Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/feb1d56a-e512-3d2d-add6-ec252e4f36af.roa
File:                     feb1d56a-e512-3d2d-add6-ec252e4f36af.roa (raw, json)
Hash identifier:          TtD9AWNRB90uo24ZmmyHhbw5OdVOfRTsQdGFwq0VxZk=
Subject key identifier:   70:30:8A:B4:79:10:53:D1:9E:52:8A:5A:C4:B3:64:DD:32:0A:69:78
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584D300A66A9731C01D27FDA7D40
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/feb1d56a-e512-3d2d-add6-ec252e4f36af.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     32934
IP address blocks:        129.134.30.0/23 maxlen: 23
                          129.134.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:66:a9:73:1c:01:d2:7f:da:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=454f1fcd-662e-4a88-ab84-304dc3271e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:e9:b6:be:dd:e7:8e:c7:a0:5b:e0:79:b4:
                    12:b7:fd:e0:7a:94:f7:5b:27:ab:81:d1:4b:fe:73:
                    c6:a7:c3:9d:3e:32:01:26:44:a5:18:d9:5b:9f:37:
                    ad:8b:fa:51:6d:4f:a3:ff:37:9f:99:c0:22:9a:b8:
                    4c:a3:0e:8e:8e:60:d4:c9:93:c7:0a:f2:15:5e:70:
                    51:f0:c5:62:94:45:c1:fc:32:a0:b7:21:6a:a7:65:
                    8c:77:bc:c5:89:99:c1:4e:26:37:0e:e6:8b:94:3e:
                    b1:cd:8d:80:1a:93:68:9b:43:f8:a4:d5:ea:4a:e4:
                    22:23:d8:42:c1:34:50:56:da:83:e3:dc:aa:f4:87:
                    d4:12:b2:ff:89:87:d5:b8:20:84:a6:9f:1e:1f:3c:
                    45:91:d2:67:46:b7:3d:b2:8f:09:d7:07:d5:7f:47:
                    84:1a:3c:cf:38:95:d4:0e:34:07:a2:6a:96:c5:24:
                    18:9e:37:d9:e5:f2:63:ce:19:34:f9:d4:70:7d:2a:
                    6c:66:13:ee:e1:61:fb:53:64:38:01:42:ec:72:c1:
                    cf:8d:a8:7e:e4:09:4d:a5:02:f1:6c:a5:53:33:ba:
                    01:5f:ea:67:b7:50:96:90:70:fb:23:45:b5:e9:29:
                    8f:a8:9a:89:03:ec:17:ab:79:a6:a1:89:3a:af:fc:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:8A:B4:79:10:53:D1:9E:52:8A:5A:C4:B3:64:DD:32:0A:69:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/feb1d56a-e512-3d2d-add6-ec252e4f36af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:76:f1:24:c9:e7:c9:73:3d:29:a8:ed:ae:c3:dd:57:7b:d4:
         a9:c2:a3:d6:4d:5a:c3:4e:45:b8:4d:36:b3:ab:5f:5d:81:5f:
         d5:30:78:b6:cd:34:9a:6a:cb:5e:8b:d7:49:c5:5c:ec:27:f8:
         07:3a:b2:50:7e:ff:8e:93:9b:f3:4b:2c:d9:bb:fd:34:0f:f1:
         5a:70:2b:e3:28:96:5c:09:3f:b4:cd:26:8e:71:32:a9:c1:06:
         31:45:c8:2d:15:24:9d:45:e8:77:1a:79:b1:bf:03:22:71:df:
         62:c4:cb:3d:c7:2d:0f:0b:05:da:70:c6:e2:db:31:df:e8:b9:
         73:b7:74:54:b9:33:1a:e2:94:da:da:ce:f4:08:49:7e:05:e4:
         72:85:4e:c4:92:31:5b:10:63:78:db:95:26:9e:65:d8:50:a1:
         21:3e:60:5c:0a:95:80:90:01:f9:fd:c9:f0:6a:2c:25:d6:9b:
         78:b1:54:21:88:2e:5e:d4:0d:57:c7:7d:3e:a7:c4:3a:d9:de:
         f2:e4:34:a2:ed:8f:67:45:61:29:28:37:30:00:a2:65:60:cf:
         9d:81:06:39:df:ea:93:da:0e:1a:23:99:4a:16:a5:8b:45:04:
         fa:2a:7f:bd:49:2e:e0:99:c7:f4:03:f0:89:f3:21:3c:58:4b:
         38:3e:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 22:12:56 2026 by rpki-client