Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa
File:                     edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa (raw, json)
Hash identifier:          zof57zTMuXhFVM0cu75KU/DyU18489nSZMOkNkaeirc=
Subject key identifier:   E7:98:CD:21:CE:A4:53:4B:EF:59:9A:81:6D:EA:E6:EF:F7:45:26:F1
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A920632131D605A6EEAA0AB80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     150436
IP address blocks:        128.1.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:32:13:1d:60:5a:6e:ea:a0:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=b086795f-ad67-4bf3-9c45-82a8e7b61222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:98:04:21:2d:9c:0b:0e:58:9c:c7:1e:74:
                    69:a4:be:f7:1a:6a:e9:9f:e9:35:42:84:9e:c0:e4:
                    e9:2d:a5:1a:f7:14:64:cc:b0:b1:41:06:0e:7f:01:
                    94:42:3c:32:a8:c4:d8:5c:9b:e9:94:85:38:11:e7:
                    3e:11:26:a5:1b:90:73:0b:03:3b:fd:3d:70:40:00:
                    5c:11:b6:9a:10:31:c3:02:5f:f5:e9:23:2f:35:d9:
                    6f:53:c4:0b:69:c8:73:8b:f7:8a:00:a2:fd:b4:f9:
                    b4:03:78:7c:63:86:9f:a1:c6:6c:86:50:85:52:de:
                    a5:fc:f8:0d:d7:4d:b0:86:fe:15:e7:4e:71:43:33:
                    8e:f1:39:ac:b7:d1:27:da:47:63:31:ed:05:f2:b1:
                    5e:94:40:00:20:ad:91:b8:c9:7e:88:ec:82:e1:dd:
                    50:5f:ae:ef:e8:24:1b:ce:0f:77:0c:d2:3e:b1:d5:
                    c4:80:4c:49:f7:69:b9:a9:2b:43:37:be:64:29:f6:
                    9f:ef:b9:07:e7:00:97:e9:9d:d6:5e:ba:cf:56:4b:
                    31:48:93:d7:84:2c:b3:12:d7:ae:dd:5a:86:52:05:
                    3d:15:ee:74:35:ef:2f:1a:45:3a:b8:c9:c0:e0:68:
                    03:be:86:b8:32:02:5d:02:e5:d5:e9:36:f9:c7:51:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:98:CD:21:CE:A4:53:4B:EF:59:9A:81:6D:EA:E6:EF:F7:45:26:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/edba7623-83c4-3f9c-b8b2-fa5ba9e81837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:25:80:68:08:c4:a0:76:2e:58:51:5d:0d:10:3d:b5:00:09:
         52:cd:cf:f7:40:c7:d8:67:41:f9:9b:0c:ef:4b:83:c2:86:02:
         41:af:86:fd:65:7a:20:79:32:a9:8a:d6:f1:9f:57:b1:03:ff:
         7d:c9:fc:64:c3:33:14:a2:8e:b8:96:10:c2:c2:84:83:18:47:
         12:6b:db:b3:e8:d3:eb:3f:0b:4e:a3:b6:66:32:8e:4d:88:53:
         55:4d:82:1f:80:54:26:8c:08:e3:42:2c:4a:0b:d1:cd:fd:6c:
         f1:f2:8a:81:4f:89:76:b0:c4:ec:50:2f:98:30:f6:f5:55:b8:
         52:da:74:b4:06:79:38:b1:a8:13:7b:b7:59:40:da:3b:95:6a:
         11:80:07:f7:fd:c6:42:5f:64:65:9d:8a:ba:91:38:f5:78:31:
         b3:75:ab:92:e2:7f:8b:df:ab:34:7f:e3:31:d4:fe:9b:fb:db:
         d8:73:a1:ed:e7:c8:c8:2f:00:f5:e8:73:b8:bd:4a:9d:fb:e1:
         80:76:de:53:22:f5:0a:11:f8:26:50:9f:32:c5:ec:92:98:ec:
         6a:33:16:f3:b1:07:87:5a:37:b4:8d:8e:29:57:af:60:8f:5d:
         94:ef:1d:cf:f5:9a:fe:06:be:4e:75:a1:32:d3:6b:47:dd:eb:
         44:a0:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:54:15 2025 by rpki-client