Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/e36e019e-32c6-3a96-9bf6-4ad01b7774ea.roa
File:                     e36e019e-32c6-3a96-9bf6-4ad01b7774ea.roa (raw, json)
Hash identifier:          5TnY+GSQh0cYmFs00YqKauEaeZDpX39reLO0gstUzZI=
Subject key identifier:   7B:DD:3C:9C:21:D1:01:E4:9F:81:79:23:84:34:7F:56:B5:33:09:33
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584B1C37524BA9A6AB7929609050
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/e36e019e-32c6-3a96-9bf6-4ad01b7774ea.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     11808
IP address blocks:        129.101.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:52:4b:a9:a6:ab:79:29:60:90:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=d7212bd0-8d68-4084-b304-de05b48b428a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:3b:47:dd:f3:26:a2:cf:45:20:ff:7c:2f:
                    96:5a:d7:14:5f:79:a7:82:53:ea:39:2e:81:51:bd:
                    01:78:fd:7f:d9:00:61:53:25:ac:60:de:83:22:10:
                    46:0e:f6:f2:18:2f:f4:7f:88:51:09:3d:b6:cf:88:
                    ba:e2:1a:8d:e4:92:e0:5d:9e:f5:a2:f8:45:bf:20:
                    bf:39:05:13:b6:9c:d6:50:c0:0d:09:34:5a:35:85:
                    90:20:be:07:83:71:f1:ab:b7:0d:bf:1d:4e:cb:89:
                    50:65:af:39:75:e3:c3:28:4b:8a:94:8e:8e:51:0b:
                    1d:a3:77:13:67:9b:e6:35:2d:3c:24:f3:20:95:f2:
                    95:d7:30:ab:96:7a:2f:b6:e1:6f:a3:ea:07:0b:b6:
                    8d:fa:6e:d8:29:a9:fc:be:85:a8:29:21:99:67:47:
                    98:67:9b:ac:dc:46:61:a4:22:34:96:2c:ed:76:9e:
                    52:8f:ae:39:0d:c3:67:80:aa:63:d5:be:21:62:9a:
                    26:58:42:7a:59:5a:1e:a0:33:cd:54:b6:34:7a:27:
                    52:48:aa:f6:a9:57:2d:74:d0:ba:5d:ac:e9:9f:5b:
                    c6:3e:e4:e4:7d:fc:2d:5f:ee:8a:50:ca:5e:12:cb:
                    2f:a9:ac:29:14:a6:c5:02:85:63:45:99:20:69:17:
                    27:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:3C:9C:21:D1:01:E4:9F:81:79:23:84:34:7F:56:B5:33:09:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/e36e019e-32c6-3a96-9bf6-4ad01b7774ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:84:54:54:65:7b:4f:b5:5f:3d:72:29:49:08:f2:5f:5e:0e:
         b0:25:f9:ac:75:59:de:1c:9c:b8:e0:d1:36:96:17:7d:16:83:
         3e:c2:7d:c9:27:a4:e1:60:3b:b8:d4:d8:a1:31:e4:97:6b:f9:
         8d:29:7e:57:7c:da:74:e3:13:16:57:c1:5d:19:5b:a8:c4:33:
         e7:87:cf:47:09:d5:bb:b2:35:85:aa:05:d7:d7:62:f1:9c:27:
         32:fc:f9:08:8b:2f:10:fb:aa:cb:0a:e7:26:f7:10:99:65:1a:
         ac:31:9a:58:83:65:9e:40:7b:97:05:85:74:2c:5d:2f:6e:89:
         d9:61:4d:1e:ea:74:78:88:f5:a4:ad:ee:b3:3f:97:57:6c:5c:
         8e:18:29:ab:8f:ad:af:73:ef:4f:32:41:f3:14:16:17:8e:7b:
         75:3c:96:57:1f:60:68:8d:17:a0:74:4b:d1:aa:93:4f:8d:10:
         bb:39:c3:24:76:08:4c:24:90:d8:d4:f5:ce:de:ba:d0:78:84:
         44:1a:57:c9:a7:12:03:53:1a:f9:84:88:39:aa:8b:c8:77:ab:
         21:39:f9:d7:ad:a0:81:79:5b:24:d9:bf:4f:47:3f:06:56:bf:
         7a:35:91:5a:1a:8b:36:81:28:fb:95:2b:c5:9c:11:a3:de:b4:
         e7:a7:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:53:04 2025 by rpki-client