Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa
File:                     a708dc8a-229d-3054-8be8-f07bbc2a3158.roa (raw, json)
Hash identifier:          jElRjiDvJ8878WqppyHf10qha+bQ0fmlI5qL9mwRP6E=
Subject key identifier:   07:1E:E6:98:D9:AC:1A:A5:3C:43:60:94:D0:A8:7C:17:05:6D:66:C2
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584AAB265449C039B56ECA616B00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        129.41.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:54:49:c0:39:b5:6e:ca:61:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=04c677ef-f129-4bb8-9849-114fcedb0724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:f6:37:a3:1f:d6:ef:a1:b2:fe:d2:87:43:
                    c5:2e:30:f5:6c:99:c3:3c:56:38:a1:f8:39:43:28:
                    8d:8b:f0:58:71:4e:c4:e5:47:a6:be:10:5d:71:db:
                    6a:d4:8c:5f:96:7f:48:49:91:59:11:61:42:ad:86:
                    57:3e:64:b7:b8:f7:ae:ce:0b:44:cc:43:c9:da:67:
                    6d:53:32:f4:15:97:f4:4c:2f:71:08:6c:99:8a:ed:
                    6a:3a:b6:ca:ec:df:fb:18:f6:7e:d5:ac:f6:54:e4:
                    85:ab:54:0d:3e:bf:6b:88:70:61:8d:0c:27:0e:99:
                    4d:4e:d9:fb:34:b5:23:5e:f7:8c:fa:c4:39:b9:79:
                    17:eb:1d:86:de:76:6a:26:6f:3f:87:3b:b2:ea:e0:
                    18:e8:b9:63:55:db:14:32:d1:74:b3:26:fe:d4:7f:
                    a4:16:29:c8:b8:84:94:09:00:df:5d:e2:52:d7:be:
                    c2:2c:db:7f:a2:a8:c7:6b:9f:79:9b:c7:a0:09:c6:
                    21:cf:25:7f:26:c9:f7:f3:86:c4:fe:2f:2c:ad:d0:
                    a2:8c:fd:59:c5:0f:60:85:44:97:b1:a3:d6:a2:29:
                    38:2c:1a:c9:b7:70:34:fb:a8:d7:28:62:aa:b8:83:
                    1d:e4:72:33:83:9d:f3:93:8c:93:e0:b9:ee:ec:a1:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1E:E6:98:D9:AC:1A:A5:3C:43:60:94:D0:A8:7C:17:05:6D:66:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fa:68:82:7c:9d:28:13:1e:93:c9:ee:38:e4:5a:b5:17:93:
         8c:ea:61:90:1c:24:01:4c:ff:7d:35:1f:7a:6c:f8:01:ac:ee:
         36:46:b2:6b:68:5b:56:46:48:2a:54:33:f6:16:c8:3e:70:6e:
         cc:15:4d:10:5a:47:04:e2:f1:7f:93:6c:4f:2c:1a:9e:4a:63:
         ef:67:e6:3c:fe:5d:5c:08:72:ec:e1:7f:8e:36:6e:8a:d2:9f:
         7d:6a:24:d0:18:c0:0e:81:af:90:82:52:35:2e:93:4d:50:cc:
         94:41:ea:80:d1:2b:27:5e:f2:29:2b:b0:6b:12:91:99:8a:d8:
         c9:50:1b:e3:3b:6d:73:e2:b8:ce:30:1a:02:d8:52:1e:70:ab:
         53:5d:96:d1:5f:7d:7c:ea:70:2d:ea:45:71:80:5d:21:ec:9b:
         65:0a:60:77:3c:94:37:e1:d4:f8:09:6e:ec:ee:ca:f9:1a:71:
         c3:77:29:71:d0:bf:c3:dd:ba:0c:e0:62:44:91:f0:7c:89:ea:
         fd:b7:a4:a1:2d:ec:18:a2:6e:b1:f3:16:08:e0:28:13:15:fc:
         5c:30:ac:c3:c3:e5:e2:b7:f2:a2:b1:d3:36:29:bc:1e:52:b5:
         7c:80:1c:52:2f:af:62:40:49:2a:ed:c6:c8:b0:ea:e8:c6:03:
         26:fc:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:39 2025 by rpki-client