Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9f33b50-4f65-35aa-8d4a-1dac09f9ed33.roa
File:                     e9f33b50-4f65-35aa-8d4a-1dac09f9ed33.roa (raw, json)
Hash identifier:          6M7+Ues0tYaeWtM1Y5rZpwh0OrC4y9Ggxlv8/4MX610=
Subject key identifier:   1E:8B:DC:D5:D7:B2:EB:84:E1:3E:B7:B6:24:20:07:9B:13:DB:C7:C6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B827A1F44963BDD85F96DAE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9f33b50-4f65-35aa-8d4a-1dac09f9ed33.roa
Signing time:             Mon 13 Oct 2025 16:08:51 +0000
ROA not before:           Mon 13 Oct 2025 16:08:51 +0000
ROA not after:            Sun 11 Jan 2026 17:08:51 +0000
asID:                     213843
IP address blocks:        96.126.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:7a:1f:44:96:3b:dd:85:f9:6d:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 13 16:08:51 2025 GMT
            Not After : Jan 11 17:08:51 2026 GMT
        Subject: CN=53d73bcc-a5cf-43e6-9c25-f8774f4538c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:fc:0e:cf:78:36:a2:b0:ef:78:02:6b:d0:
                    8c:75:22:aa:15:35:86:4a:01:b9:dd:5e:62:29:41:
                    ee:03:bb:18:ec:89:9a:a2:4a:0d:30:83:16:fa:c1:
                    36:42:3e:f8:24:94:87:01:e7:b4:27:46:ed:f5:97:
                    86:02:a3:70:7c:10:68:4e:78:c0:5c:41:10:92:4e:
                    33:9c:2b:3a:ab:45:4a:69:d4:41:a2:22:d3:12:fc:
                    9c:4a:a2:9f:ba:24:d6:c1:d2:7b:db:1c:9d:3e:12:
                    56:2d:be:9d:18:34:e3:c6:2b:ba:47:a4:a3:e8:0a:
                    d1:6c:31:64:c5:c6:95:54:c8:69:b0:67:e7:fd:97:
                    19:a5:2a:3a:2a:2a:63:2d:3d:86:51:64:20:c0:8c:
                    9f:0c:d1:3c:cf:2e:18:1c:60:ef:8f:ea:7d:1b:58:
                    fb:8e:f9:f8:c2:2f:fc:b3:f5:ea:c1:4e:61:50:66:
                    ab:26:ef:da:bb:c5:b6:f7:40:cd:ac:9d:6c:02:84:
                    94:8f:14:4c:5f:3e:f6:9b:e8:37:e6:50:72:ca:a8:
                    a1:02:5e:7f:9a:13:a4:f6:de:c0:18:94:5c:ea:14:
                    66:a1:c3:42:a3:7a:c3:4d:c8:a1:d4:6b:15:c1:3a:
                    69:c3:32:5d:0b:49:1a:21:6e:db:57:71:84:66:48:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8B:DC:D5:D7:B2:EB:84:E1:3E:B7:B6:24:20:07:9B:13:DB:C7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9f33b50-4f65-35aa-8d4a-1dac09f9ed33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:93:8a:90:ac:c1:51:b9:ed:66:cf:2c:82:d6:2a:a6:2c:
         91:ce:25:aa:27:fb:91:1e:d2:ca:ac:b0:06:27:36:aa:e8:14:
         53:40:2e:fe:7f:8f:f8:66:c1:22:8e:18:32:14:1b:4d:b6:ae:
         c5:11:e4:a5:99:ec:20:cf:19:df:e6:72:e9:e3:ab:2b:41:37:
         a6:1f:bb:51:8c:6d:4f:1f:60:9c:6f:ce:7d:43:43:ad:79:8b:
         b2:35:29:a7:68:d7:4a:0a:1d:10:92:04:34:94:bc:65:f9:61:
         a6:6f:21:60:70:71:c7:23:b3:53:6a:5c:89:c6:20:44:fa:2f:
         d0:00:94:4f:8a:94:ba:44:f6:9f:d2:44:e0:aa:7f:c1:a0:66:
         62:b1:13:59:64:71:48:44:e5:76:35:02:b5:f2:6a:04:4c:f6:
         78:37:98:04:89:3b:1d:a6:66:87:75:16:e8:ca:ea:5e:93:28:
         f0:f1:ab:de:58:a0:ca:80:ba:ff:f7:8b:d9:72:ab:9c:09:24:
         c7:89:5d:d2:43:25:2c:a0:10:62:17:db:e9:77:41:08:8c:83:
         1c:0b:c5:02:22:0d:b0:6f:50:bf:79:b4:92:09:05:e5:2c:22:
         bd:aa:f0:d8:a0:a1:50:e9:d0:47:b5:be:af:65:8c:e9:42:07:
         77:2f:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:40 2025 by rpki-client