Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/03f6a4a4-b2a3-3a53-87f4-3bb7f93d7d2b.roa
File:                     03f6a4a4-b2a3-3a53-87f4-3bb7f93d7d2b.roa (raw, json)
Hash identifier:          z11/it88EQxVDlDyeGKHqqIihALa2A++gbxtC8/mRQQ=
Subject key identifier:   CF:A2:4A:3E:90:6D:5A:51:C6:4B:C7:04:01:54:4E:CD:BF:FA:8F:61
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584B461704D66141D79577128780
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/03f6a4a4-b2a3-3a53-87f4-3bb7f93d7d2b.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        129.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:17:04:d6:61:41:d7:95:77:12:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=5a9d262c-7254-4543-85fe-4a5c9c61d5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:28:73:a9:90:a1:4f:68:b9:1b:dd:a4:e5:
                    ec:bb:51:b5:47:37:cb:4e:3d:7e:bf:4a:4d:60:70:
                    5c:bf:b5:87:2e:b0:99:3c:5f:5e:8c:c7:66:a7:cc:
                    f3:d3:93:29:0f:8a:63:16:b5:d0:3e:92:f8:20:65:
                    57:56:8d:a3:29:f7:54:a6:e0:d0:58:82:fd:c2:a8:
                    c9:c8:b8:c8:d4:2f:62:66:56:cc:41:3f:89:15:65:
                    87:e7:c7:4f:3f:ac:ea:15:dc:5a:77:8c:46:9a:82:
                    e5:0c:64:f5:06:ed:0f:45:05:a6:b9:e0:08:cf:12:
                    08:63:5f:94:4f:47:04:02:77:7c:4a:dd:0f:09:c9:
                    1c:1c:bb:8f:a3:83:11:35:04:03:34:84:e6:9b:1c:
                    83:6b:14:74:7d:88:24:ae:a8:27:fc:23:d1:de:ba:
                    b3:3b:36:e2:50:72:4f:e7:73:09:da:c7:20:a7:ea:
                    24:1c:12:18:5c:8e:30:85:28:d1:d9:16:95:47:99:
                    27:22:2e:81:14:83:de:57:bb:47:03:fd:9d:79:ac:
                    bf:b7:ed:a5:4f:a2:3f:a2:4f:f6:1c:c0:3d:48:4a:
                    90:76:11:31:f4:8a:cc:db:07:2a:2e:e0:2b:44:c2:
                    a8:37:1f:c0:41:87:dc:3b:6b:0c:80:16:81:66:bf:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:4A:3E:90:6D:5A:51:C6:4B:C7:04:01:54:4E:CD:BF:FA:8F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/03f6a4a4-b2a3-3a53-87f4-3bb7f93d7d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6c:5c:58:52:8a:26:9f:79:ed:95:64:70:fa:2a:a8:35:84:
         2d:8e:04:9b:93:c0:22:ec:26:56:fb:54:1e:ec:1f:84:21:6a:
         37:0c:16:91:52:05:6c:56:c2:60:2e:a2:a1:5b:b9:bc:2f:2f:
         52:b7:df:07:02:82:14:41:fd:31:d9:24:84:11:aa:4c:dd:dd:
         0f:86:85:27:3f:4b:11:3a:b6:72:11:8c:be:dc:c6:90:b1:f3:
         dc:9e:ce:86:41:96:aa:c3:fb:98:00:b5:c0:7b:8a:8e:99:b6:
         7f:31:fa:8a:14:f0:4c:4e:e7:96:26:ee:70:ba:30:2a:a6:12:
         0e:fe:5a:2c:4a:4e:5b:41:01:f9:e8:15:86:73:15:8b:ee:6d:
         98:82:73:6e:c2:49:d9:46:ad:1b:00:42:a6:86:56:cd:9b:2b:
         79:25:76:f8:82:e2:0e:cf:e2:8e:6d:fe:ad:45:70:e2:97:47:
         02:37:bb:f4:62:ee:27:71:29:3d:90:9f:93:65:ca:b6:34:f1:
         92:a9:64:39:db:92:40:fc:15:0e:0e:89:99:ab:b3:05:c4:60:
         fe:d1:51:e3:d0:05:95:ed:4c:72:41:65:3c:5e:20:61:54:12:
         7d:69:bc:d9:6b:bb:46:4f:41:f6:54:b7:5a:88:22:9a:ae:b9:
         e4:cb:63:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:58 2025 by rpki-client