Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa
File:                     d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa (raw, json)
Hash identifier:          InJRCQI3u43N5OFkQjmz14pDU9Tls7MYFE8ZvawpU5U=
Subject key identifier:   51:D8:C2:63:A4:65:FF:99:FD:41:AF:E8:F2:9F:B4:4F:13:18:45:7D
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F43285849F87A95027C435AEE121D9180
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     397763
IP address blocks:        129.224.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:95:02:7c:43:5a:ee:12:1d:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=53e36f99-3abd-41d4-aafc-f721dab38828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4c:ab:0e:f3:52:a5:da:a6:da:c5:4e:04:8a:
                    09:9c:36:3d:f2:36:32:ba:0e:70:91:e3:c2:54:30:
                    e4:0a:98:c4:48:2a:42:53:c0:4c:10:ef:74:8a:bf:
                    59:17:f3:26:6d:b6:25:46:4b:c0:f3:ff:fa:bd:26:
                    ca:01:bd:0a:39:54:38:db:4d:45:ab:26:ea:10:c4:
                    ea:fc:94:ac:ef:c0:a3:2b:03:89:3f:d7:ab:13:e0:
                    b5:a3:8d:bf:04:d4:34:e2:5b:81:1c:dd:1e:93:33:
                    94:b4:f8:d0:3c:74:7c:70:a3:14:a7:aa:6f:7e:65:
                    3a:0a:74:e2:06:41:f1:b3:10:9d:0c:15:18:11:f1:
                    90:db:f8:dc:f6:32:cb:5d:d9:a9:38:6d:4a:ce:ac:
                    8f:ac:b1:51:d7:5b:df:32:41:73:2f:c5:78:07:91:
                    fe:60:3b:8d:dc:e2:73:06:07:78:da:e9:62:6a:fc:
                    2d:9b:e8:4f:ea:84:5c:45:78:96:af:3f:ff:86:4e:
                    fc:68:b6:42:cd:c2:58:54:ed:44:67:84:c5:9b:ba:
                    f0:d0:a3:26:af:ed:c0:e4:1f:53:55:a5:bb:0d:a6:
                    36:ff:55:ab:ce:42:02:53:b5:03:10:19:99:68:3f:
                    4d:e9:cd:cd:3b:60:31:2e:e6:2e:c2:eb:eb:b5:04:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:C2:63:A4:65:FF:99:FD:41:AF:E8:F2:9F:B4:4F:13:18:45:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:a8:20:29:e4:64:4b:c7:ef:09:e5:5b:62:f8:80:38:26:
         b8:64:f6:19:17:53:10:c8:97:1f:af:24:4c:03:94:1c:a8:1a:
         a0:61:02:8c:b3:f5:bb:86:fd:aa:b0:f4:63:23:a4:ba:52:9d:
         13:a7:22:c4:4e:47:0b:21:b2:4f:62:0e:87:99:80:72:ce:03:
         dc:dd:25:ef:e4:25:6d:1c:a3:fa:c1:6d:3f:2e:23:8a:a4:9e:
         a7:71:c6:d5:9f:1c:d5:c6:8c:0b:29:c8:3e:a9:68:c2:f5:2e:
         97:ae:b2:fe:55:49:d2:bd:c6:2c:30:b6:a2:4f:4d:02:3f:c3:
         33:c4:fc:45:6f:18:ae:2d:85:8d:58:14:99:89:be:c5:ff:56:
         5b:52:de:25:67:9a:21:db:45:97:43:84:15:64:86:57:66:a1:
         13:9b:a3:9d:3e:84:32:32:01:39:58:de:a9:66:1d:25:95:d3:
         8d:4e:57:2a:01:f3:6e:7c:53:99:7e:01:e5:ca:3b:1b:2b:d4:
         8b:db:f4:46:c4:93:06:45:d8:f8:40:57:0b:a4:36:37:fc:b1:
         32:96:49:d9:f5:a3:00:6a:26:cb:03:cc:76:98:de:fe:35:21:
         67:24:bb:9e:51:13:47:04:04:3b:81:b7:7b:7f:71:6d:ba:5f:
         ca:db:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:08 2025 by rpki-client