Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f81f1976-7b9c-3360-83ea-4fcc09eb7ccd.roa
File:                     f81f1976-7b9c-3360-83ea-4fcc09eb7ccd.roa (raw, json)
Hash identifier:          urN+TeAOnWjCdidO4cuZln4GaZO9/rj0g4nWki/9SdI=
Subject key identifier:   66:D5:9F:B5:0D:9A:DA:13:EB:B9:7C:1C:25:66:64:56:AC:97:F9:7D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B2A2C3EE17EF94E45E5FB2320
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f81f1976-7b9c-3360-83ea-4fcc09eb7ccd.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     2914
IP address blocks:        129.250.43.192/26 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:3e:e1:7e:f9:4e:45:e5:fb:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=2ac403f4-b8c4-4f8e-ae6c-04316581e0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:26:13:c4:62:eb:81:b5:7a:0f:d9:59:76:
                    e8:25:0e:53:93:11:5a:a2:77:80:df:b7:73:84:95:
                    37:c7:6f:ed:56:5d:2b:96:26:ea:c8:dc:75:66:8e:
                    d9:97:5f:0a:ae:4b:d2:9c:71:d3:ca:a4:19:5f:fd:
                    92:35:85:83:19:0d:3d:78:0f:fb:51:ab:73:04:dd:
                    7e:38:a1:a5:04:26:d1:88:0f:3f:69:25:40:7a:f5:
                    e9:1b:7b:17:23:41:c5:41:f9:b9:4c:60:31:26:e7:
                    01:0b:e7:c2:e5:91:65:0d:ea:24:e6:b1:02:8d:ce:
                    a7:96:a2:a2:21:51:f4:9d:15:b1:b2:86:05:bb:73:
                    5a:99:57:2b:7e:1f:ee:de:17:f4:52:a4:15:1e:25:
                    96:93:05:f8:12:9e:f6:6d:bf:6f:39:ee:a6:84:50:
                    e6:7b:40:68:e8:97:bb:5b:b2:b9:dd:f8:c9:a3:90:
                    e4:18:fb:e5:2f:1e:26:32:98:2a:b4:d4:89:ec:ec:
                    5d:c3:3f:15:45:09:4f:74:22:e2:35:a4:af:e7:e2:
                    74:86:95:75:f3:93:ca:20:52:32:b9:ea:28:9f:60:
                    75:1c:0b:34:6e:a0:92:a2:22:85:e9:3f:3e:34:c3:
                    32:4e:0e:37:48:11:48:2c:d2:72:c4:67:2f:bb:52:
                    c0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:9F:B5:0D:9A:DA:13:EB:B9:7C:1C:25:66:64:56:AC:97:F9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f81f1976-7b9c-3360-83ea-4fcc09eb7ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.43.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:39:0a:67:27:c8:9e:e9:de:26:0b:24:bc:77:ca:9a:13:a8:
         97:fc:97:a1:93:75:73:31:63:5d:0d:41:7b:46:39:ed:73:07:
         0e:a7:7c:cc:e6:ef:47:ad:69:98:7c:e7:4a:05:97:84:6b:f7:
         49:fc:5f:08:73:f4:c8:1c:21:e2:37:3e:06:01:e4:28:df:33:
         02:6a:c4:a3:48:be:a1:44:bb:c0:95:63:89:0b:03:d7:06:00:
         e7:3e:7c:4c:4d:81:fb:8d:4b:83:30:02:1d:4e:97:aa:53:c9:
         9e:4f:1f:bc:b3:f9:cb:28:a1:16:56:24:51:10:9c:9f:d9:43:
         b4:75:1d:b0:2e:cd:2d:22:01:36:cb:42:86:08:95:0f:20:05:
         20:7a:32:d0:ed:be:33:a3:1d:29:ec:70:d2:ba:17:92:9b:3b:
         59:37:d2:5b:ff:78:8e:6c:cc:bd:d6:6a:4d:67:47:62:77:6f:
         96:26:37:ea:a3:6b:78:ef:63:93:fc:01:c0:8f:19:32:da:f3:
         f4:b2:24:27:11:75:30:a3:de:bc:51:7a:c5:ac:1d:2f:6b:33:
         31:69:4a:f4:de:a0:ef:ab:c3:f8:65:d1:3a:e1:b3:0a:85:09:
         b7:13:a7:7f:d0:53:6a:c9:82:ca:6b:ba:ac:a8:bd:28:e5:d4:
         ff:8e:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:55:25 2025 by rpki-client