Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
File:                     34cf4545-7377-3604-bfb9-15fe8de88b2e.roa (raw, json)
Hash identifier:          sG7GQvhdpBW4+h6UIYbKEvFcny8awFwdgN2n1DqwC04=
Subject key identifier:   94:69:EC:9A:D5:C2:A2:95:09:C6:2B:C4:DB:AE:63:8B:CC:B1:8F:AF
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584AAB265437D52C88EEE63E2180
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        129.41.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:54:37:d5:2c:88:ee:e6:3e:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=48d6f13f-160c-43e4-bb97-5bfab1441064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:f9:97:c3:40:4d:f2:5b:f0:3c:e7:1a:85:
                    97:e7:06:0e:fc:44:cd:d1:ed:ca:46:13:33:36:64:
                    1c:7b:1b:0e:49:f9:11:b8:4d:84:8c:3e:54:e7:52:
                    22:e9:84:98:45:de:b3:dc:1e:e4:bf:64:a1:0a:98:
                    74:f6:66:2c:bb:1a:30:e9:91:d7:eb:83:2a:c9:aa:
                    42:f5:ae:8a:75:74:80:08:33:b7:48:d1:69:65:9c:
                    02:18:14:d0:50:bc:fc:dc:d2:2c:26:07:53:25:4d:
                    de:c0:82:b9:7a:2c:96:2d:34:09:c6:0c:cb:8f:63:
                    6e:28:31:5b:ee:b7:7c:7f:bc:83:57:cf:14:ed:ed:
                    a3:c0:1f:d2:10:5b:8c:53:bd:f3:5e:80:02:07:b5:
                    f2:b3:5a:4b:8c:70:5c:dc:a0:5d:60:9b:6b:6f:fe:
                    2b:e1:30:9f:e3:0c:0f:cf:0c:9e:96:8c:bf:d0:39:
                    df:94:dc:19:da:33:72:d6:8d:5e:70:fb:5e:6a:a9:
                    f2:48:43:76:48:14:c8:6a:a8:87:b0:e9:35:17:40:
                    66:e0:95:92:09:10:c0:23:2c:05:79:46:2d:f1:3e:
                    ab:8e:49:d4:77:99:c8:72:69:c5:2c:c3:5b:dd:0d:
                    7c:40:a8:b5:d0:29:b7:c4:65:e5:25:85:74:e6:56:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:EC:9A:D5:C2:A2:95:09:C6:2B:C4:DB:AE:63:8B:CC:B1:8F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:60:3b:08:61:c8:46:85:59:fd:44:44:da:c9:f0:fb:8a:e9:
         0c:d8:92:34:92:94:0a:40:cf:9b:6a:62:c8:ba:7e:b0:d9:26:
         56:48:b0:71:de:d7:cf:6b:23:3a:a7:10:e2:0a:8d:80:ba:73:
         ee:b7:11:2d:4e:47:c7:70:e1:fd:9a:32:94:f8:92:88:30:23:
         97:06:c7:07:15:7f:2d:10:9a:bc:ab:47:dd:f1:b4:ac:70:55:
         70:b5:df:8c:d5:ed:d4:dc:83:bd:e6:93:10:02:d3:3f:9a:67:
         03:18:6e:1f:0c:57:60:a1:c2:b3:1c:6c:4e:61:55:c7:cb:50:
         f1:6b:70:b4:f1:94:81:71:df:c0:70:2b:12:c7:2c:73:bf:4e:
         e7:22:eb:fe:b9:3a:70:2b:98:77:2e:69:17:4b:3f:94:22:e5:
         e4:78:8b:47:a4:29:71:42:26:58:28:1c:e6:35:12:25:9f:d7:
         66:a8:f1:0c:e4:aa:5a:d7:31:74:d8:97:64:e1:76:32:7d:c8:
         5f:06:4a:87:24:da:40:3b:15:f4:e7:35:44:78:be:e6:2c:48:
         ae:da:eb:7b:80:6a:9a:1e:6d:49:62:0e:9f:c1:17:20:af:a2:
         e4:78:ec:de:21:d7:0b:32:98:bc:66:9e:c1:5b:17:cc:86:49:
         b3:e3:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:42 2025 by rpki-client