Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa
File:                     1c6d454f-eff3-36c5-a242-1155de42889c.roa (raw, json)
Hash identifier:          774Y/eoil7HrC6YlvWLKSnPX8kcFV/XjSIuJTp7rEYY=
Subject key identifier:   5A:70:D8:2A:E0:44:52:4E:84:95:15:56:F2:F8:89:AF:D5:F0:38:59
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584B8BE225864E089708418E8D80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        129.41.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:25:86:4e:08:97:08:41:8e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=dd4df93c-467e-4bbd-8cff-37a4c4348db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:ff:cc:ca:62:f2:04:06:55:d4:75:05:98:
                    e5:ba:ca:8c:f3:e3:30:5a:95:9a:2e:94:31:2a:14:
                    a8:9d:94:e0:cd:59:a1:79:93:d0:48:69:e7:be:e5:
                    be:b9:9d:df:9d:97:20:fa:db:81:4b:d6:9b:e0:a3:
                    eb:53:f0:eb:dd:ff:f6:7e:71:51:17:c0:d9:ef:72:
                    4a:a7:cd:05:b1:6f:62:c3:4c:c7:76:2e:9c:64:3e:
                    43:73:35:05:31:6a:f5:a5:7b:3c:4b:77:5e:5b:06:
                    59:92:40:c1:60:50:91:01:8d:4c:32:f9:d4:18:ef:
                    b3:97:1a:de:cb:c2:15:09:3a:56:61:7d:67:a7:28:
                    94:72:ff:cb:66:e3:79:fb:e3:8f:22:12:cb:90:9d:
                    d2:c6:f0:cf:f3:72:0a:cc:b1:42:3e:0b:4c:c3:46:
                    ac:ea:fd:4f:e3:97:e0:94:53:4b:bf:5e:ab:9f:a8:
                    41:0a:69:13:00:d7:cc:62:ee:b8:df:24:2f:34:09:
                    af:88:07:ed:58:5c:6e:a0:5c:ed:2b:64:5d:24:4f:
                    f4:9f:d1:7f:fd:a5:e6:95:60:87:d0:9b:db:54:e6:
                    ff:ee:21:27:6f:7b:49:42:59:20:a0:cf:ee:e8:63:
                    cd:e3:17:79:35:da:4f:2f:4e:88:6d:31:2f:a3:d5:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:70:D8:2A:E0:44:52:4E:84:95:15:56:F2:F8:89:AF:D5:F0:38:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:10:77:04:18:08:fe:fd:dc:56:47:37:0c:c6:88:71:bc:
         0a:3a:8e:6c:16:97:5c:54:74:97:82:2a:bf:14:bd:df:3f:2e:
         59:99:34:b9:00:10:cf:cf:66:22:11:77:64:6f:3c:4d:3b:7c:
         50:45:c6:83:18:48:77:3f:e2:97:54:c1:e2:5d:2b:89:68:6e:
         39:8d:ea:16:48:dc:fe:ca:f6:77:b0:25:ad:66:4b:e1:38:e9:
         09:ad:e1:40:be:3f:12:d0:26:a4:1a:2c:40:34:2a:55:f9:29:
         4e:bc:af:eb:b6:11:dc:e2:d2:f8:70:7a:fe:53:31:37:f2:3d:
         93:ff:2a:16:be:9f:fb:ea:f9:16:81:d6:00:53:e1:4e:dd:45:
         40:1e:6a:fb:14:34:68:38:ec:56:62:af:d4:3b:4b:a6:21:f1:
         e9:5f:a8:c1:9a:d3:97:5a:13:4a:5a:51:dc:c3:ab:3e:a2:3d:
         46:b6:1f:3c:8e:fd:e2:c2:18:d8:c3:da:c2:ef:44:0a:e0:18:
         8f:41:16:9b:d8:92:d6:c1:48:23:c4:cf:cc:da:1b:f2:c9:bc:
         06:e4:86:12:e6:57:a6:37:a5:41:80:c9:b9:db:4b:bf:1c:ca:
         69:87:fd:1c:6b:eb:3f:60:2e:e2:53:59:db:ec:87:09:fe:e5:
         10:25:28:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iWGTgiXCEGOjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk
ZGQ0ZGY5M2MtNDY3ZS00YmJkLThjZmYtMzdhNGM0MzQ4ZGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrX/zMpi8gQGVdR1BZjlusqM8+MwWpWaLpQx
KhSonZTgzVmheZPQSGnnvuW+uZ3fnZcg+tuBS9ab4KPrU/Dr3f/2fnFRF8DZ73JK
p80FsW9iw0zHdi6cZD5DczUFMWr1pXs8S3deWwZZkkDBYFCRAY1MMvnUGO+zlxre
y8IVCTpWYX1npyiUcv/LZuN5++OPIhLLkJ3SxvDP83IKzLFCPgtMw0as6v1P45fg
lFNLv16rn6hBCmkTANfMYu643yQvNAmviAftWFxuoFztK2RdJE/0n9F//aXmlWCH
0JvbVOb/7iEnb3tJQlkgoM/u6GPN4xd5NdpPL06IbTEvo9Vk5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpw2CrgRFJOhJUVVvL4ia/V8DhZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWM2ZDQ1NGYtZWZmMy0z
NmM1LWEyNDItMTE1NWRlNDI4ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADihEHcEGAj+/dxWRzcMxohxvAo6jmwWl1xUdJeCKr8Uvd8/LlmZNLkA
EM/PZiIRd2RvPE07fFBFxoMYSHc/4pdUweJdK4lobjmN6hZI3P7K9newJa1mS+E4
6Qmt4UC+PxLQJqQaLEA0KlX5KU68r+u2Edzi0vhwev5TMTfyPZP/Kha+n/vq+RaB
1gBT4U7dRUAeavsUNGg47FZir9Q7S6Yh8elfqMGa05daE0paUdzDqz6iPUa2HzyO
/eLCGNjD2sLvRArgGI9BFpvYktbBSCPEz8zaG/LJvAbkhhLmV6Y3pUGAybnbS78c
ymmH/Rxr6z9gLuJTWdvshwn+5RAlKMo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:04 2025 by rpki-client