Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/f864c2ef-2fc6-304b-b3a0-5cec22327721.roa
File:                     f864c2ef-2fc6-304b-b3a0-5cec22327721.roa (raw, json)
Hash identifier:          y8g0l4KhvN+NBJHPfkaZo0uTt4sf8J0HpmJ+3fW6iFU=
Subject key identifier:   A6:92:2F:C8:F3:71:04:25:9F:75:87:10:BA:99:0C:CA:D1:07:86:45
Certificate issuer:       /CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
Certificate serial:       010D0C9F4328584B4E770AC6026E9F4CFB54F2B0
Authority key identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/f864c2ef-2fc6-304b-b3a0-5cec22327721.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     19871
IP address blocks:        129.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0a:c6:02:6e:9f:4c:fb:54:f2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=8ec49b00-64e2-4725-b92a-4c81a8917462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:82:59:ea:aa:97:1c:4f:dd:ef:96:c4:2e:c5:
                    aa:18:97:34:0a:5b:e0:cd:0b:b7:2f:07:13:19:4d:
                    8e:79:4c:73:3a:27:c2:71:11:a4:2a:7f:12:fd:29:
                    ce:a9:da:4c:f4:f2:d1:34:4a:1d:f2:61:78:e0:7b:
                    08:6f:25:1e:38:0e:94:fa:ff:ba:c4:04:c5:9a:d3:
                    99:23:96:67:7e:65:e7:0a:aa:e6:be:c1:33:3a:98:
                    78:ab:3e:a7:88:bb:06:fc:89:fa:a1:04:37:f4:6e:
                    76:80:5c:50:43:63:87:19:09:b8:78:c2:a2:a2:be:
                    b8:dd:27:30:36:36:b4:36:7a:04:4a:0f:3b:0b:6b:
                    c3:fc:9a:55:54:57:90:44:97:3b:d4:d2:0c:8b:c4:
                    88:7f:9a:2c:b0:2c:83:23:4c:a3:03:e2:32:8c:63:
                    05:e2:83:38:7b:fa:a7:07:94:75:73:b0:68:db:8b:
                    25:a6:21:28:ea:38:9c:5d:69:7f:ae:7d:3e:d7:51:
                    c9:c7:cc:ac:75:99:a3:6f:e8:86:e0:82:0b:82:7b:
                    85:58:cb:d0:36:19:3d:43:cc:a8:7e:8e:71:73:95:
                    6b:98:8f:fb:2a:6c:7f:38:11:80:a6:c2:0d:03:b2:
                    97:6e:e7:2e:83:46:cc:d0:4b:22:21:6d:6f:ca:0a:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:92:2F:C8:F3:71:04:25:9F:75:87:10:BA:99:0C:CA:D1:07:86:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/f864c2ef-2fc6-304b-b3a0-5cec22327721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl

            X509v3 Authority Key Identifier:
                keyid:E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:5b:9d:f4:ed:51:44:96:f7:ca:47:4a:3a:82:08:4e:86:
         88:00:3b:a2:22:e3:cb:70:1f:11:08:6e:cb:c4:9b:49:94:e8:
         32:25:3d:b6:07:a1:2e:de:ad:a0:21:17:81:14:1d:be:5e:03:
         d9:c7:39:23:6a:5a:1d:f0:d1:8a:53:97:41:60:49:71:78:fa:
         e3:4d:3d:11:3d:6e:b2:ad:d2:a6:a9:22:b3:f3:41:cd:e7:76:
         7d:48:18:11:47:71:68:cd:de:8b:48:01:21:01:52:74:72:62:
         7b:c1:1f:65:8d:3f:0a:5b:86:56:99:97:d4:71:ac:89:3a:83:
         d1:24:d3:17:62:75:57:fb:c4:f1:8f:55:ac:6f:c8:28:7c:c6:
         12:dd:17:a0:af:c4:a8:80:7d:1a:2e:04:e8:86:8f:12:8a:fa:
         5a:c6:05:d5:8c:53:fd:e7:95:48:84:bc:52:67:da:bb:a8:86:
         da:4c:24:62:cf:c8:99:2d:64:27:de:23:53:f0:d2:40:9f:74:
         c5:6f:7f:c1:54:22:12:5e:3a:af:54:86:cc:56:91:c6:6e:aa:
         df:53:08:f8:93:7e:ca:4e:a1:6b:e4:51:9e:ae:47:c2:26:b0:
         e8:d1:38:14:fc:d7:4e:69:69:08:bf:25:04:8b:53:a6:91:ea:
         3b:c1:02:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtOdwrGAm6fTPtU8rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmYzNzlmYjEtYWNmMC00OTdlLTgwMGItNWIxZWNhNmFi
N2E2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
OGVjNDliMDAtNjRlMi00NzI1LWI5MmEtNGM4MWE4OTE3NDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYJZ6qqXHE/d75bELsWqGJc0ClvgzQu3LwcT
GU2OeUxzOifCcRGkKn8S/SnOqdpM9PLRNEod8mF44HsIbyUeOA6U+v+6xATFmtOZ
I5ZnfmXnCqrmvsEzOph4qz6niLsG/In6oQQ39G52gFxQQ2OHGQm4eMKior643Scw
Nja0NnoESg87C2vD/JpVVFeQRJc71NIMi8SIf5ossCyDI0yjA+IyjGMF4oM4e/qn
B5R1c7Bo24slpiEo6jicXWl/rn0+11HJx8ysdZmjb+iG4IILgnuFWMvQNhk9Q8yo
fo5xc5VrmI/7Kmx/OBGApsINA7KXbucug0bM0EsiIW1vygqmrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKaSL8jzcQQln3WHELqZDMrRB4ZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZjM3
OWZiMS1hY2YwLTQ5N2UtODAwYi01YjFlY2E2YWI3YTYvZjg2NGMyZWYtMmZjNi0z
MDRiLWIzYTAtNWNlYzIyMzI3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmYzNzlmYjEtYWNmMC00OTdlLTgw
MGItNWIxZWNhNmFiN2E2LzZmMzc5ZmIxLWFjZjAtNDk3ZS04MDBiLTViMWVjYTZh
YjdhNi5jcmwwHwYDVR0jBBgwFoAU43hk0A6wXXS9R6pzSAtQQCdUEtMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZjM3OWZiMS1hY2YwLTQ5N2UtODAwYi01YjFl
Y2E2YWI3YTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgXkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOpdbnfTtUUSW98pHSjqCCE6GiAA7oiLjy3AfEQhuy8SbSZToMiU9tgeh
Lt6toCEXgRQdvl4D2cc5I2paHfDRilOXQWBJcXj64009ET1usq3Spqkis/NBzed2
fUgYEUdxaM3ei0gBIQFSdHJie8EfZY0/CluGVpmX1HGsiTqD0STTF2J1V/vE8Y9V
rG/IKHzGEt0XoK/EqIB9Gi4E6IaPEor6WsYF1YxT/eeVSIS8Umfau6iG2kwkYs/I
mS1kJ94jU/DSQJ90xW9/wVQiEl46r1SGzFaRxm6q31MI+JN+yk6ha+RRnq5Hwiaw
6NE4FPzXTmlpCL8lBItTppHqO8ECuA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:00:47 2025 by rpki-client