Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa
File:                     d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa (raw, json)
Hash identifier:          LDHhqH+ax9kDk3Dq9ovLGp65jlLNfYhFbaN5rbiMSQo=
Subject key identifier:   E1:29:DF:C7:1A:12:2E:7D:48:29:53:53:C8:11:F0:EE:E2:A8:2F:A6
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584BBA104CF1884E5A2DAB909540
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     397763
IP address blocks:        129.224.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:4c:f1:88:4e:5a:2d:ab:90:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=4b12e436-fc93-47fc-acad-1d60e603286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:49:f9:0c:af:0e:fd:e1:25:91:27:8b:dc:
                    d1:55:77:41:4f:f9:4c:90:03:9e:c0:14:25:df:28:
                    7e:e6:b1:4c:9c:50:f6:a9:47:ce:d5:24:98:43:19:
                    b1:0a:82:1f:f7:be:8a:39:2c:4f:c5:72:01:3a:70:
                    ae:58:b1:0e:3a:f7:69:a4:9a:da:83:da:3e:4c:30:
                    29:51:52:9d:f9:df:a0:68:c4:bb:2b:8b:47:4c:da:
                    d8:cd:76:45:6e:58:52:62:31:be:4e:5c:28:84:d0:
                    f2:49:6e:f9:cb:0b:7c:77:5d:d3:32:d4:cc:cd:ae:
                    eb:3c:b0:95:48:87:69:13:b5:52:89:d3:0c:69:03:
                    13:fd:58:0f:2a:a1:cc:b0:1e:d6:06:00:54:2a:17:
                    e3:fe:57:70:06:3c:74:74:6d:23:2e:3b:27:70:1e:
                    09:df:7e:af:33:fe:cd:92:cc:39:5c:3a:a2:f9:f6:
                    9c:4a:1e:29:80:3d:fa:25:58:8d:1b:0b:49:a7:d8:
                    75:20:11:cb:f3:10:fd:ea:f7:87:bd:34:bc:be:fa:
                    cf:d2:9a:b1:19:a5:72:02:bc:db:6c:70:12:02:0a:
                    78:f6:60:8a:27:d2:70:b1:cc:88:37:cc:2e:b6:bc:
                    44:43:56:2d:37:7e:a8:1f:0f:69:f2:2e:89:07:33:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:29:DF:C7:1A:12:2E:7D:48:29:53:53:C8:11:F0:EE:E2:A8:2F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.224.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:0b:7a:6f:35:78:66:c7:27:4e:9c:4d:fa:71:aa:10:c8:c7:
         96:66:45:57:64:3a:14:ae:d5:35:5f:65:40:a1:3d:c4:70:2a:
         bd:08:84:47:4c:fa:e0:90:1f:17:63:45:37:f9:f9:c0:6f:c3:
         aa:d3:19:0d:24:2e:b6:e5:e6:ec:55:3c:7c:7a:95:62:85:56:
         2d:da:d4:e9:0e:f4:ea:ea:7f:94:b2:fe:63:0a:31:30:55:a1:
         d6:52:e2:b2:0e:c8:13:2b:70:37:a7:70:b3:a8:ac:bf:3f:ec:
         ee:d0:53:24:fa:54:68:db:a2:ba:8e:f7:c3:fc:d8:36:58:58:
         12:1b:d3:36:70:34:e9:a4:8e:9e:04:b3:73:d0:f8:0e:2d:fd:
         63:60:63:89:99:df:6d:08:b2:79:0d:7d:01:d7:9a:9f:f6:f4:
         da:65:e8:8a:31:18:db:a7:2e:6e:51:a6:1b:02:7c:6f:c1:37:
         eb:8f:c3:22:d9:82:cf:13:a5:5c:50:25:22:83:f1:4d:e4:dd:
         ef:18:bb:54:eb:ee:f8:8a:34:66:ab:9e:fe:26:74:af:75:02:
         cd:e7:a6:11:df:57:a6:22:7e:53:14:c7:a2:23:56:43:6c:43:
         93:ae:55:c2:50:38:76:7c:ea:f4:e0:8e:7b:ae:39:07:32:a4:
         dd:a4:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:18:26 2025 by rpki-client