Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa
File:                     a680df6e-155d-3d93-babb-124b8a696bd5.roa (raw, json)
Hash identifier:          GyA0Iy0iIB3uc/xhNX2QFcg6ff4xz/5djZHlv/JvyD8=
Subject key identifier:   95:9E:FA:D8:8C:D7:CA:D6:DF:93:CD:D7:38:24:6F:C5:AD:33:DE:AF
Certificate issuer:       /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
Certificate serial:       010D0C9F4328584AA6F62D04E960CF475AC99E00
Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     46672
IP address blocks:        199.30.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2d:04:e9:60:cf:47:5a:c9:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=e3f90917-522b-4707-a284-00b6114cec1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:b9:ee:d9:54:e2:9c:38:2a:7d:ef:b0:c9:
                    6a:87:8c:62:5e:f0:ad:8c:e4:1c:d4:f1:a5:cc:8a:
                    03:af:cd:1a:78:96:12:54:2c:60:4a:09:d7:53:e5:
                    19:35:6e:9d:04:1a:69:fb:49:e6:f2:7a:03:f0:7d:
                    ab:a1:13:70:ba:49:3b:eb:ba:84:ee:68:e3:0f:a9:
                    bf:4a:db:0b:59:11:d6:db:8c:ab:c8:b5:a0:fa:73:
                    f7:50:b9:7f:de:ba:3e:53:d2:df:97:df:52:40:80:
                    75:5c:8c:e3:37:e9:15:cf:81:52:32:8a:ff:b2:b7:
                    1f:3c:36:ce:ad:90:f4:6d:26:26:04:10:89:c5:eb:
                    8b:14:c6:9f:4d:72:11:60:e0:d2:9e:0f:96:54:8c:
                    bf:0d:6e:ee:7c:e9:5a:a0:47:80:a1:28:e5:c8:7d:
                    af:80:98:a0:9a:fb:9b:7e:51:a4:9a:5e:e0:28:62:
                    26:c3:8d:fb:f4:1f:49:92:a7:f4:15:56:17:33:4a:
                    78:f7:e9:bf:44:3e:fd:20:e3:70:7b:d7:53:ec:8b:
                    d7:64:7a:65:37:04:89:5c:b5:b0:df:02:e5:a9:36:
                    b1:62:38:88:01:9c:8d:05:bc:40:09:7e:05:65:98:
                    a7:27:d5:7c:39:5f:8e:96:61:61:50:18:db:2f:a9:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:FA:D8:8C:D7:CA:D6:DF:93:CD:D7:38:24:6F:C5:AD:33:DE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/a680df6e-155d-3d93-babb-124b8a696bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:13:d9:47:d2:55:9c:3f:06:82:e7:10:f3:8a:c1:61:21:
         67:82:36:5e:ed:0a:a8:1a:44:62:20:5d:3c:dc:13:75:f7:25:
         4b:b7:c9:3f:13:07:50:a7:08:83:10:cb:1c:d7:05:ac:9c:56:
         34:cf:53:22:91:27:e9:f0:b8:b1:cf:37:9e:6a:cb:d5:ee:2a:
         9d:82:2d:e9:e9:e4:3b:e9:86:70:8f:f7:fa:ab:51:cb:62:bd:
         9a:10:93:25:b7:7e:f9:37:bc:53:0a:34:9d:93:f9:dc:79:43:
         29:11:95:75:bc:c3:ff:9e:9b:50:96:0a:40:2d:de:17:f1:b9:
         f6:f6:6a:37:d9:c5:7f:6f:a6:ff:cb:4c:2f:c6:29:ad:98:0b:
         45:af:b6:d8:1b:1b:14:85:6d:70:20:0f:bf:3c:42:2d:80:8c:
         2b:5f:7b:8d:85:23:f0:dc:81:b8:1d:2f:5b:28:56:dc:42:99:
         ec:16:51:d2:a6:04:e4:11:0e:92:b0:31:e7:a8:d3:d5:9e:25:
         48:50:58:bc:a8:2a:de:ed:c4:a6:08:42:b2:58:e6:39:20:02:
         75:68:e2:8d:25:c9:b7:34:05:c1:b9:73:e1:71:e0:f0:c7:be:
         19:3e:ea:15:77:b4:af:91:18:71:18:b9:9a:f3:97:0a:44:69:
         d4:e4:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:31 2025 by rpki-client