Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c9920b43-93ea-322c-82a8-550e3be2f967.roa
File:                     c9920b43-93ea-322c-82a8-550e3be2f967.roa (raw, json)
Hash identifier:          QWE5jkN3l6UHUtQgUR8Py+SiSocodKnNkmrOaOg1Kz8=
Subject key identifier:   C2:CC:8B:CF:58:81:E5:16:EE:C3:0C:A1:64:D5:64:D1:C9:20:EF:23
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B7F52080E2BEB04F1D67FD100
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c9920b43-93ea-322c-82a8-550e3be2f967.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     3354
IP address blocks:        129.117.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:08:0e:2b:eb:04:f1:d6:7f:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e5a3961f-12a7-4c5e-bc65-090fcd0f58f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:3b:57:ef:c5:ba:01:85:00:6b:b7:aa:f8:
                    40:15:62:e9:5e:29:6b:6e:1d:42:86:da:11:e4:7b:
                    1a:e3:3f:f6:28:de:af:e1:48:2b:56:cd:96:cc:67:
                    d8:15:7e:8f:58:99:4a:35:e3:00:86:6d:6d:60:6a:
                    e4:0c:f6:dc:42:a3:52:f6:ef:36:86:e3:08:9e:6d:
                    25:2d:8b:fe:b8:9b:4d:b5:ed:e1:2e:33:0b:90:c5:
                    e5:ff:a0:f2:c7:99:f3:19:c4:32:a4:71:13:4d:6a:
                    12:81:58:2a:23:22:e3:0d:82:bd:5c:14:86:13:b4:
                    92:b0:5b:df:b1:e8:fc:cb:e2:a8:43:cf:98:2d:2d:
                    1f:ce:21:d4:0c:89:d7:fa:de:b8:61:92:c0:71:93:
                    c8:3e:d4:fd:85:22:11:54:8f:de:b2:dd:3e:49:ce:
                    b0:7f:6b:a3:ca:49:8e:1e:a3:65:ca:01:67:e0:13:
                    5e:b7:c8:1b:57:18:77:81:dd:d3:f7:4b:6b:5a:9e:
                    c7:71:b4:c6:84:f3:a3:95:42:ca:d8:ed:0e:5f:5b:
                    cf:bb:42:a1:d2:29:53:c7:bd:a4:e0:71:e2:87:d1:
                    fc:bb:8f:a0:04:e6:d8:5f:22:6c:08:2f:4c:fe:94:
                    fc:00:8a:19:8a:dd:f9:84:7f:9d:f3:99:22:27:8e:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:8B:CF:58:81:E5:16:EE:C3:0C:A1:64:D5:64:D1:C9:20:EF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c9920b43-93ea-322c-82a8-550e3be2f967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:90:73:c9:6a:d3:f7:71:63:35:f6:61:89:18:e6:54:72:2a:
         40:00:b3:fb:81:ab:a3:16:a1:10:57:16:60:2c:8e:59:7d:df:
         77:6a:c6:f9:85:2a:cb:f7:b8:03:74:be:34:d4:96:b7:48:78:
         26:53:fe:e7:10:12:5f:8e:c5:4a:1f:5e:53:12:23:86:89:5e:
         2a:28:ff:b6:6f:86:47:c1:39:5e:0d:b2:d2:a9:65:5e:d2:b7:
         a5:17:a5:48:d6:95:c2:92:bd:ad:ae:f0:bd:38:d4:10:1a:6e:
         83:11:28:ee:4a:5d:ed:24:75:a7:5f:4c:0c:79:1d:03:21:65:
         57:db:8d:9f:b1:07:73:43:3d:37:72:c9:4a:ec:6b:a3:5a:c8:
         7a:78:5d:c5:6a:74:c1:f9:06:38:6d:57:05:2d:72:20:16:e2:
         9f:52:a5:d6:34:00:c1:0b:6c:cf:a4:be:eb:ce:44:21:9f:93:
         e1:e5:d9:d2:25:95:80:a1:54:3c:55:62:3f:84:7f:cc:2c:c3:
         73:e2:97:a4:47:de:24:e3:b7:43:4a:76:a9:ae:f1:22:f3:54:
         20:c9:8f:b4:50:fa:42:b8:00:a4:c4:20:87:ee:cc:12:68:7c:
         ec:b8:23:63:31:5b:6b:ad:af:85:ea:9e:58:ba:55:f2:1f:89:
         af:f1:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:43 2025 by rpki-client