Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa
File:                     197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa (raw, json)
Hash identifier:          qvLwxWHmijwciKfN7RURoxdyWkaRztiNQtrYse1A7Ww=
Subject key identifier:   3A:69:A9:A7:D7:3D:20:84:85:D2:99:D2:9F:37:08:EC:96:E6:17:C5
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A5D4E6AE4D4CA6D2672A89380
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa
Signing time:             Mon 30 Jun 2025 15:48:56 +0000
ROA not before:           Mon 30 Jun 2025 15:48:56 +0000
ROA not after:            Sun 28 Sep 2025 15:48:56 +0000
asID:                     394996
IP address blocks:        129.212.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:4e:6a:e4:d4:ca:6d:26:72:a8:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jun 30 15:48:56 2025 GMT
            Not After : Sep 28 15:48:56 2025 GMT
        Subject: CN=a3f3aec8-8ddc-4b3a-8788-77221eb59a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:4d:2b:4b:db:dc:24:6f:97:62:d6:82:72:
                    a0:20:61:27:55:a3:ac:f2:4a:31:b2:88:e8:04:0e:
                    cb:fd:7f:b7:ce:14:20:02:08:e3:56:61:68:88:e5:
                    43:ab:91:c9:80:5a:9f:57:f1:6b:11:07:b7:2d:ba:
                    32:1d:30:cb:34:6d:4d:28:56:3d:8c:e0:45:2c:89:
                    df:47:18:e7:8f:dd:8d:09:26:a4:a3:90:54:77:6b:
                    72:d5:b3:d8:1d:36:2f:1e:38:57:bf:57:0e:7a:04:
                    ca:c4:47:f0:b0:8a:00:ef:86:a0:f6:f0:5f:51:93:
                    25:e6:1b:8e:07:a7:ae:a8:64:7a:e1:36:1e:17:aa:
                    af:a9:d0:38:bf:74:14:a3:83:3b:ca:34:50:5d:8b:
                    92:e4:a2:2d:2e:71:61:07:af:93:5c:64:02:92:30:
                    e6:a3:40:c0:61:8f:45:f6:e4:30:68:55:7e:dd:7f:
                    9f:54:c9:d8:e7:1f:a8:26:0c:a0:28:95:fe:22:e7:
                    11:22:7f:49:15:f4:f8:cc:53:a5:a9:1f:f8:ca:af:
                    1c:35:04:a3:b6:d3:d9:2a:28:fe:64:df:70:6f:5f:
                    ac:4c:d8:d9:38:f7:dc:03:7e:40:94:e1:76:72:ec:
                    e9:2b:0e:6c:ec:a1:31:30:04:0c:f4:b5:c1:62:05:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:A9:A7:D7:3D:20:84:85:D2:99:D2:9F:37:08:EC:96:E6:17:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/197e1780-6fb3-3ae7-84d7-a716d0ae9089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.212.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c9:8f:98:49:c9:5c:87:0a:01:cc:47:4c:16:23:6a:84:80:
         8f:3b:8b:0f:76:26:48:62:ec:74:af:6a:d6:ae:b3:6a:1a:6e:
         3c:8f:ff:58:82:75:08:65:5a:ee:f6:a5:34:76:29:e7:12:f7:
         52:1c:82:ba:8a:ab:87:8e:8f:bd:4b:64:6b:1d:cb:06:20:37:
         2f:cb:5f:0e:4c:c2:47:8f:85:66:26:e6:91:ca:1e:70:50:8c:
         46:72:54:8e:1a:ef:cb:fb:f5:4e:b2:3f:32:d3:65:95:f9:c4:
         20:c2:00:44:64:9c:49:00:7d:19:b7:fb:46:7c:a0:e8:e0:cb:
         a9:38:a4:2e:ae:e5:e7:2f:53:b7:aa:8e:14:2a:d6:22:0d:3c:
         82:b3:35:48:1c:8e:6d:69:12:aa:98:38:79:88:03:bf:2c:58:
         1b:ff:e1:c0:49:c6:d5:a8:d3:60:7a:5f:f8:13:64:df:33:f8:
         b5:64:01:da:69:93:8b:2e:c8:6b:ed:05:30:19:1f:d7:0d:b8:
         62:72:5b:c1:3a:66:1a:53:f3:6e:bd:b7:b0:31:c7:b9:35:eb:
         72:13:0e:da:f4:3f:7f:d7:68:a9:5f:31:1d:7c:22:8d:26:21:
         07:67:29:97:25:ea:3a:d2:8e:c5:c5:31:c2:86:e3:cc:09:3b:
         12:a5:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 07:42:18 2025 by rpki-client