Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa
File:                     6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa (raw, json)
Hash identifier:          u3h+Zco5+OljRb5ukBgK8V+wZeCMaV/jlTexQTkDowg=
Subject key identifier:   F9:DE:08:CD:43:8D:88:6D:65:82:DC:55:B0:7E:75:EA:B7:EB:31:30
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AA89429715C8C0137C3923740
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa
Signing time:             Sun 27 Jul 2025 14:55:06 +0000
ROA not before:           Sun 27 Jul 2025 14:55:06 +0000
ROA not after:            Sat 25 Oct 2025 14:55:06 +0000
asID:                     62610
IP address blocks:        128.1.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:94:29:71:5c:8c:01:37:c3:92:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 27 14:55:06 2025 GMT
            Not After : Oct 25 14:55:06 2025 GMT
        Subject: CN=271a3060-d8df-477c-9bcd-ab09e896907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7e:45:1f:64:ed:68:68:e8:fe:aa:85:31:f8:
                    7c:ea:82:e6:29:2b:47:3e:94:df:65:f8:83:a5:c9:
                    12:0d:66:81:66:4a:2a:e8:a6:2d:c5:5b:88:f1:32:
                    b6:b2:21:bd:08:d1:b0:92:e4:39:ab:41:e4:9f:c1:
                    15:ff:df:07:37:d2:e5:9d:02:39:0b:b0:72:0b:b0:
                    9f:fd:8e:48:ba:47:dd:1e:73:50:19:d5:42:3f:9c:
                    ee:68:07:51:95:6e:84:a4:a7:be:97:5e:0f:02:b9:
                    40:7e:09:ed:5f:8d:b6:96:2f:d3:ba:9b:19:1c:b3:
                    ed:c5:9f:29:b5:f5:59:40:4d:61:34:75:32:51:31:
                    6b:69:89:f3:43:7e:ae:ef:3d:e3:7f:7c:80:dd:00:
                    0a:fe:9b:e9:fc:3d:fe:02:e0:f2:10:be:83:06:f3:
                    41:7c:42:a2:e0:eb:1c:69:72:ef:98:46:77:e3:6a:
                    ab:ca:62:0e:e8:08:30:07:fc:24:2d:27:85:d8:99:
                    c9:a0:11:c6:e9:8a:02:43:a9:99:8a:c5:ca:eb:04:
                    be:f1:09:83:1d:86:79:e6:ba:ae:c2:60:6a:68:2e:
                    58:d9:e4:1a:2d:18:5a:ba:77:a8:b4:c5:79:d6:f5:
                    59:a9:5b:56:a2:53:70:67:83:9b:c1:cc:b3:29:e6:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DE:08:CD:43:8D:88:6D:65:82:DC:55:B0:7E:75:EA:B7:EB:31:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6bdc2ea9-c460-33a9-b43e-af72c008aeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:07:8d:45:5f:86:28:9f:04:e2:bb:c3:28:d8:0a:e8:ae:
         91:1b:77:e2:05:1a:e3:59:f6:73:16:28:fa:3f:cd:5d:d0:75:
         8b:31:6a:b2:da:63:63:0c:b3:4b:e0:19:b8:11:e1:ce:e2:04:
         e6:96:bc:ec:ec:06:a0:f9:cc:ed:e7:27:40:9d:14:12:a6:7e:
         c0:e2:62:de:a9:f9:56:bb:ae:c4:0b:98:74:77:5d:12:ea:0a:
         ef:2a:5c:91:22:37:01:e3:40:fe:73:34:fe:19:7e:ee:3c:2b:
         3c:ad:a2:4c:71:69:62:7f:e8:8a:03:d2:36:02:7f:fc:39:7f:
         8b:a6:d8:e4:4e:63:71:c0:ef:d0:78:1d:35:5c:25:76:99:d2:
         7c:19:44:13:59:45:fe:ee:34:6b:27:7f:23:82:22:0f:5e:fa:
         d1:db:53:e4:7c:96:2d:e4:4c:a9:f8:b3:56:68:be:ed:7c:51:
         9d:7a:0e:23:72:a5:0f:e1:24:4b:47:e0:2f:9d:f6:f2:03:a9:
         41:f9:36:b9:8f:f4:ac:75:18:0d:ed:e6:26:cf:7f:77:16:00:
         a4:80:3e:35:73:d8:29:0a:c2:04:9a:f0:96:5d:6c:55:b6:4f:
         98:10:f3:1c:0e:82:a3:e3:99:c1:f5:1d:7b:9b:f5:be:72:fb:
         95:6a:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:54 2025 by rpki-client