Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/12305a42-e202-32e3-8dc5-140837587f88.roa
File:                     12305a42-e202-32e3-8dc5-140837587f88.roa (raw, json)
Hash identifier:          VYS89NHjYn8CSDnB/3FS9x3MM1um1/iCKxruAsMU8AI=
Subject key identifier:   5D:EA:BB:14:CD:AC:B6:83:1C:6D:9D:19:EA:82:0A:76:88:2E:71:18
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584A656147041353C8942EB2E300
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/12305a42-e202-32e3-8dc5-140837587f88.roa
Signing time:             Thu 03 Jul 2025 13:13:24 +0000
ROA not before:           Thu 03 Jul 2025 13:13:24 +0000
ROA not after:            Wed 01 Oct 2025 13:13:24 +0000
asID:                     16509
IP address blocks:        129.41.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:61:47:04:13:53:c8:94:2e:b2:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Jul  3 13:13:24 2025 GMT
            Not After : Oct  1 13:13:24 2025 GMT
        Subject: CN=c6a08eff-6406-44ee-8192-3b9acd9b160c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:13:d3:d7:87:b7:39:8e:42:ba:f7:a1:22:cc:
                    bf:ad:cc:e4:85:44:86:26:8f:03:08:1d:89:a4:ca:
                    47:26:cb:ee:16:47:69:02:5f:2a:21:6b:70:81:c3:
                    37:53:2b:c9:a5:35:c0:9a:ee:19:76:f0:35:be:f7:
                    0b:f3:75:d6:e6:94:f2:6e:7c:97:cd:18:e5:d3:87:
                    37:0a:8d:c7:8c:a3:cd:5d:eb:87:4e:ef:2b:28:2b:
                    12:be:73:4d:0f:88:b8:1a:35:c3:d4:e4:0c:83:d9:
                    b1:22:3c:25:9c:b2:98:38:51:21:16:31:ca:74:e8:
                    0c:19:55:e4:9b:25:f7:83:e3:8b:c2:6e:b4:1b:f3:
                    f1:c3:f5:a6:a4:2d:34:22:54:7b:12:50:d7:60:4f:
                    36:32:24:96:e0:e6:9d:73:f6:30:89:8e:bc:c8:fa:
                    9e:4c:e1:c6:b0:92:53:f3:cf:74:43:e5:92:d4:1e:
                    f3:67:2d:b3:47:f5:79:86:fe:a3:24:b1:0f:43:bd:
                    e5:ea:0a:01:55:17:ab:fa:53:24:33:23:89:56:c1:
                    12:98:b5:44:e6:4e:fe:12:3c:5a:c4:60:20:5a:d5:
                    c2:58:71:23:d3:c8:6b:d8:96:92:e8:4c:67:6c:42:
                    04:ff:5b:4e:40:2f:e9:58:aa:78:88:38:52:42:38:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:BB:14:CD:AC:B6:83:1C:6D:9D:19:EA:82:0A:76:88:2E:71:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/12305a42-e202-32e3-8dc5-140837587f88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0c:a4:28:29:28:66:98:aa:02:86:be:de:39:c3:ed:0c:ea:
         d3:37:a1:c6:86:11:4d:71:63:e2:cd:e8:21:43:c1:57:70:b6:
         3d:3c:7f:0b:64:ed:c3:86:10:0d:99:39:08:12:07:eb:cf:50:
         6a:47:f5:18:92:6d:bb:2c:43:ea:50:b9:d2:28:70:41:bc:9a:
         ed:e3:9e:d4:6a:c4:b7:ea:3e:c9:e4:5e:d6:72:9f:9e:70:55:
         99:ff:d8:27:3a:0a:9d:46:5d:b2:0f:1c:f9:f4:c0:b7:36:e6:
         40:63:79:f0:47:c4:e6:c4:83:29:bf:83:8a:34:40:91:89:31:
         89:ad:6b:ce:97:da:dc:95:61:29:ed:0f:18:05:fb:c0:57:ec:
         c8:90:f9:fc:32:7d:73:86:cb:a8:a7:60:ed:b4:49:9e:e0:a1:
         7b:24:72:dd:c4:e1:79:f1:d7:20:87:7e:79:c0:69:b4:e0:f7:
         69:f9:e7:e3:8f:31:74:b6:b2:47:00:a3:a0:82:52:d7:41:56:
         02:1a:b7:c6:ce:7e:82:b3:a4:a0:bc:4b:4e:4c:55:86:db:10:
         f9:d7:7d:80:bd:c3:d4:66:32:db:a2:cc:87:93:99:f5:88:5b:
         45:44:27:59:15:c9:3a:5e:c8:d5:2b:d2:6c:98:ce:0b:b1:7c:
         56:4d:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 01:25:29 2025 by rpki-client