Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa
File:                     9feab245-a594-3dee-9158-896a2d26f46d.roa (raw, json)
Hash identifier:          vgnJ1I7280LCvLXmAId8iAhU676KAbBgh94fWRoP+08=
Subject key identifier:   8F:27:90:0E:CE:12:49:37:02:20:26:D8:BD:F7:39:5F:83:DD:FB:14
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584A9E961DF3C3381DC409C45C80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     19893
IP address blocks:        128.121.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1d:f3:c3:38:1d:c4:09:c4:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=e68d1cb2-6b99-400b-98a2-b72196741ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:36:d3:a7:eb:f6:d8:ce:ae:4b:e6:86:2a:
                    6a:ce:6b:1a:87:67:f5:9d:23:6d:bc:f9:f4:23:5c:
                    b5:a6:3e:0a:09:ff:07:d1:9a:b0:60:28:49:ac:f7:
                    e4:b3:d8:a1:71:b0:4e:16:d6:ff:c3:99:6c:83:1f:
                    d1:8c:33:e4:bf:48:71:de:97:8c:da:90:ff:77:9d:
                    ab:7f:cf:51:22:32:64:28:b9:f1:51:2a:d6:92:97:
                    f5:16:bb:80:39:b2:40:62:39:54:84:14:c6:ad:bf:
                    57:65:de:90:fe:73:9f:b5:d6:c2:76:ab:be:45:61:
                    d2:08:40:08:79:0d:13:33:a3:97:5c:9f:1b:5c:3b:
                    42:71:59:5f:b2:f2:e4:e9:ea:b7:31:11:9a:97:4d:
                    40:12:ec:d9:dd:e3:de:4e:df:8a:9d:01:58:7e:56:
                    7e:e5:3d:14:72:3f:c4:f1:c8:6a:5b:9b:60:f1:5e:
                    4f:27:df:2d:cf:58:b8:00:d6:a7:88:88:ad:7a:ce:
                    91:77:69:34:0a:99:ab:e4:8d:f7:66:f8:8c:18:6a:
                    31:b7:e4:76:52:3b:08:ad:76:34:0a:4c:3a:4f:ce:
                    ae:c9:f0:ef:03:ce:5d:25:56:70:db:83:98:4a:76:
                    52:03:30:6a:a0:0f:58:36:7e:c0:f8:03:32:6e:12:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:27:90:0E:CE:12:49:37:02:20:26:D8:BD:F7:39:5F:83:DD:FB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:44:71:eb:18:cc:60:12:99:da:42:62:1e:96:f0:97:8c:2d:
         b0:be:e7:46:59:39:5d:a0:a3:cc:42:ad:db:41:9b:77:21:23:
         47:ef:ac:e8:8d:cf:5f:b1:46:2b:a1:59:76:47:f4:7d:59:df:
         fb:98:3c:ad:17:8c:00:a4:be:26:30:83:ae:27:85:07:ac:c1:
         f2:a2:80:1d:0e:a0:da:8a:e8:80:f0:9b:67:f8:fd:6e:a1:6c:
         25:ea:2d:6c:84:4f:74:5a:b2:27:2b:47:50:3b:64:e2:67:b5:
         f7:3d:1f:05:f4:c4:a9:59:11:2e:18:a4:5b:79:b2:da:ff:a2:
         15:60:74:32:3d:cd:aa:82:6c:47:e9:e5:ed:36:cb:bd:8c:99:
         e1:5b:e2:4f:10:44:bb:2f:0b:64:8c:2d:15:94:da:ab:0b:c5:
         e0:38:d7:4b:48:f3:78:a4:eb:f3:5e:5e:c7:56:74:5d:17:c4:
         96:a1:f7:34:af:4a:a3:c0:04:a8:a1:03:78:1b:df:49:04:47:
         3c:ec:00:78:2b:ea:66:ae:23:73:fb:17:6e:02:f5:b8:0b:e1:
         ab:9d:d0:91:f8:49:ca:d4:b0:1b:3a:a4:71:31:13:ed:89:3e:
         cd:11:40:b2:6e:aa:80:c9:31:6e:df:e2:ef:cf:4a:7f:a7:87:
         a8:82:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:03:24 2025 by rpki-client