Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c9920b43-93ea-322c-82a8-550e3be2f967.roa
File:                     c9920b43-93ea-322c-82a8-550e3be2f967.roa (raw, json)
Hash identifier:          sXoxBe5Z0BRCbzgmM6u/4jHwPpWMoo0wIAj0JpzGeKI=
Subject key identifier:   B7:02:F7:AB:51:45:A4:27:F5:36:5C:3E:57:1A:BE:5F:D4:60:A4:9B
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F6292C46AEE626F0B246EB300
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c9920b43-93ea-322c-82a8-550e3be2f967.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     3354
IP address blocks:        129.117.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c4:6a:ee:62:6f:0b:24:6e:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=711c2194-9f55-4278-a77f-161e559f1a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6a:9c:8e:4d:92:0f:e9:2e:ae:2d:66:2f:a9:
                    ed:b1:49:2f:c5:f0:e6:5d:ff:2b:af:e1:5b:03:2b:
                    cd:53:60:b3:9f:5e:1b:63:36:53:e9:6b:8a:d8:3f:
                    66:dc:a4:5c:40:89:0a:e1:1e:48:86:9b:57:02:fd:
                    6c:6c:6f:d5:4c:ce:18:2a:88:86:03:3b:d8:99:31:
                    39:ad:72:8e:ca:19:a6:af:ac:e6:fd:43:bf:9c:e0:
                    48:12:f2:23:65:80:52:05:57:ee:a3:2b:5f:11:03:
                    6c:6e:7c:20:b4:8c:a0:86:72:56:16:1a:b9:06:b7:
                    24:a7:86:cc:a4:bc:a5:fe:ec:a0:46:2c:a5:7f:f0:
                    e2:8d:df:1a:38:4f:a3:42:1d:17:b9:84:60:cc:c7:
                    c3:59:08:46:f7:88:28:3f:2f:4c:f6:44:2f:0f:86:
                    7e:cd:93:83:7a:99:fc:87:bf:bb:7e:32:38:d1:97:
                    bf:66:10:28:3b:0e:31:44:e4:1b:75:0e:53:c4:73:
                    76:89:97:0d:95:4e:7e:fb:a0:be:1e:7d:7c:05:c8:
                    2f:f9:de:23:6b:1e:03:b7:36:a2:c0:70:e4:4b:d8:
                    2b:27:0d:c7:ff:c0:91:b0:e9:66:5c:01:2e:04:13:
                    17:fb:62:b6:1e:27:57:84:e0:f2:83:9b:ff:fa:c8:
                    ac:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:02:F7:AB:51:45:A4:27:F5:36:5C:3E:57:1A:BE:5F:D4:60:A4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/c9920b43-93ea-322c-82a8-550e3be2f967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:2e:4d:28:8c:55:b0:f8:ae:18:f1:ad:f8:40:07:3b:09:78:
         7f:a7:88:3a:a0:c2:a8:42:6d:91:1c:95:02:75:52:39:fb:a2:
         43:61:23:c1:ce:b2:a7:cc:56:08:9e:ab:af:bc:b5:ed:41:fa:
         2c:e2:69:45:17:bb:c2:fc:57:30:27:d8:f8:f2:6f:b9:ee:5d:
         bd:2f:41:08:8b:0a:80:f0:36:bc:f4:2f:6f:ca:1a:75:fc:94:
         4d:69:25:04:e7:29:a2:9c:59:44:81:c4:b7:67:fe:9b:06:f7:
         12:1e:83:9a:35:ec:97:43:cd:84:db:02:34:07:24:36:2b:dd:
         74:58:e5:dd:09:27:53:f7:ed:9e:c7:2a:93:8c:61:b6:a9:fd:
         c0:1e:8b:c3:cf:d3:04:01:9c:96:4e:de:13:f4:23:4e:37:06:
         4e:47:fc:6d:04:4e:83:55:70:2a:f3:03:f8:79:11:97:d9:22:
         6c:48:c0:2a:75:30:38:0b:45:1a:c8:bb:89:62:e8:21:6d:75:
         17:dd:d1:fd:a1:3e:82:55:ab:a4:3c:0e:a2:9b:13:3d:29:a1:
         77:c9:aa:79:47:b8:68:07:1a:37:ff:f7:76:2c:56:e5:7e:e9:
         f2:5e:06:ea:d2:99:ae:a2:00:70:d3:41:de:05:f8:76:d7:a6:
         16:ba:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:12:35 2026 by rpki-client