Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c601f29a-90d2-34be-a57e-6fecb12eb71d.roa
File:                     c601f29a-90d2-34be-a57e-6fecb12eb71d.roa (raw, json)
Hash identifier:          WHJ9FqRW+1dgNG0AkOrE88z569o0iwD1JbxtyjathNM=
Subject key identifier:   68:DF:F2:CF:AC:41:52:7F:B1:55:87:3A:DF:22:33:32:91:CD:E1:76
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6995C18847EC8FEB0B3F5C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c601f29a-90d2-34be-a57e-6fecb12eb71d.roa
Signing time:             Mon 18 Aug 2025 20:05:41 +0000
ROA not before:           Mon 18 Aug 2025 20:05:41 +0000
ROA not after:            Sun 16 Nov 2025 21:05:41 +0000
asID:                     31898
IP address blocks:        129.213.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:99:5c:18:84:7e:c8:fe:b0:b3:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 20:05:41 2025 GMT
            Not After : Nov 16 21:05:41 2025 GMT
        Subject: CN=2fb353f9-dc1b-4c1a-881b-7c1bc935f64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ab:22:99:9e:90:3f:4b:97:b9:49:46:05:d7:
                    ed:81:01:1e:93:fc:45:b4:d6:c0:37:2b:4c:0d:b7:
                    9b:bd:b8:cc:61:c8:14:1f:3d:16:55:2c:8b:31:6b:
                    25:6f:e0:6c:9a:1c:de:c2:96:f3:2f:43:3b:4b:15:
                    a6:23:49:47:f4:f7:cc:da:a5:39:62:fc:39:1a:e4:
                    ac:73:6b:c8:e8:06:74:99:5d:ca:9e:97:94:d8:b7:
                    36:be:c6:75:ea:45:75:6c:ff:df:6b:cf:b6:e5:31:
                    50:99:66:1d:94:e1:9d:86:01:76:e4:85:b2:ad:57:
                    cb:ce:0f:e2:3e:18:6d:31:c1:25:1e:62:9c:96:16:
                    ad:7c:84:c9:de:03:59:59:2d:c8:cd:46:48:e6:b0:
                    fc:8c:8a:b3:b3:61:b4:e3:77:da:b4:b8:97:2a:86:
                    9f:a7:f6:b5:04:d1:3c:ca:03:9d:6e:fb:fa:dc:e6:
                    95:be:e1:d6:e5:6f:7e:d3:11:91:c5:79:2b:dd:dd:
                    a8:25:df:ea:88:e1:be:d1:f9:07:ab:c3:08:7c:30:
                    1b:a1:8a:79:b9:f5:d2:96:39:df:25:d7:37:7c:05:
                    32:60:e0:07:cf:3e:3d:96:03:6a:02:74:97:64:76:
                    70:22:7a:19:7b:58:7a:d5:88:49:07:62:88:9a:26:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:F2:CF:AC:41:52:7F:B1:55:87:3A:DF:22:33:32:91:CD:E1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c601f29a-90d2-34be-a57e-6fecb12eb71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5e:eb:ae:46:2c:ab:3c:d2:e0:68:7b:83:56:b1:cb:42:a2:
         b8:62:f9:df:f9:29:40:be:ef:3c:7d:94:24:9a:45:78:db:1a:
         e5:11:71:80:bf:fd:bd:bf:77:fd:96:90:41:bf:20:21:d7:39:
         63:0b:b2:9e:cb:94:a0:a4:08:f2:a4:b3:96:65:b0:f7:8f:5d:
         22:af:08:4b:90:8a:41:87:a4:07:90:2b:7b:90:31:de:ea:6a:
         36:df:46:06:7e:da:af:ee:3f:35:72:13:df:2d:92:bf:ac:b6:
         dc:73:6c:ee:64:5b:c8:b9:cd:17:39:3e:2a:b2:6e:cd:5b:23:
         47:24:ff:2f:7b:10:c5:55:38:9a:6a:aa:9b:b4:aa:11:c0:43:
         8e:1a:2f:07:97:41:71:de:06:2d:00:f4:c0:ed:e1:72:b6:2f:
         7e:2c:b6:ca:21:ef:20:9b:36:c4:69:ff:2a:ba:b7:7a:54:0b:
         fa:df:9e:dd:31:45:f5:26:b5:0e:dd:13:a3:99:af:8e:16:da:
         5d:c1:16:b1:b3:01:72:d0:57:c0:37:f5:99:a9:ed:35:88:98:
         a4:b2:38:d9:d1:06:1f:e0:fa:a4:6a:e2:c2:a5:ae:52:37:18:
         53:d0:a2:7c:ef:55:d1:4f:07:45:e3:89:60:2c:12:46:f7:26:
         41:53:33:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:42:48 2025 by rpki-client