Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d30999c-a6cd-34b3-af88-f8eb04251d9b.roa
File:                     6d30999c-a6cd-34b3-af88-f8eb04251d9b.roa (raw, json)
Hash identifier:          Yi0u9Rn1sYUb9iDI343b5kJJ2R7APUILGrclHKDd3CI=
Subject key identifier:   00:20:22:F1:89:BE:9F:39:A1:50:08:07:9E:5C:81:11:8C:03:B7:41
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACA7624A845CE131B489C2D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d30999c-a6cd-34b3-af88-f8eb04251d9b.roa
Signing time:             Fri 08 Aug 2025 18:12:06 +0000
ROA not before:           Fri 08 Aug 2025 18:12:06 +0000
ROA not after:            Thu 06 Nov 2025 19:12:06 +0000
asID:                     31898
IP address blocks:        129.150.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:76:24:a8:45:ce:13:1b:48:9c:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  8 18:12:06 2025 GMT
            Not After : Nov  6 19:12:06 2025 GMT
        Subject: CN=4483d588-20ca-48df-beff-18ee0b3ffec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:ae:35:a7:87:fd:58:a3:4b:13:5c:be:98:
                    b4:e8:2d:fe:cc:9a:ba:6a:eb:17:0e:d8:ed:91:48:
                    3c:34:d1:83:91:e7:ed:60:e6:9f:44:86:e7:8e:71:
                    b2:29:72:d5:9d:35:37:f1:a7:67:34:f5:4f:d5:17:
                    c0:50:4d:09:eb:71:2d:a9:18:73:6c:74:68:27:47:
                    23:10:af:19:7a:de:2a:02:3a:f6:e7:e5:5f:fe:81:
                    38:3c:ec:3d:c4:a1:0f:7a:97:7f:2a:94:e4:d4:4f:
                    47:d8:96:8e:ec:4b:ff:5b:03:2f:9d:65:1d:59:6b:
                    6a:73:98:cb:7f:31:85:6d:f8:28:9b:95:79:bb:99:
                    e1:65:f1:7e:96:29:33:3b:a4:12:63:8c:c2:c8:29:
                    69:90:d7:79:68:3f:3e:ec:76:42:d6:02:b2:a4:6e:
                    7c:4e:31:88:82:4e:86:78:9f:2c:ca:c1:ca:22:a7:
                    a6:20:af:46:7b:0a:68:12:b5:b4:af:fd:ae:5f:b4:
                    c1:a1:55:52:7c:ce:90:50:96:9f:da:78:8b:ec:2b:
                    50:14:1c:41:0b:8e:a0:f5:ec:6d:8b:af:a8:26:ee:
                    a9:1b:35:af:54:4c:15:d7:03:8c:35:9a:e5:04:b0:
                    ed:5b:80:d1:9e:82:62:42:84:e8:18:66:e0:9f:43:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:22:F1:89:BE:9F:39:A1:50:08:07:9E:5C:81:11:8C:03:B7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6d30999c-a6cd-34b3-af88-f8eb04251d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.150.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ae:ca:26:65:6a:4e:e1:11:c0:6d:1c:d1:e7:ed:73:63:58:
         fe:0a:0e:7d:5b:f5:af:3a:5b:21:43:54:d2:fd:6b:9a:1a:05:
         44:4a:05:49:86:84:9f:ba:58:c6:8f:3a:05:58:7b:1d:cb:e0:
         ac:10:13:c7:6e:bc:a5:d9:05:6c:04:d5:99:1d:7d:36:d8:2f:
         1d:0e:63:a1:fb:a8:5c:9d:45:f0:1a:2a:91:b1:a0:27:43:8a:
         bb:9f:c8:61:af:07:20:23:84:f2:a8:e6:69:35:38:bf:17:e7:
         8b:23:f7:1b:ca:c0:2c:c2:d3:fa:2a:91:8b:a3:27:7d:8a:0e:
         90:87:57:79:d7:f6:04:e6:5a:ae:c4:44:c7:a3:3e:93:be:85:
         b5:27:e4:f9:7c:8a:ba:7f:ed:2e:f6:cc:fd:f9:98:56:6c:58:
         10:c2:26:fa:66:e4:72:84:b3:e0:8d:5c:59:7b:40:8a:4e:17:
         61:39:96:79:89:0b:12:cc:af:c3:59:7b:ce:ab:ad:aa:67:c4:
         e2:ff:6d:e2:d2:72:92:c5:23:35:3b:fe:65:8c:b6:5c:ff:31:
         a8:a6:33:8b:c9:3f:f7:35:0f:d9:23:08:35:9b:d4:99:0c:9e:
         29:1f:c5:ab:64:45:97:4c:85:a8:77:9e:31:4d:fe:a8:c1:22:
         ec:68:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:22 2025 by rpki-client