Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
File:                     196c177a-e3f1-3adb-b77a-c204c94c485f.roa (raw, json)
Hash identifier:          25YIVsfeubXuU62U5pFTu8WhcpJdAqRbPs8lVO6alVU=
Subject key identifier:   75:17:4F:83:A6:B1:35:FC:B4:F1:1C:0A:B3:4F:96:3D:28:BB:FC:E9
Certificate issuer:       /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial:       010D0C9F4328584BA932689E355B9B35F3171680
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     6461
IP address blocks:        129.35.160.0/20 maxlen: 24
                          170.225.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:68:9e:35:5b:9b:35:f3:17:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=66a51e9a-68cf-4c73-b48f-0a3620a44fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:5d:3b:7b:8c:5d:5f:56:2e:db:ad:8f:14:
                    9f:aa:52:cb:4a:43:e9:88:ff:26:f6:6f:1e:e0:d2:
                    80:79:91:2f:93:35:fa:98:85:63:b4:31:9e:cd:4d:
                    d6:8b:1f:85:4e:c5:ea:15:81:ad:90:3b:7d:f4:2b:
                    b3:49:2a:c9:8c:a6:09:a4:fe:e6:d0:e2:c1:d4:03:
                    05:58:3d:5d:f8:c6:d5:68:2c:40:de:39:f5:f5:63:
                    bd:93:60:bd:68:f9:71:80:3d:31:de:90:ed:5b:e9:
                    e2:bf:4b:94:71:31:9b:fe:05:56:f0:dc:79:45:69:
                    25:fd:64:40:9f:d9:c2:c7:ae:e9:11:7f:10:22:f5:
                    8c:14:0b:65:a6:56:db:f6:30:b4:cb:37:05:22:d4:
                    11:1a:01:39:00:9f:08:64:58:1f:4e:c1:93:96:04:
                    ec:6a:db:bd:e9:17:9c:33:d5:83:f8:1d:ea:ba:50:
                    0c:88:ea:a7:46:4c:69:1f:8c:a9:af:4a:24:d2:49:
                    e1:e3:e2:23:8e:50:d7:d3:d1:54:13:53:76:c6:b4:
                    42:22:67:02:54:56:53:7c:d6:cc:18:b7:6b:89:91:
                    93:a8:bc:40:ef:eb:76:94:00:a7:7c:2e:91:bd:0f:
                    a2:45:51:61:64:12:08:b7:bd:a9:2b:f3:1f:3c:7e:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:4F:83:A6:B1:35:FC:B4:F1:1C:0A:B3:4F:96:3D:28:BB:FC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.35.160.0/20
                  170.225.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:41:72:9f:30:38:fe:cf:aa:81:f9:63:5f:66:3f:90:da:2d:
         33:a3:08:c3:06:90:0d:26:01:d2:49:63:17:ed:b4:69:21:fa:
         48:bd:62:5b:2a:e5:c1:59:07:17:83:d5:e0:0f:90:50:21:d3:
         c5:f8:f5:aa:00:ed:f7:94:37:97:d9:0d:9e:c6:1a:31:eb:96:
         ed:f6:79:3d:1b:6a:dc:8b:05:ac:71:56:a6:e6:4a:dd:7b:07:
         79:fb:41:2b:cd:67:b2:33:bc:17:ba:16:92:fe:6b:30:d5:3f:
         0f:0c:c6:f1:99:cf:0e:48:10:66:9a:bf:ab:1f:cc:d7:29:3f:
         69:85:fd:c6:b3:8e:e8:29:a5:7e:5a:0f:df:b5:ce:89:f1:81:
         39:b0:87:8a:be:1a:13:e2:b1:ae:7f:f0:63:06:12:13:35:ea:
         25:e7:1a:a1:09:8d:c6:5b:cb:c8:b0:d5:46:42:d7:b9:2b:8d:
         f6:de:c1:7e:cc:22:57:0b:c8:fc:e4:aa:a4:fe:44:1b:f3:58:
         b5:53:d5:51:36:00:0b:07:07:18:ce:cf:12:24:0f:34:21:6e:
         48:a0:34:3b:e8:f8:d2:24:7f:59:45:e1:97:ce:72:ef:8d:39:
         97:6e:6f:e7:46:49:1b:16:63:4d:a1:d2:2a:27:4b:37:23:3f:
         e7:eb:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:33:16 2025 by rpki-client