Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa
File:                     c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json)
Hash identifier:          GKrQOe6j+PDbha0CjxkNH11wAG6vcZhYI9ghVFPwrZo=
Subject key identifier:   8F:1C:D2:7E:B4:42:BE:10:82:CA:19:9C:42:EE:2E:43:36:EB:6A:6A
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584AAB26547EDF301AA533FC4D00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        129.33.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:54:7e:df:30:1a:a5:33:fc:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=9ab9550e-5b90-4bdf-a3d5-dc3c733a7004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:c9:49:fa:81:a7:c6:fd:05:9e:95:a7:10:
                    1b:14:b8:db:56:2e:d7:89:3d:f1:ff:04:54:58:8f:
                    12:69:6c:61:70:ea:a7:37:63:f9:24:b1:79:fa:cc:
                    78:1d:78:82:9a:5a:7c:32:65:f6:c9:48:c9:06:04:
                    75:a1:6b:b8:3f:1b:b3:76:36:60:2d:9c:ee:ce:94:
                    b7:4a:87:4c:c8:83:8c:96:6f:a6:1e:b6:e2:36:d8:
                    cf:5c:a9:79:ce:14:63:e7:45:54:c5:64:dc:ff:5c:
                    94:99:2a:c4:2d:1b:da:2e:66:db:4c:5a:e4:d4:ca:
                    be:29:c6:65:ec:6a:dd:23:dd:95:50:5e:04:71:62:
                    f6:c4:c8:b0:bc:3a:5a:dd:61:f5:c9:ba:ab:1c:59:
                    90:1f:e1:48:b3:25:54:6a:5e:fc:0a:5b:fb:23:0a:
                    b5:c0:e9:4e:44:43:02:3a:d2:d7:c3:bc:2b:9f:4a:
                    da:3e:a1:16:03:a7:7c:ef:df:41:cd:d4:4c:ac:e0:
                    62:3c:26:0f:e9:ba:a7:80:5c:43:14:55:b9:1e:b9:
                    b6:87:4c:b2:6d:3c:d1:48:93:77:32:29:d2:7b:f8:
                    88:90:d5:96:9a:b3:d4:56:ad:71:e4:ad:23:79:48:
                    06:49:8d:b9:be:a2:53:46:99:a3:0b:bf:a8:4e:29:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:D2:7E:B4:42:BE:10:82:CA:19:9C:42:EE:2E:43:36:EB:6A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:80:9a:b7:a6:37:5b:22:40:8d:25:66:6b:01:62:e1:14:61:
         b1:78:b7:1c:10:b5:69:60:66:cc:79:5f:c8:e3:30:a5:3d:03:
         52:8f:10:bd:8f:f6:05:dd:a1:fe:0a:17:aa:24:e6:09:27:3b:
         54:e1:f4:03:69:14:2e:6e:3a:b9:70:93:07:fe:99:bb:90:82:
         52:21:8a:8e:93:ce:56:8b:10:fc:ef:77:3a:63:3e:9d:e8:18:
         08:8c:41:93:b5:0b:3a:a9:a3:38:d3:3f:a9:17:11:cf:de:72:
         cb:df:62:2f:96:e8:e6:ce:e1:aa:cd:42:7f:74:66:3f:24:c4:
         bf:1e:da:ff:46:82:fc:60:05:41:47:9d:53:90:6b:26:b1:8b:
         c7:31:bb:bf:b8:89:48:84:66:bc:48:c9:d8:2c:69:92:59:3d:
         33:56:a6:ca:17:11:8e:48:86:30:2f:03:94:00:4f:30:a5:89:
         bb:f1:6d:54:ec:79:91:88:16:e1:3f:65:68:3e:c7:79:b6:0c:
         0a:61:84:92:28:21:19:9a:ef:f5:49:91:11:57:b2:1e:14:cc:
         86:d4:86:d0:dd:63:13:96:fc:a8:c0:5a:9c:58:c7:16:14:10:
         ad:02:47:b6:88:33:26:f9:f9:30:55:db:b8:f2:c2:ea:23:62:
         5b:44:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:18 2025 by rpki-client