:            Sun 21 Sep 2025 05:35:54 +0000
asID:                     11808
IP address blocks:        129.101.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:93:5e:87:bf:a0:7c:68:c2:f1:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Jun 23 05:35:54 2025 GMT
            Not After : Sep 21 05:35:54 2025 GMT
        Subject: CN=e13fe1f6-4a1f-4dbc-8ed1-1b7fd3be8a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:46:f6:c8:40:5b:87:9e:66:69:06:25:17:
                    6d:06:41:ef:0a:b0:6a:ed:6f:14:79:da:e0:20:a8:
                    8b:f0:fd:28:4f:68:38:8c:87:b7:7a:63:0c:52:7c:
                    a8:34:99:a8:be:62:bd:71:34:69:4d:7c:6c:ff:25:
                    8d:91:34:12:44:f1:2a:1e:e4:4d:17:fd:09:7e:21:
                    8d:45:fd:5a:1b:52:56:ef:0a:7c:20:24:c8:f9:f8:
                    4a:c9:aa:e9:45:13:85:e8:7e:85:34:9a:59:0b:4f:
                    d6:26:b3:4b:95:88:5d:de:36:25:ce:a7:ea:5f:db:
                    bc:31:38:f7:d8:db:7c:a0:d4:56:5e:e0:25:2e:02:
                    58:07:69:75:30:a7:58:c6:3f:81:c8:e1:12:31:9c:
                    e4:be:fe:94:48:7b:34:42:7b:c0:ad:a5:21:1e:c4:
                    a7:49:f8:4b:91:49:20:c6:df:bc:39:f0:4c:f9:e3:
                    e2:79:30:c8:20:da:a7:ce:ac:da:ca:1b:71:4d:cb:
                    9e:39:a0:c9:01:3b:bf:a8:03:91:d0:c1:47:93:2b:
                    2e:cb:9d:c9:e2:25:e8:d6:95:fe:a9:65:1e:50:a3:
                    0b:82:3d:85:e6:82:28:04:bc:d6:8a:22:f7:48:da:
                    8e:7b:7c:37:0d:d0:73:ac:ea:9e:73:a7:bc:69:9e:
                    71:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8C:B4:C1:8D:3E:4F:BF:B2:8F:B2:DA:C8:6B:B8:82:A3:13:E8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/b14a3b92-f487-359f-8a55-3cc6a9abcd07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:4d:ec:6c:fb:47:ce:bb:31:dc:c1:ce:d7:f0:51:6e:5b:
         65:bd:93:b6:c4:45:b4:99:a1:37:a3:92:2c:c3:3a:b1:c4:b0:
         07:63:92:05:a8:d3:31:ec:79:95:f8:b9:fd:59:3f:ae:f8:38:
         4b:5d:4c:d7:47:ec:77:58:95:63:e6:82:84:bf:34:97:50:5a:
         66:a3:5c:62:a5:26:12:e3:0e:4d:54:71:99:3c:3e:14:37:51:
         49:0d:7c:20:8a:0f:11:2d:db:9b:05:29:c1:79:d3:4e:5a:a1:
         9e:e6:86:df:1c:a3:e5:70:12:e5:ab:ed:9e:36:db:3c:09:f1:
         b7:7f:24:12:7b:65:46:2a:e1:59:99:d4:ec:29:86:82:bf:8f:
         76:81:7f:02:b4:b9:f6:54:f6:01:43:dd:d3:70:d8:f9:14:31:
         ff:8a:47:03:60:44:c6:db:94:47:21:50:01:0a:9c:d3:f5:67:
         24:93:46:4c:c1:7a:24:13:66:55:f4:3e:23:80:56:6b:20:b8:
         d8:c3:c5:d1:ac:0e:1f:f3:7b:4f:0d:ca:8a:d7:60:48:dc:bc:
         16:7b:73:35:36:aa:a6:00:7b:ab:76:14:a4:47:c5:13:76:45:
         a2:bd:a5:be:1f:ce:c1:72:13:b7:cd:86:fa:d4:40:cc:99:fc:
         46:d4:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 19:47:07 2025 by rpki-client