Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa
File:                     06ec3548-40e7-370d-bd70-b74b5c67021e.roa (raw, json)
Hash identifier:          yel0BkxmbD2mjPWUPHJEIC2fnRnGR+MKGTUaIjCyjVo=
Subject key identifier:   6D:BC:50:D6:74:FD:63:FB:21:82:4B:D0:51:BA:CB:F9:23:4F:80:BF
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584BBFA592742FE93AEFC0FCE910
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        170.176.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:92:74:2f:e9:3a:ef:c0:fc:e9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=add8bebd-414d-43c0-8c0d-232a052471c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:47:48:ab:f3:c0:36:fa:55:bd:9f:22:b7:
                    44:3b:ac:d1:bc:fa:3d:96:dc:85:a0:2b:ac:0f:a7:
                    d8:bd:5b:18:56:83:d5:a9:89:14:20:e3:89:61:ce:
                    09:f7:79:fc:dc:3e:2c:f5:7d:28:fd:35:82:ef:80:
                    6f:af:41:79:c9:98:e7:d6:bd:e6:2f:68:a6:3f:d2:
                    e0:99:90:e5:61:5e:95:6b:5e:e3:2f:4d:f9:e4:49:
                    44:f8:0b:16:9e:a2:ec:ce:7a:95:28:4c:17:b5:d6:
                    8a:6a:bf:d6:c1:67:cc:80:e1:ad:a3:ec:f8:ad:c8:
                    55:d2:31:3a:f5:f5:40:06:73:e5:b0:1a:ae:de:21:
                    7d:4c:28:c6:0c:8a:30:c0:c9:3c:29:9c:b4:70:50:
                    74:54:7e:23:41:e8:20:c8:03:b3:12:9e:bc:51:51:
                    e2:d1:d9:83:6a:a7:f2:ff:f4:23:7a:f2:2b:93:b5:
                    45:e3:8e:45:fd:84:83:dc:71:06:a9:f2:1b:08:5b:
                    7a:01:f8:09:57:4f:50:71:42:d5:d3:ee:72:d1:99:
                    c7:43:df:d2:cd:62:0d:b3:91:dd:b1:11:36:59:22:
                    26:39:bf:bd:6b:47:16:35:62:b9:f1:58:3e:e2:e3:
                    f4:51:6f:8b:40:07:bf:5c:e6:f6:cc:e2:b9:e2:e1:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:50:D6:74:FD:63:FB:21:82:4B:D0:51:BA:CB:F9:23:4F:80:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:a7:4f:86:fd:c2:63:29:8f:16:74:11:83:bc:8b:d4:27:
         89:12:0d:35:44:fa:08:72:37:47:74:9f:9d:91:16:e5:da:15:
         a2:8e:c8:e1:ba:eb:c0:1d:00:01:1d:88:8f:df:23:97:28:4b:
         d6:d5:ce:51:f5:57:84:bb:51:6a:ea:2e:6f:51:0c:bf:00:ec:
         b3:13:48:a9:c4:69:fa:b8:08:fd:3b:e4:65:d5:41:ef:24:54:
         df:61:86:c5:5a:ba:a9:c0:a7:36:91:a4:d4:f6:64:59:df:43:
         ec:20:e4:04:bb:de:ba:65:a9:82:3c:36:84:4d:a0:18:a1:ba:
         9c:5c:ca:20:1f:d1:af:a8:8f:ae:7b:28:da:02:e7:51:c7:71:
         26:53:14:22:d2:74:8a:b4:fa:b2:91:27:d0:eb:6b:6b:2b:10:
         8e:5d:ce:46:39:91:c3:73:ce:ef:bb:31:cb:d6:ee:b4:b0:1f:
         ca:bb:c7:47:ec:73:86:16:2d:d8:7e:92:56:68:d3:97:08:41:
         35:26:78:0f:9c:5b:d3:53:a6:f5:ee:42:0e:1e:ba:d4:8c:00:
         ed:e2:9d:e6:ee:17:5e:2a:75:a5:3f:2a:59:c4:1b:07:15:95:
         09:a8:0b:33:58:9d:11:4a:19:83:27:a2:eb:a9:15:e8:c1:53:
         86:06:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:45:55 2025 by rpki-client