Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a0cd55f0-68aa-3536-a8d2-3ad7b3256ad6.roa
File:                     a0cd55f0-68aa-3536-a8d2-3ad7b3256ad6.roa (raw, json)
Hash identifier:          vA5cjRZ04kocb0jWlilbyW2Gry7Bz9bwIpcfw7D0bVU=
Subject key identifier:   8C:8C:D0:8E:1C:FB:2E:B3:3D:8E:37:9D:EB:1E:6B:0B:8C:8F:31:34
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584A8C5F6DFD5F6D1A56B4918C80
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a0cd55f0-68aa-3536-a8d2-3ad7b3256ad6.roa
Signing time:             Thu 17 Jul 2025 12:26:13 +0000
ROA not before:           Thu 17 Jul 2025 12:26:13 +0000
ROA not after:            Wed 15 Oct 2025 12:26:13 +0000
asID:                     153371
IP address blocks:        161.129.42.0/24 maxlen: 24
                          161.129.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:5f:6d:fd:5f:6d:1a:56:b4:91:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Jul 17 12:26:13 2025 GMT
            Not After : Oct 15 12:26:13 2025 GMT
        Subject: CN=a0f41e91-c25d-4b60-b8eb-3c698d8a31ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:fa:97:3e:18:af:00:29:bb:bb:69:8a:cf:
                    46:74:22:6c:13:ac:f6:e3:1c:bb:41:6b:ce:03:8f:
                    9e:07:32:b8:7c:ec:18:c2:8d:e6:ee:93:e9:09:b7:
                    b5:d2:07:04:a4:4c:eb:63:c0:d7:94:0f:de:d4:a4:
                    82:53:fc:36:4e:37:45:3b:c4:46:7b:5e:8a:da:74:
                    1a:39:2f:50:77:ec:18:91:eb:0d:5f:78:1b:fc:6d:
                    2b:9c:c4:80:e6:4c:c0:c4:d5:a0:66:e7:1f:99:ea:
                    c4:dd:0f:b4:1f:72:e3:5d:e4:35:e5:a7:09:ce:80:
                    ac:cf:ba:52:a8:74:33:26:f1:b7:5a:c1:f3:86:e4:
                    05:2b:d4:63:4e:33:de:5b:be:9f:f6:a6:c0:33:cd:
                    80:2c:62:1d:b8:22:a3:52:3d:27:76:6d:4b:20:55:
                    fc:e2:7a:0d:99:33:31:30:8b:70:28:81:7f:30:ad:
                    80:e4:13:39:dd:f4:7d:77:6e:02:55:01:dc:65:36:
                    b8:51:1b:9b:f1:54:4c:4c:cc:ab:14:7c:45:40:31:
                    28:a4:97:e4:d9:bb:17:bb:a5:bd:f7:a0:a8:6a:dd:
                    57:28:0d:52:d4:4e:42:8e:2f:d8:ae:32:7d:90:cf:
                    5f:c3:be:4e:22:7c:0c:0e:cd:b8:e2:0b:36:72:eb:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:D0:8E:1C:FB:2E:B3:3D:8E:37:9D:EB:1E:6B:0B:8C:8F:31:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a0cd55f0-68aa-3536-a8d2-3ad7b3256ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.42.0/24
                  161.129.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:57:11:1d:01:f0:62:d8:56:50:6a:ee:c4:f8:3d:a4:c8:e6:
         25:1a:da:45:16:eb:1b:bf:aa:4e:07:d8:7e:ca:e2:27:aa:ff:
         6c:ec:c6:30:2c:0a:2d:fe:39:aa:1d:88:f9:f7:82:ff:a3:85:
         2c:4a:bd:9e:e0:41:20:46:4a:3a:d3:be:1e:a9:65:cb:66:12:
         76:69:d1:db:d3:4f:63:e3:fa:74:0b:8e:f7:2a:00:f8:16:82:
         40:b6:7b:05:7d:c0:b8:bc:6f:8f:7f:16:0a:15:c8:a5:ba:b5:
         b5:b4:07:c5:9a:b0:ae:02:e5:f9:71:36:89:93:44:9e:03:a5:
         de:54:d3:92:b5:24:50:9d:1e:01:ac:6a:0b:41:a9:33:dc:59:
         96:43:15:13:57:dd:61:f8:24:db:74:db:1c:31:ce:d7:5b:1a:
         dd:66:3f:0e:35:65:c9:3c:ae:aa:7b:4b:aa:1c:c5:e9:e9:e8:
         32:e9:99:3e:30:0b:20:02:e0:30:0c:7c:3b:74:30:a1:60:61:
         48:5e:ee:64:7e:05:37:a6:42:46:f6:07:41:12:7e:98:0a:59:
         46:d8:c6:1c:d8:b1:18:8e:99:56:55:97:4a:0a:42:40:81:e7:
         57:c2:9f:36:e4:cc:53:cf:76:0f:37:b6:f6:ef:c9:3c:20:69:
         54:6d:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:11:20 2025 by rpki-client