Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/941ce426-208d-3260-8f83-6f860e9cc6b3.roa
File:                     941ce426-208d-3260-8f83-6f860e9cc6b3.roa (raw, json)
Hash identifier:          CggSIaH70DmAmIObsX2K3hKsfqLOSrhPQtwZB2bWzDk=
Subject key identifier:   D3:D1:2A:F4:6E:02:51:89:27:EF:94:4A:4C:0B:6C:E3:44:89:1E:1F
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AF8C13BEAC43008EC6DE24D90
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/941ce426-208d-3260-8f83-6f860e9cc6b3.roa
Signing time:             Mon 25 Aug 2025 08:10:35 +0000
ROA not before:           Mon 25 Aug 2025 08:10:35 +0000
ROA not after:            Sun 23 Nov 2025 09:10:35 +0000
asID:                     31898
IP address blocks:        129.213.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f8:c1:3b:ea:c4:30:08:ec:6d:e2:4d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 25 08:10:35 2025 GMT
            Not After : Nov 23 09:10:35 2025 GMT
        Subject: CN=c642a509-8222-4a6a-9327-25dd84e26826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:83:43:b2:78:60:aa:4b:4a:2c:3b:45:5c:
                    72:7c:ab:2a:4d:a5:b7:2e:56:2f:2d:38:29:81:96:
                    e8:f8:5e:49:be:20:f2:ca:7c:12:cb:e5:cc:c5:e9:
                    7a:e7:ad:ca:3a:e0:c5:3c:00:75:0d:89:cf:b9:f6:
                    34:89:b5:4d:90:68:a9:f0:bb:4b:a1:e9:8c:b2:42:
                    86:1e:0c:08:5a:3c:21:aa:31:01:15:f8:a2:f0:c8:
                    89:99:4f:1e:e1:5a:82:ca:0b:13:34:f3:e1:1a:52:
                    ed:08:3a:6d:f0:bc:61:3e:56:b6:67:2a:be:e6:1a:
                    9d:f8:b2:ff:55:3b:78:c1:c0:af:bd:f2:57:81:07:
                    b3:de:9d:10:4d:79:ab:55:e9:c2:f9:79:c3:9e:86:
                    86:d6:20:da:05:47:d4:38:53:7d:5f:f3:10:3e:9f:
                    bf:19:82:df:32:a7:f2:d3:d6:6d:17:45:ff:47:be:
                    84:cf:d0:40:24:4e:79:71:b5:8d:a9:4c:83:10:1b:
                    98:bd:28:a1:01:41:f0:11:85:6f:24:f7:05:47:6c:
                    d3:3d:6e:58:36:12:6b:a6:ab:6c:5e:07:61:74:07:
                    07:f7:de:2f:24:f5:e7:2f:68:7f:f4:bc:01:51:03:
                    f3:bd:82:e6:5f:e0:1b:7c:fa:a1:df:fa:55:c4:ea:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D1:2A:F4:6E:02:51:89:27:EF:94:4A:4C:0B:6C:E3:44:89:1E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/941ce426-208d-3260-8f83-6f860e9cc6b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:c9:bf:9f:9f:91:83:b7:ba:27:08:0d:7c:89:44:ee:bd:
         8d:6d:48:ff:87:e0:1f:69:23:70:58:78:0c:c6:8c:8b:64:bf:
         b4:0a:dc:51:1d:e1:b1:17:19:eb:63:27:25:9c:5c:58:19:42:
         28:d6:0f:3c:ab:f0:3e:de:3d:4a:0a:0a:4b:49:ed:3c:24:65:
         60:d2:2a:9c:a7:60:cb:07:ed:8e:8a:29:29:87:bc:3b:d3:7c:
         c0:e2:72:61:e4:2a:b4:f6:c0:c6:d8:56:f7:af:e6:54:04:a5:
         f6:49:8f:bd:be:b7:98:1e:3e:62:e4:d2:25:e7:da:a6:2c:12:
         78:4f:0e:30:8a:22:e7:62:53:b7:fa:68:d9:d8:40:d3:eb:e6:
         df:47:fb:cc:43:02:a0:14:de:81:8e:98:85:4b:06:93:32:c7:
         81:fe:0a:68:c0:78:97:9e:a4:35:4b:c8:06:3a:8d:be:7d:a1:
         10:6f:63:69:91:22:6d:c2:0f:e9:0c:e4:13:80:7f:42:a2:64:
         90:b1:bb:02:71:a0:af:7c:65:32:ca:76:f3:6e:bf:4a:ad:70:
         00:7b:c6:a9:4a:88:35:9a:db:d1:27:6c:8b:2c:46:b7:0b:da:
         69:ec:0a:f3:9f:ac:36:ea:bb:b5:c4:e8:23:e8:01:f9:a3:45:
         60:e7:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:04:22 2025 by rpki-client