Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa
File:                     c41b4012-510a-3aef-87ef-a711c036e4ed.roa (raw, json)
Hash identifier:          M64sjEYnCAKdYe8xRUq4f8rY1LOsGVzAm6wqeN0hX6o=
Subject key identifier:   11:94:F0:C1:FC:16:2A:E4:AB:EF:65:E6:54:D3:88:E1:2F:87:3D:76
Certificate issuer:       /CN=64a0177e-75a0-4585-b068-73030736bbb1
Certificate serial:       010D0C9F4328584AB7434A487FBA280D5FD64880
Authority key identifier: C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa
Signing time:             Fri 01 Aug 2025 21:09:16 +0000
ROA not before:           Fri 01 Aug 2025 21:09:16 +0000
ROA not after:            Thu 30 Oct 2025 21:09:16 +0000
asID:                     91
IP address blocks:        129.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:43:4a:48:7f:ba:28:0d:5f:d6:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64a0177e-75a0-4585-b068-73030736bbb1
        Validity
            Not Before: Aug  1 21:09:16 2025 GMT
            Not After : Oct 30 21:09:16 2025 GMT
        Subject: CN=9b1d4c25-aaa2-4f95-b8a7-5bfa75311d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:49:cf:a3:b6:30:20:29:2a:7a:18:0b:7b:
                    0a:ab:9f:69:74:d9:23:b9:53:dd:66:a9:59:4c:0d:
                    64:c4:44:d7:7a:bd:06:66:b4:d7:90:21:f4:cf:a4:
                    7c:3e:07:91:b4:ec:b7:62:dd:26:2d:e0:62:7c:b1:
                    58:47:bb:33:21:42:16:1b:88:d6:08:f0:81:e5:47:
                    19:28:90:1c:7e:f0:e9:3e:8d:b9:73:c7:81:ed:0a:
                    e0:ea:6c:40:59:fc:f2:2c:9e:2d:2f:df:cd:62:ea:
                    50:41:7d:a4:c9:a5:41:65:ca:72:89:03:4d:d5:10:
                    ba:c3:53:42:5f:00:db:91:41:af:4a:09:2e:7e:db:
                    24:d9:9e:30:94:ff:ff:47:a8:75:ae:ee:09:de:dc:
                    f4:12:0b:c7:a4:ad:4a:37:bf:30:b9:cd:5e:2d:cc:
                    df:71:2a:28:de:96:c2:af:d4:14:8f:46:be:b5:53:
                    61:a2:dd:14:91:23:70:cc:93:fe:df:b7:d0:36:80:
                    5b:83:ce:f7:b0:59:93:61:0e:a7:6e:63:cc:81:df:
                    88:95:56:71:a9:e7:5b:29:9c:9f:43:90:25:c6:c2:
                    8f:07:cf:41:db:df:40:9e:0e:e5:bf:ed:e3:5e:f4:
                    c2:4c:9b:53:a8:f6:87:ad:e7:dd:4d:d4:3d:ee:56:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:94:F0:C1:FC:16:2A:E4:AB:EF:65:E6:54:D3:88:E1:2F:87:3D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/c41b4012-510a-3aef-87ef-a711c036e4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1/64a0177e-75a0-4585-b068-73030736bbb1.crl

            X509v3 Authority Key Identifier:
                keyid:C7:CF:89:56:DB:55:A4:13:2A:3A:30:CC:DD:D3:C1:D7:80:2A:EE:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/64a0177e-75a0-4585-b068-73030736bbb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ed:4f:1b:88:ee:7d:2a:41:bd:6a:ea:83:ac:25:ca:07:72:
         12:61:e8:05:ca:af:87:4d:bc:03:6e:74:a5:26:ba:3f:74:9e:
         86:76:aa:2a:51:80:3c:c6:f0:0f:f3:24:d1:f8:d0:24:4f:7d:
         e9:55:de:15:7a:99:89:5b:0d:d4:88:45:b4:0d:3b:06:bd:65:
         0b:c1:64:dc:0a:46:f3:d1:4e:03:db:63:28:84:1f:47:53:06:
         a1:26:74:ab:18:68:b7:c0:8d:37:34:ad:12:e9:37:8a:ea:e5:
         a2:64:28:79:7d:69:d4:60:f4:cd:07:8f:92:69:3a:17:8e:e1:
         e7:b4:27:e9:ce:e5:7d:e7:75:24:ea:dd:10:b3:90:ad:66:d3:
         a8:dd:f2:03:62:74:26:5c:71:58:c7:e6:07:68:f8:1a:7a:14:
         39:f8:36:6c:a9:67:e1:6c:a2:94:88:76:a4:07:e5:f5:1c:b6:
         20:61:61:53:fe:27:cb:cc:f2:bc:4e:84:92:ff:e0:3b:54:43:
         3b:01:ac:1a:e1:0a:5c:37:ce:ce:1d:a8:64:0c:96:79:32:ed:
         33:b1:6c:76:42:59:7e:9d:61:81:d1:ff:50:c2:a3:67:36:a3:
         30:41:45:c8:b4:cc:ff:66:07:a7:05:40:be:0e:69:2f:8d:a0:
         76:3f:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:07 2025 by rpki-client