Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa
File:                     95202044-ca70-36fe-9abd-667200710a5d.roa (raw, json)
Hash identifier:          I/Fa3WBrYZaJkxiIDLilgFDkUebVSN/rufU8kzvBxco=
Subject key identifier:   4C:F4:98:23:E9:5A:33:4D:9F:CF:04:CF:1A:3F:C1:AE:8F:95:4F:CA
Certificate issuer:       /CN=dbf66384-fa53-47fb-938a-f1e5064023e5
Certificate serial:       010D0C9F4328584A20F54ECB93E30078ABFC6F00
Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa
Signing time:             Mon 09 Jun 2025 01:00:50 +0000
ROA not before:           Mon 09 Jun 2025 01:00:50 +0000
ROA not after:            Sun 07 Sep 2025 01:00:50 +0000
asID:                     15830
IP address blocks:        129.176.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:20:f5:4e:cb:93:e3:00:78:ab:fc:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5
        Validity
            Not Before: Jun  9 01:00:50 2025 GMT
            Not After : Sep  7 01:00:50 2025 GMT
        Subject: CN=92a9b6c7-ac0f-44f5-bcf5-cee2c089b8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:41:ee:48:2b:fd:0b:05:e1:e2:d2:46:3a:
                    d0:99:8c:cf:af:f4:0b:5f:8e:35:c9:0e:fc:70:22:
                    85:bd:55:c8:8f:3e:b8:90:3e:23:45:e7:e4:20:d7:
                    09:ee:94:f9:93:73:dc:68:c4:a2:2e:57:8a:7f:17:
                    e6:3e:32:82:f8:15:d0:66:7c:9c:ec:61:84:9f:ab:
                    7c:c4:a7:41:71:67:92:0e:ad:be:a0:94:c7:5a:c9:
                    92:83:7b:8b:27:60:de:ce:c0:75:45:08:37:90:b8:
                    4f:6c:53:e0:e2:b5:5f:b9:cf:8a:8f:99:90:e1:86:
                    71:2d:a7:57:cd:4c:f0:de:f5:0a:ab:05:3b:86:4b:
                    a3:08:29:51:d0:d7:db:b2:f1:0c:0b:3c:9b:98:3d:
                    e8:d8:2a:e7:2d:31:e5:49:de:5d:42:b4:b1:b8:69:
                    da:6b:17:b7:bb:11:05:69:f5:1b:24:f4:0d:ba:49:
                    8b:cd:b9:78:ec:dd:41:11:f4:08:db:33:69:b0:6f:
                    76:1b:22:dd:c0:8b:e8:5b:62:d2:c3:ec:1b:d3:57:
                    81:5b:bc:19:15:f4:2e:11:cc:01:60:44:35:ea:73:
                    b0:7d:eb:72:da:8f:11:2d:3f:8f:45:98:0f:cf:f8:
                    ad:7d:ec:a5:a4:30:bb:ec:ec:59:cc:04:ac:8a:aa:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:98:23:E9:5A:33:4D:9F:CF:04:CF:1A:3F:C1:AE:8F:95:4F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/95202044-ca70-36fe-9abd-667200710a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.176.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:67:d7:82:29:11:2c:ef:24:a4:e6:12:01:b8:8b:90:68:
         cb:db:fb:fa:a3:e2:a0:cc:5f:62:59:4f:04:d8:f8:a3:8e:5b:
         87:1c:24:ae:84:44:03:59:ef:f0:9f:78:3d:30:b3:ec:3e:69:
         84:12:fa:b5:b4:66:1d:e2:ac:70:7c:08:fb:20:06:61:53:91:
         c6:b8:aa:99:5c:61:7a:5f:72:c6:b6:b6:73:01:77:05:ed:0e:
         be:24:dc:ad:82:6e:5e:91:5b:4b:58:28:fe:01:e0:18:d4:75:
         3b:4d:47:8b:8f:ac:11:c7:c3:36:7f:c2:b7:15:28:35:bd:93:
         e9:8d:a6:3f:60:33:d4:3e:65:84:eb:cb:f9:86:d8:16:53:5c:
         54:69:d0:67:f3:c9:d5:97:ab:2d:75:e6:5e:95:8e:d2:eb:38:
         d2:1c:4f:62:da:71:a7:49:76:87:e1:82:f1:40:03:89:c6:46:
         a1:4d:a6:cd:39:d2:2c:31:ce:21:b8:89:f3:b5:55:06:8d:7b:
         ed:70:04:de:fa:77:24:5d:d7:1b:d8:57:3e:c6:93:92:a6:c6:
         cb:c5:aa:05:7e:9c:81:f3:fe:4e:48:86:44:5a:a8:59:d5:77:
         ae:31:55:46:77:7c:78:59:5b:7a:fe:9e:73:62:c6:24:15:8a:
         b8:be:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:16:31 2025 by rpki-client