Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/72c3722c-57ef-39ea-9d4d-df56729ff278.roa
File:                     72c3722c-57ef-39ea-9d4d-df56729ff278.roa (raw, json)
Hash identifier:          Tu98d/HLrgyvV2hackrQIFsX0r2Ug/8cGYkMYOuBGmw=
Subject key identifier:   89:77:0C:9C:B6:FF:56:EC:1C:43:57:15:CE:1A:49:38:3A:57:5C:D3
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584A7D1600B7726E076CE5166A00
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/72c3722c-57ef-39ea-9d4d-df56729ff278.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     63293
IP address blocks:        129.134.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:00:b7:72:6e:07:6c:e5:16:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=8754d6e4-66e3-4fc4-a4c8-1c4f8456f66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:69:09:85:83:8f:f1:8e:b3:ca:87:b6:46:
                    ec:4e:ab:72:38:2b:12:52:0f:fe:e8:b0:40:a6:5e:
                    9e:40:46:1c:b3:22:e7:20:ea:6f:2a:8b:49:3b:5b:
                    2b:65:fd:4e:3f:52:b1:85:44:5d:d7:44:c0:d0:11:
                    cd:27:d3:cb:d9:b8:c7:ea:f4:cf:73:40:a7:66:5c:
                    c7:cb:58:d2:f8:c1:4a:c4:6a:30:1a:d1:11:94:fe:
                    1d:f4:99:ba:1a:8f:91:52:68:2b:2c:d5:3e:cc:44:
                    9e:20:a8:11:cf:ba:c7:3a:f5:af:2e:e6:14:cb:a0:
                    fe:cf:64:90:51:c1:7d:af:ed:38:18:99:bc:a2:c9:
                    39:ad:24:0e:a5:69:08:7f:15:99:0b:98:6c:0b:52:
                    f4:97:21:92:e8:8c:9f:f0:db:f9:99:20:b3:b5:8d:
                    29:b1:36:e5:98:be:da:ce:8c:a5:03:8a:27:73:a5:
                    58:c4:ae:c9:ad:c7:0e:e6:13:0c:22:ee:f7:23:e0:
                    92:ae:0a:fb:66:2c:f8:1e:af:04:66:0b:49:62:70:
                    b5:1b:80:1f:87:32:a5:df:2e:bb:21:01:91:77:bf:
                    cf:3d:6c:36:41:2a:46:e5:a2:fa:a8:71:f8:e4:a1:
                    3e:71:df:59:f5:8d:94:2c:32:58:f7:d6:9a:71:3e:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:77:0C:9C:B6:FF:56:EC:1C:43:57:15:CE:1A:49:38:3A:57:5C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/72c3722c-57ef-39ea-9d4d-df56729ff278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:de:52:54:53:75:a4:88:e9:f9:ac:5f:2a:26:f9:b6:74:
         f9:ce:2d:37:6c:eb:8a:bf:d5:06:3c:12:cd:c8:1d:ec:f6:a6:
         a2:16:65:a4:6e:08:f1:e5:5b:6f:18:6c:9d:67:cd:2f:f8:dc:
         e1:bd:aa:24:4d:18:b3:84:95:5e:52:c7:b1:f6:e0:83:5e:b9:
         ce:a2:f9:b6:5f:80:fc:a0:6b:e2:52:ad:24:7c:26:8c:a4:d1:
         7f:dd:17:88:68:72:2d:9f:fc:8b:ea:e5:66:74:36:2d:bc:fc:
         68:bf:2e:d7:4a:21:7b:21:99:28:a4:15:c9:2f:bc:25:61:b2:
         d1:32:f0:2f:54:fd:ef:a0:9d:13:59:21:46:46:60:94:7c:14:
         b0:14:67:6c:b5:1d:11:6c:e6:fe:bd:5f:e1:c4:04:2e:7f:26:
         2d:6d:21:80:5f:cf:7e:91:32:2d:46:b0:c8:b7:7b:93:89:78:
         c9:3c:bc:86:04:ee:51:06:b6:12:b5:44:1c:07:d0:31:77:1e:
         68:44:93:30:db:e1:2c:23:4f:03:d7:38:ba:98:fd:6e:95:f0:
         41:59:c9:13:a0:fb:d1:11:82:e3:71:07:54:be:e1:41:be:27:
         41:41:93:45:32:60:80:ed:92:fb:a9:ee:11:3b:4c:6f:55:eb:
         8d:a9:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:45 2025 by rpki-client