Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56cf0cd7-07f6-3faa-8ea0-3295172c0ed6.roa
File:                     56cf0cd7-07f6-3faa-8ea0-3295172c0ed6.roa (raw, json)
Hash identifier:          UhZ9iIqUTjF95wAn6vxItUhggIYlWdNmsGmldDBCeh0=
Subject key identifier:   C6:77:A6:87:83:27:77:62:2C:04:76:C4:13:BF:B4:55:E4:03:B7:C7
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E7E95085F552171C78C0B9660
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56cf0cd7-07f6-3faa-8ea0-3295172c0ed6.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        129.157.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:08:5f:55:21:71:c7:8c:0b:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=bb2f127e-584b-4f7a-8606-f32b106e6bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:0a:f2:24:9e:e7:66:e8:d9:57:65:bb:5f:
                    1e:eb:86:89:88:93:ab:1d:3b:81:de:2e:93:79:e9:
                    61:8d:bd:20:90:7a:bc:06:8f:ac:a4:d9:cf:aa:49:
                    e4:ca:74:8f:40:65:4e:e0:e7:b4:4d:11:81:1b:8f:
                    c6:d9:80:7f:5d:c5:6e:6f:2b:c4:5a:07:a8:5f:51:
                    b9:96:16:ba:72:28:1c:78:a6:22:a3:16:4e:3d:c0:
                    a9:c7:79:f9:03:2c:c3:82:93:da:11:25:0f:d4:2f:
                    b7:ca:d5:56:f1:d0:dd:60:f7:4e:7c:2e:7a:8f:c0:
                    82:f0:17:4c:b9:d8:f7:f0:a1:52:35:89:fe:3e:ca:
                    40:7c:ee:54:8d:50:d7:3f:17:01:c1:42:f3:8a:13:
                    12:50:44:8a:b4:86:b4:f5:0f:1e:b5:26:a1:c3:32:
                    78:2d:95:86:c8:37:ec:18:9f:17:cb:b9:84:7b:dc:
                    cd:2c:ed:a9:03:b9:0b:eb:16:67:b5:1e:99:f5:a3:
                    9f:80:cc:4e:a0:ff:d6:9a:b6:79:cb:8d:20:eb:dc:
                    78:66:d9:80:28:82:35:5b:ed:b2:60:ce:a6:e9:55:
                    d6:69:ff:25:61:ed:76:a5:8a:c9:25:35:9e:c9:36:
                    98:1b:1a:94:50:f5:66:91:82:c3:51:66:59:e1:33:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:A6:87:83:27:77:62:2C:04:76:C4:13:BF:B4:55:E4:03:B7:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/56cf0cd7-07f6-3faa-8ea0-3295172c0ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.157.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:af:1d:1f:79:e5:98:67:a1:73:51:14:99:84:b9:c8:96:0b:
         80:cc:15:6c:3a:4f:c9:6c:02:c6:0d:ea:d9:22:14:ff:66:9d:
         59:3f:dc:fb:c0:a0:cf:62:7c:16:cf:56:11:14:73:02:3e:a2:
         4b:de:e6:88:fc:bc:39:04:6f:96:b8:71:ca:d3:aa:e1:64:1c:
         c9:d9:2d:69:bc:43:54:7d:e8:0b:a2:41:05:f1:4b:6f:65:b2:
         7d:49:cf:06:ec:6c:f7:66:fc:19:a5:2f:7b:68:02:0e:7f:46:
         7c:1e:fc:39:4d:6b:e6:30:1e:a8:29:2a:2f:bd:08:69:f7:13:
         cf:09:14:f0:cf:81:fc:fe:34:30:60:35:aa:49:86:a9:73:9f:
         ef:a5:c4:08:49:30:4f:30:3e:7c:ca:60:8f:5f:ea:52:18:fe:
         a6:54:36:80:0f:f2:87:1e:30:08:f1:a0:70:ba:71:b7:da:2e:
         5f:bc:91:bc:0e:2f:8f:92:68:a2:55:f9:8e:9a:af:8f:ae:8b:
         a0:a4:dc:98:63:52:3d:c7:a9:56:b9:11:80:b0:94:aa:38:3e:
         bd:bd:27:cc:6c:54:19:0b:a6:95:9b:92:01:c7:4a:22:a4:4d:
         db:fc:aa:e4:f7:af:0d:a8:cf:44:27:a9:1e:b6:90:fc:7e:53:
         42:3f:03:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQhfVSFxx4wLlmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
YmIyZjEyN2UtNTg0Yi00ZjdhLTg2MDYtZjMyYjEwNmU2YmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07oK8iSe52bo2Vdlu18e64aJiJOrHTuB3i6T
eelhjb0gkHq8Bo+spNnPqknkynSPQGVO4Oe0TRGBG4/G2YB/XcVubyvEWgeoX1G5
lha6cigceKYioxZOPcCpx3n5AyzDgpPaESUP1C+3ytVW8dDdYPdOfC56j8CC8BdM
udj38KFSNYn+PspAfO5UjVDXPxcBwULzihMSUESKtIa09Q8etSahwzJ4LZWGyDfs
GJ8Xy7mEe9zNLO2pA7kL6xZntR6Z9aOfgMxOoP/WmrZ5y40g69x4ZtmAKII1W+2y
YM6m6VXWaf8lYe12pYrJJTWeyTaYGxqUUPVmkYLDUWZZ4TNVfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZ3poeDJ3diLAR2xBO/tFXkA7fHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTZjZjBjZDctMDdmNi0z
ZmFhLThlYTAtMzI5NTE3MmMwZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZ15MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2vHR955ZhnoXNRFJmEuciWC4DMFWw6T8lsAsYN6tkiFP9mnVk/3PvA
oM9ifBbPVhEUcwI+okve5oj8vDkEb5a4ccrTquFkHMnZLWm8Q1R96AuiQQXxS29l
sn1JzwbsbPdm/BmlL3toAg5/Rnwe/DlNa+YwHqgpKi+9CGn3E88JFPDPgfz+NDBg
NapJhqlzn++lxAhJME8wPnzKYI9f6lIY/qZUNoAP8oceMAjxoHC6cbfaLl+8kbwO
L4+SaKJV+Y6ar4+ui6Ck3JhjUj3HqVa5EYCwlKo4Pr29J8xsVBkLppWbkgHHSiKk
Tdv8quT3rw2oz0QnqR62kPx+U0I/A0g=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:39 2026 by rpki-client