Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/545871c5-7540-387b-8df2-75adcce7b17f.roa
File:                     545871c5-7540-387b-8df2-75adcce7b17f.roa (raw, json)
Hash identifier:          3jYipjXWiqRA3mHL8JyoQDX23In17bDAK6JdgVfRN2M=
Subject key identifier:   63:C5:D7:64:BE:B4:85:0B:7F:09:E3:6C:24:8B:05:43:9B:40:8E:4B
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AEDDA0C1E17F7145E0B6A1F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/545871c5-7540-387b-8df2-75adcce7b17f.roa
Signing time:             Thu 21 Aug 2025 10:26:41 +0000
ROA not before:           Thu 21 Aug 2025 10:26:41 +0000
ROA not after:            Wed 19 Nov 2025 11:26:41 +0000
asID:                     31898
IP address blocks:        129.149.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:da:0c:1e:17:f7:14:5e:0b:6a:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 21 10:26:41 2025 GMT
            Not After : Nov 19 11:26:41 2025 GMT
        Subject: CN=6babc656-cfd8-4111-8949-160a8a08b988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:24:7d:93:ac:75:7f:11:37:7a:a1:c2:2a:2e:
                    42:5d:3e:58:cd:25:43:95:82:ca:41:2b:9e:31:bd:
                    89:d8:53:ad:36:9e:11:64:f1:47:2d:c0:07:28:63:
                    e7:11:3a:39:fe:13:08:76:39:14:ec:a8:bc:f5:06:
                    60:b2:a3:54:2d:a7:60:88:1d:af:db:2b:db:c7:2f:
                    66:55:41:3e:58:88:ad:d8:b9:aa:38:41:ae:73:65:
                    81:35:39:a3:3a:1c:43:f6:fa:6b:5a:86:ee:4f:cd:
                    5f:43:2c:7d:16:b6:1f:57:11:6e:31:a3:e8:b6:28:
                    a7:c1:64:bf:23:ed:a5:86:97:76:ba:68:90:bb:3d:
                    46:a3:54:9d:0e:4d:54:1d:e0:2a:30:21:8a:ab:97:
                    a6:ea:ef:3b:07:5c:32:50:a4:19:18:91:b5:ef:f0:
                    e3:40:d3:17:c5:fc:c4:db:b8:ff:d6:71:d1:61:19:
                    ce:5b:ba:7b:ca:22:17:fd:68:fb:bd:8d:43:d4:3d:
                    85:30:65:1e:a5:f5:4f:3f:6a:cc:25:9e:97:99:5b:
                    45:2d:c9:f3:0b:2d:6e:7d:ea:d7:62:97:e7:98:e0:
                    9d:1b:d1:05:87:3f:95:0f:34:a6:95:89:2a:05:d8:
                    65:9f:bc:cb:ca:6e:b7:61:0e:34:eb:f4:df:e5:36:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:D7:64:BE:B4:85:0B:7F:09:E3:6C:24:8B:05:43:9B:40:8E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/545871c5-7540-387b-8df2-75adcce7b17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.149.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:55:87:41:cb:46:4b:53:22:8b:3b:f6:39:00:ff:04:29:c4:
         ad:18:cd:52:42:18:da:ab:a6:18:1b:e9:c5:38:6b:44:d5:ad:
         e6:c8:18:a1:e6:95:38:9e:0b:d8:31:76:9c:f8:89:39:52:c0:
         a1:89:8a:cd:06:82:32:a9:0c:a0:de:d4:1a:88:5a:ab:76:a9:
         53:96:04:e8:b1:11:25:ad:c1:ac:db:bc:9e:df:de:36:b6:84:
         51:ee:66:4b:29:d5:dc:1d:97:fc:29:d6:7d:1b:31:cb:76:6a:
         78:25:c7:52:5a:e6:a9:90:c2:8c:c8:a1:f7:b4:77:e1:ab:91:
         91:13:a6:d6:f7:48:f8:07:df:e1:51:0d:56:d6:29:a9:5a:a8:
         0f:90:39:86:cc:42:a3:88:55:09:93:b3:6c:3f:8e:ef:ac:0f:
         2d:c0:9d:2c:ef:a7:95:44:2e:c2:09:85:88:be:a1:2e:64:25:
         2a:04:e3:d7:64:73:6d:28:0a:70:0e:3a:ca:f9:6a:5c:28:8e:
         22:a3:4b:96:0e:2e:c5:28:23:e6:fd:62:7b:80:08:5e:52:c2:
         ff:7a:a3:e0:e4:c8:3b:a9:5a:1e:4e:3f:3d:f8:09:fd:90:7e:
         a4:ac:91:07:35:31:63:73:e7:07:66:06:0f:e4:88:8d:7b:da:
         ec:d0:e5:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2gweF/cUXgtqH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MDgyMTEwMjY0MVoXDTI1MTExOTExMjY0MVowLzEtMCsGA1UEAxMk
NmJhYmM2NTYtY2ZkOC00MTExLTg5NDktMTYwYThhMDhiOTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CR9k6x1fxE3eqHCKi5CXT5YzSVDlYLKQSue
Mb2J2FOtNp4RZPFHLcAHKGPnETo5/hMIdjkU7Ki89QZgsqNULadgiB2v2yvbxy9m
VUE+WIit2LmqOEGuc2WBNTmjOhxD9vprWobuT81fQyx9FrYfVxFuMaPotiinwWS/
I+2lhpd2umiQuz1Go1SdDk1UHeAqMCGKq5em6u87B1wyUKQZGJG17/DjQNMXxfzE
27j/1nHRYRnOW7p7yiIX/Wj7vY1D1D2FMGUepfVPP2rMJZ6XmVtFLcnzCy1uferX
YpfnmOCdG9EFhz+VDzSmlYkqBdhln7zLym63YQ406/Tf5Tao7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPF12S+tIULfwnjbCSLBUObQI5LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTQ1ODcxYzUtNzU0MC0z
ODdiLThkZjItNzVhZGNjZTdiMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZUIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFVh0HLRktTIos79jkA/wQpxK0YzVJCGNqrphgb6cU4a0TVrebIGKHm
lTieC9gxdpz4iTlSwKGJis0GgjKpDKDe1BqIWqt2qVOWBOixESWtwazbvJ7f3ja2
hFHuZksp1dwdl/wp1n0bMct2anglx1Ja5qmQwozIofe0d+GrkZETptb3SPgH3+FR
DVbWKalaqA+QOYbMQqOIVQmTs2w/ju+sDy3AnSzvp5VELsIJhYi+oS5kJSoE49dk
c20oCnAOOsr5alwojiKjS5YOLsUoI+b9YnuACF5Swv96o+DkyDupWh5OPz34Cf2Q
fqSskQc1MWNz5wdmBg/kiI172uzQ5bM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:48 2025 by rpki-client