Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fd79230-8b15-3843-b22f-fa52a7724e39.roa
File:                     3fd79230-8b15-3843-b22f-fa52a7724e39.roa (raw, json)
Hash identifier:          yTB8bW6/e8qx10zq4OAb5alGAj0HN3nP0JQlZdWCl3A=
Subject key identifier:   AD:C2:96:35:8D:12:22:8E:66:EA:92:19:6A:E5:E2:66:53:FD:52:B3
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B05E142E32B47A15ECCCBDFC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fd79230-8b15-3843-b22f-fa52a7724e39.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     3939
IP address blocks:        129.250.53.112/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:42:e3:2b:47:a1:5e:cc:cb:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=beceef94-1479-4517-bb61-2f8cc3011f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:1a:5d:6d:da:51:b7:d1:af:d3:84:7e:99:
                    13:4b:bf:82:05:52:85:07:6d:57:05:93:69:1b:b4:
                    44:68:a3:85:97:ae:fe:35:f7:9c:c4:73:43:ab:ac:
                    c4:13:8b:c3:d3:d8:2f:d0:1e:85:4f:5b:ef:41:6d:
                    cf:6a:19:75:e6:9d:ed:f6:33:e2:7f:f3:07:ee:12:
                    f8:fb:a7:02:fe:27:2b:3f:4c:f2:23:fb:cf:eb:95:
                    89:df:df:fe:ed:25:63:c6:8f:1a:fd:a3:c3:bf:db:
                    a6:5d:e8:89:ef:f2:08:41:1f:f4:8b:d8:e3:8c:03:
                    07:78:6f:a5:da:c7:0a:75:0e:05:68:45:14:0c:56:
                    6b:22:d8:05:45:87:66:5f:76:39:76:ca:d5:37:56:
                    56:df:20:5d:2a:4c:10:35:eb:cb:50:ce:5a:04:31:
                    e3:87:03:76:32:ce:4b:e2:58:fb:4b:33:ef:9c:dc:
                    5e:f3:18:d1:9c:8c:e8:57:a7:53:5a:78:85:dd:cf:
                    16:a4:70:c6:b8:32:e3:43:6f:c8:b7:57:06:fb:9e:
                    f8:58:36:53:32:c7:48:bc:62:b7:db:7d:0a:f0:88:
                    50:84:a3:eb:c0:88:86:66:a8:cf:2d:e7:a8:0c:85:
                    ee:ec:dc:08:05:68:4c:8f:45:89:b4:66:88:f3:fe:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C2:96:35:8D:12:22:8E:66:EA:92:19:6A:E5:E2:66:53:FD:52:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fd79230-8b15-3843-b22f-fa52a7724e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.53.112/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:06:b5:1f:29:97:82:92:c5:cc:5a:d8:80:74:3a:9d:bf:d4:
         84:11:c1:af:e0:f8:16:0f:ec:ec:d5:6f:75:04:b3:c1:a6:58:
         9b:da:c0:bc:04:01:58:ae:65:00:66:ee:44:88:b0:33:27:7b:
         2d:da:eb:28:71:1d:09:e0:31:a7:07:b8:fb:95:2e:59:7e:6c:
         be:c3:c5:e8:1d:5e:ae:0d:31:2f:cf:d3:63:65:90:83:f9:08:
         25:3c:5e:8f:91:a5:40:26:f3:42:6b:81:a7:9c:83:8d:36:a6:
         8e:ea:3d:ab:e5:1c:32:80:e2:68:a2:6b:4e:00:df:48:e1:a9:
         e8:78:ea:b5:a5:4c:2d:43:54:d6:54:12:fb:1f:ca:cc:8c:96:
         da:87:e9:7a:91:3f:b8:96:a7:9c:7e:f0:8a:d8:23:85:c8:b9:
         58:7f:c0:03:5c:9d:0b:55:a9:c2:e5:59:76:0f:74:a6:4d:ca:
         35:68:07:9b:4b:10:a8:f5:9b:7f:26:d3:5b:9d:5f:69:14:25:
         eb:2c:66:65:43:58:d7:f3:98:a9:9d:95:ea:e0:8f:e6:84:8a:
         71:bc:52:c5:de:94:a5:d0:96:1d:03:4b:f4:90:70:10:35:1e:
         28:80:66:01:59:e7:28:6c:ec:b3:43:33:ce:5b:ab:f2:6c:86:
         be:1f:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:30 2025 by rpki-client