Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa
File:                     c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json)
Hash identifier:          bboqMRlh2NtZksAEaJtFxfADFSik7N8+tWQKxjJ6870=
Subject key identifier:   3C:14:DD:A1:5F:9A:FC:3B:C1:64:47:75:BD:40:43:A9:A7:C3:11:98
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584B8BE21AB53993F88CA618B2C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        129.33.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1a:b5:39:93:f8:8c:a6:18:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=88f08c40-3943-4576-abfe-90da04cac4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:ff:40:64:75:b7:c3:7e:c9:36:64:43:83:
                    82:0d:ec:c8:d8:5a:f4:e4:3b:33:5d:e9:17:10:35:
                    a4:b1:a8:86:5b:08:cf:a9:7e:ff:b2:6c:49:91:16:
                    fb:8b:34:f3:79:92:0b:0e:c3:2f:4d:b3:d5:78:8f:
                    8f:d2:ce:f8:8c:83:1d:32:a8:5e:51:27:b4:c9:63:
                    79:42:e2:10:ca:f0:68:08:40:d5:de:c1:bd:25:76:
                    b6:a1:7e:9f:d5:5a:2e:d7:c2:37:c3:7e:76:fa:6f:
                    1c:7c:fc:1a:1e:3b:65:3b:3c:63:96:1d:e6:fa:cc:
                    f3:4e:0d:43:69:31:1c:7d:5e:a7:05:b6:21:e7:15:
                    32:65:6e:1a:40:36:ee:21:19:9b:7d:b8:06:93:b3:
                    f7:10:ed:45:2d:f1:90:74:b6:61:a6:6a:3f:59:74:
                    95:30:84:1e:ee:ac:4a:91:6a:6e:7a:b8:66:72:5a:
                    bb:69:59:d8:26:14:60:b0:cb:d1:c7:88:f5:f0:59:
                    ae:8c:9a:45:76:7d:b2:f6:d6:57:ff:30:ce:b6:36:
                    2e:c3:68:6b:24:10:6c:4a:3b:47:0c:c3:3f:db:f1:
                    3a:42:37:2d:ee:c5:f1:3d:95:bd:fc:12:51:a2:e4:
                    75:4d:5a:7c:53:99:f6:63:e5:6a:86:49:c1:80:e7:
                    61:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:14:DD:A1:5F:9A:FC:3B:C1:64:47:75:BD:40:43:A9:A7:C3:11:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:57:c8:b3:e3:ae:b8:bb:ea:19:dc:e3:ad:87:79:00:5b:ad:
         f0:89:9f:7b:33:7e:1c:ee:2a:9d:4e:82:ab:87:78:f5:e3:7d:
         26:3e:37:ba:8b:90:00:e6:f1:89:40:2f:b1:d7:91:3a:4f:33:
         4a:cb:c3:74:52:ed:d4:d0:ac:1c:6c:7b:f8:b4:3f:b5:f1:4b:
         04:5e:0a:ec:0e:1e:cd:66:0c:1b:99:19:e0:ae:83:98:6b:46:
         70:8f:1e:30:70:ca:ad:f2:38:5f:0f:b4:df:55:58:ef:68:a1:
         5d:76:62:f6:38:72:01:80:59:96:99:97:60:d5:cd:6d:57:dc:
         85:80:4f:95:e9:da:d2:64:eb:59:9d:96:5d:09:9c:01:ba:31:
         66:a9:8a:d3:0b:1c:98:ac:ad:42:da:46:fc:01:43:93:aa:f5:
         25:1e:35:95:a7:87:67:6e:62:f0:3e:22:63:cc:ed:72:78:e1:
         dc:78:ec:65:41:15:e1:af:b2:7c:07:93:08:ea:5a:c1:dc:5b:
         4f:9b:c8:e7:8e:87:61:e4:f2:51:7b:65:bc:11:08:5d:c1:82:
         e7:d0:50:a4:d4:c4:3e:b3:eb:ba:2b:00:a5:aa:da:7c:b6:cb:
         73:a4:30:d9:ad:59:ca:fa:cf:23:73:f1:9a:98:69:86:9d:77:
         fa:dd:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:27 2025 by rpki-client