Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa
File:                     5c85609e-52d3-32f0-af5f-894bf50602aa.roa (raw, json)
Hash identifier:          M4mKddlYDw+cCYA+lpHNL0HSd2fTQEoYc/GoFBpwEk4=
Subject key identifier:   06:28:7C:73:C6:EE:BB:C1:6E:DA:02:97:5C:0B:A4:E5:FF:C7:54:45
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584B28C6EFE7B5C46D1E4450E0A0
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     11808
IP address blocks:        129.101.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ef:e7:b5:c4:6d:1e:44:50:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=9a207d58-a96b-4cdf-970a-68afe756284f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:93:98:66:0c:36:c8:0d:e4:e2:df:74:64:
                    e7:41:a1:6c:99:a3:47:86:ad:83:ff:b8:d2:31:05:
                    64:b5:0e:b8:a1:3b:4d:30:db:68:67:9c:86:44:1f:
                    0b:80:0d:51:c1:42:71:16:73:08:cd:21:ce:66:f3:
                    23:47:eb:39:a9:bf:55:e1:a3:4f:65:a6:b7:84:87:
                    1d:22:59:37:13:91:64:2e:04:0a:6b:8f:a6:55:eb:
                    25:ed:73:35:1f:de:31:bb:18:e9:14:ff:72:e5:13:
                    a4:0c:f6:f1:9d:41:e6:c1:8a:ab:bc:71:7b:3d:49:
                    13:c8:c1:03:74:e2:2f:e8:e2:8e:c4:b1:61:34:a9:
                    cf:51:cb:1f:d3:fa:b1:3d:85:ed:bf:a7:a7:90:ab:
                    e2:8e:c8:a9:09:59:7c:86:d2:b4:d6:d0:c6:21:f6:
                    ec:af:26:5c:3e:7f:1f:ed:0f:e9:f2:5b:8f:ed:56:
                    3b:ec:f3:8a:bf:88:71:3d:30:c6:df:d8:c5:3f:88:
                    a7:79:62:5e:fb:0a:f0:f6:60:f6:0d:d2:46:52:a2:
                    c0:28:8d:a9:27:86:b9:30:dc:45:86:54:f8:01:9f:
                    a3:e8:91:c6:18:09:a5:1f:ea:2e:2c:6a:4d:98:e8:
                    50:cc:88:e7:2f:44:d3:75:b2:9b:3c:6a:ea:5c:3f:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:7C:73:C6:EE:BB:C1:6E:DA:02:97:5C:0B:A4:E5:FF:C7:54:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:b4:7e:01:17:e0:12:cd:bb:ad:65:5e:ea:4f:73:86:5e:
         9f:a2:df:fb:83:fd:3c:8e:c0:88:6f:85:5b:d7:d0:fc:e9:f8:
         96:c1:28:08:94:c4:fd:d7:b8:ac:9c:4f:c1:77:b7:63:14:31:
         6b:82:bd:2e:f9:35:41:ce:13:e1:67:11:db:b8:e8:df:8b:b5:
         0f:07:23:14:cc:fb:d7:65:a3:ee:22:f4:4b:a3:f7:2c:e6:83:
         b0:74:b3:6c:87:50:76:8d:73:36:45:20:3a:4f:08:45:36:57:
         9f:0c:c6:c1:f9:9e:08:98:a8:c4:5b:d0:40:c4:66:e1:a9:ca:
         69:a8:ed:48:59:5b:68:30:f6:29:35:ab:6e:36:3f:af:25:9f:
         10:1f:40:12:75:30:ab:3a:b1:9b:42:a7:8d:3e:e5:9f:36:96:
         22:56:e2:1c:d5:ac:83:70:d1:d0:92:17:29:dc:c4:11:d7:76:
         b5:b0:ff:e0:73:9e:b5:bd:d0:2c:1b:19:1e:e5:c0:7c:59:08:
         a1:ae:81:c3:f5:78:35:98:ec:58:b7:15:21:da:e0:03:0b:aa:
         cb:28:6d:81:4d:75:74:98:c1:5f:4c:6e:3c:7a:73:1c:a9:25:
         ae:cc:7a:61:96:78:a0:c1:39:9d:37:b1:37:4f:58:a3:47:3b:
         df:4e:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:13 2025 by rpki-client