Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/fb753e8c-5ec7-3e62-965e-9c3cbe573efd.roa
File:                     fb753e8c-5ec7-3e62-965e-9c3cbe573efd.roa (raw, json)
Hash identifier:          /4UKwMdlcjTM4bxWvbYgItyk81W8G6TDv4NrFvhKeYw=
Subject key identifier:   F4:3C:46:FD:7B:15:37:BA:9A:EF:7D:57:7F:A2:96:2B:98:6B:C0:6E
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584ABBE636E637F10659B8028080
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/fb753e8c-5ec7-3e62-965e-9c3cbe573efd.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     29
IP address blocks:        130.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:36:e6:37:f1:06:59:b8:02:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=295bd743-af68-4bb6-9c45-75168fccb673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:76:4d:32:7d:26:7d:6f:90:d3:92:64:47:
                    a0:38:21:71:b8:4b:f4:10:a9:c9:46:74:70:b1:3e:
                    c5:46:04:4f:85:64:1b:16:c8:ca:8c:13:ea:c7:a5:
                    76:e2:af:c8:4f:2e:b6:e8:65:ec:78:19:fb:ab:1d:
                    d3:55:61:d8:ec:76:0b:98:b8:10:96:bd:9d:bf:89:
                    61:57:39:72:59:20:ae:1e:78:d9:92:ed:a6:af:33:
                    b1:e4:ea:a0:52:cf:05:be:f4:58:22:40:fb:50:fc:
                    3a:4e:8d:41:b7:a7:ea:59:7a:1a:81:c4:d1:93:90:
                    d3:b9:48:fe:ad:8a:4b:f0:d0:55:eb:03:42:d1:77:
                    7a:15:92:42:3d:79:9d:89:3c:68:25:27:80:5f:c5:
                    47:e2:bd:8b:f5:6b:04:22:f0:d2:82:aa:e0:de:9e:
                    b9:3f:c1:cc:2b:4a:97:2a:84:99:60:4c:59:2a:61:
                    35:3d:a7:af:2f:99:29:ee:c0:e5:44:29:f0:5d:d5:
                    94:8b:3f:fe:13:00:d0:f8:87:b9:68:0c:01:56:43:
                    52:21:58:df:81:1c:73:1c:d8:a4:58:98:98:6b:f4:
                    b2:f7:9a:7a:9d:06:0a:88:93:95:46:c8:c3:2b:a1:
                    af:fa:e9:9d:80:3f:ac:12:d9:2f:9d:fe:ee:34:ce:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3C:46:FD:7B:15:37:BA:9A:EF:7D:57:7F:A2:96:2B:98:6B:C0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/fb753e8c-5ec7-3e62-965e-9c3cbe573efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:57:d3:96:5c:98:6a:76:cb:d9:08:33:56:f0:ed:4a:29:6f:
         40:a5:6b:78:07:72:e0:6f:4f:cf:d6:af:19:88:5d:71:c5:15:
         35:92:20:ed:38:dd:4c:fc:5c:9b:e0:39:d2:1c:17:fc:01:54:
         8e:75:dd:e0:8a:f6:05:2f:89:1c:77:3f:a6:95:bc:64:a2:66:
         ef:80:f9:b3:31:74:7f:85:2f:19:77:8b:89:41:78:02:df:45:
         90:93:a6:4c:f7:92:e1:8f:2e:f3:c1:da:a3:45:de:38:69:a6:
         32:36:e1:3e:d4:9b:08:f8:33:3a:5f:1c:a2:c2:2a:25:e1:2f:
         a7:b1:d3:35:ea:24:98:d1:9c:06:45:e8:e3:ef:0c:76:ae:21:
         19:c7:88:79:37:01:51:79:7f:e2:b9:c6:be:4c:8e:1b:ba:84:
         32:79:1d:8c:5a:bb:e1:4d:a2:aa:46:68:42:82:35:49:0f:a1:
         de:67:cd:e0:42:9b:49:d7:f6:79:b9:ca:2d:fc:30:a8:7b:c4:
         67:fd:82:9e:e0:13:a7:15:81:cb:11:7e:9a:d7:09:79:d0:22:
         d3:38:ff:c5:1a:a6:e6:b0:aa:1d:bd:be:3f:2b:79:6f:28:21:
         1f:26:ce:e1:f9:99:e1:37:ff:78:a6:ac:bc:54:88:e7:d0:34:
         8e:7e:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:13 2025 by rpki-client