Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/afb27b49-e22f-37b8-a146-df1b0204fa33.roa
File:                     afb27b49-e22f-37b8-a146-df1b0204fa33.roa (raw, json)
Hash identifier:          3q6RL5yp68KnVlbNpqxD/42Ou9ir0UKS2jgosOsqjlU=
Subject key identifier:   CC:B7:BC:76:56:77:44:3D:5B:20:37:92:AB:C8:3D:E3:88:68:00:55
Certificate issuer:       /CN=0eb0be5e-7cff-4077-992b-f867365a59c5
Certificate serial:       010D0C9F4328584AEB57B8152825BC07D30B2E80
Authority key identifier: 29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/afb27b49-e22f-37b8-a146-df1b0204fa33.roa
Signing time:             Wed 20 Aug 2025 12:52:28 +0000
ROA not before:           Wed 20 Aug 2025 12:52:28 +0000
ROA not after:            Tue 18 Nov 2025 13:52:28 +0000
asID:                     15753
IP address blocks:        129.230.184.0/23 maxlen: 24
                          129.230.186.0/23 maxlen: 24
                          129.230.188.0/23 maxlen: 24
                          129.230.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:57:b8:15:28:25:bc:07:d3:0b:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb0be5e-7cff-4077-992b-f867365a59c5
        Validity
            Not Before: Aug 20 12:52:28 2025 GMT
            Not After : Nov 18 13:52:28 2025 GMT
        Subject: CN=32aef218-b566-46d9-913a-18253f6d45c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c4:e5:a8:ab:3a:d2:09:e1:d1:81:95:7f:03:
                    1e:4d:63:fc:9c:d1:78:8e:86:13:cf:d0:e5:e2:df:
                    6a:e9:2a:0b:2e:43:62:c7:04:3a:f8:b0:1f:89:8d:
                    d8:9c:3c:30:3a:46:80:89:aa:e3:ce:cc:4a:e6:85:
                    fd:83:3b:bf:49:83:80:23:41:6a:7f:15:29:05:4b:
                    fb:ae:2f:ea:b4:a8:61:28:85:b8:18:7e:c4:1c:17:
                    d6:d6:dc:93:e0:e1:c4:c2:2a:57:b6:5d:e8:c7:f2:
                    aa:77:8e:da:74:1b:51:66:b8:e8:c1:36:e6:10:b3:
                    b1:7a:b9:8e:fd:0e:94:df:d1:80:cc:f2:21:f0:6a:
                    ce:f5:24:d5:d9:f3:f3:23:24:8d:cb:12:05:15:f1:
                    e5:df:54:a5:e7:d4:62:cd:78:97:7b:62:e5:75:c8:
                    40:9e:a9:aa:2a:53:06:68:0c:f6:4b:70:ca:41:ad:
                    23:a9:d1:72:67:ac:3f:10:54:70:eb:71:0e:74:65:
                    43:01:1d:a8:77:da:b5:04:1b:88:c9:5f:c7:41:6d:
                    9a:a3:01:17:64:03:bd:20:8a:e4:2b:9b:e4:58:bf:
                    98:8c:0d:c1:1b:e9:75:48:78:0d:ad:d5:cf:8b:d7:
                    ce:8f:58:55:04:86:15:ff:85:bd:1e:c8:3f:ac:4c:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:BC:76:56:77:44:3D:5B:20:37:92:AB:C8:3D:E3:88:68:00:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/afb27b49-e22f-37b8-a146-df1b0204fa33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.230.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:10:99:d6:cb:e9:64:99:0c:13:85:7b:4e:ef:ec:91:35:67:
         7a:5e:9b:23:15:f8:5d:b3:51:62:ae:45:e9:9d:11:64:77:11:
         bc:43:6d:9c:aa:23:e2:88:12:c5:d6:26:37:0a:62:92:83:20:
         b0:40:e8:07:75:20:d8:bc:4b:7c:f7:04:00:0a:68:d5:44:9b:
         c4:ce:f4:cb:9f:10:44:ce:1e:d3:1f:c9:be:21:72:21:cd:22:
         65:89:31:1f:b5:dc:cf:bc:bc:06:92:83:ee:79:40:95:54:73:
         99:59:32:b1:89:1c:fa:65:ee:62:df:62:fc:71:32:15:53:5e:
         42:88:87:a6:78:70:53:5a:a1:d3:b4:72:fd:db:b6:16:58:4c:
         8d:55:36:1b:34:a0:b4:2d:0d:db:de:c9:18:1f:b7:26:52:d4:
         b8:7e:52:7f:8e:7a:62:6d:69:fc:e7:8c:9f:d0:05:1d:ec:47:
         05:d8:2c:95:49:cc:fd:46:6a:8c:49:a1:3b:2a:6a:08:e7:3e:
         b5:17:fd:87:d0:52:fe:87:e0:1e:17:3d:c4:a0:fd:5a:60:f5:
         a7:73:03:7d:e4:c8:eb:64:4a:4e:c8:0a:af:15:51:83:58:0d:
         7e:fd:de:ca:ed:ab:8e:ae:a6:b6:0e:12:be:4d:17:b7:3c:2e:
         0a:8d:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:09 2025 by rpki-client