Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0cc76ac-549f-38e0-aec1-aab4ac346a8a.roa
File:                     e0cc76ac-549f-38e0-aec1-aab4ac346a8a.roa (raw, json)
Hash identifier:          9NQ2zMLW/sQpdwE5ETMXw/s+uEaqwcP8i2g1qn3KvE0=
Subject key identifier:   89:A1:8E:87:FA:CA:F1:4A:CD:92:CB:21:0C:DE:01:EB:5D:79:E1:EB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584BAD628E7488339B2949739080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0cc76ac-549f-38e0-aec1-aab4ac346a8a.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        129.213.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:8e:74:88:33:9b:29:49:73:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=f46b3daf-b5b3-4d2e-8125-df2c4abaf04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:12:bc:e8:b9:74:a0:dc:84:20:6f:81:1b:
                    95:1e:26:cd:2b:51:27:19:4c:5e:08:78:7a:2b:04:
                    2b:06:15:51:79:46:36:fe:34:38:80:f8:ff:40:f7:
                    7f:8b:ff:1a:b7:9e:fb:c3:cb:ff:24:93:e4:57:d3:
                    3d:41:68:d4:54:e9:18:b9:0f:72:e1:0a:a3:69:24:
                    cc:94:4b:bb:71:d6:60:f9:ee:16:8f:46:d6:4b:cf:
                    f9:de:b4:94:f5:53:14:df:43:eb:75:a8:dd:cb:11:
                    ff:e4:83:1d:43:8c:45:70:84:83:5d:df:04:d9:c3:
                    15:ca:ce:6b:42:ff:09:c5:04:90:5a:3c:16:58:b6:
                    e1:b7:a8:d1:f8:92:5f:d6:f4:38:68:eb:d9:33:05:
                    b0:02:e3:11:e6:e8:93:86:b8:05:60:df:1e:46:63:
                    bd:ef:9b:66:ad:a6:2f:80:84:8b:1d:b8:e0:5d:d1:
                    9b:3f:ee:02:d8:01:35:83:eb:a8:5d:06:96:49:33:
                    cf:e2:80:25:72:6f:1f:90:cd:40:8f:41:43:94:9c:
                    e0:3f:4c:f7:e6:fd:70:7b:7a:35:a6:97:d8:ac:b2:
                    8c:b2:c7:d4:4c:a8:c1:d3:30:12:61:5d:b9:47:1d:
                    77:ad:4e:ae:dc:cd:cc:5c:5e:98:73:1e:1a:ac:7b:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A1:8E:87:FA:CA:F1:4A:CD:92:CB:21:0C:DE:01:EB:5D:79:E1:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e0cc76ac-549f-38e0-aec1-aab4ac346a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:73:c6:df:bc:e0:31:20:d5:62:c1:b8:36:b5:47:fc:a9:87:
         25:fd:74:f6:76:88:e1:b3:b1:3c:14:03:c7:ce:cc:98:e3:7c:
         46:18:e4:73:f4:93:29:a5:c8:b8:75:f3:f7:bc:78:38:64:a0:
         3f:68:e9:71:2b:25:42:c5:67:5c:64:f3:90:d1:b2:60:78:ba:
         8d:a3:fc:be:c4:cb:8b:e0:a4:6a:ba:d8:67:44:d0:c7:28:62:
         04:6b:5c:9c:d3:14:ea:a4:fc:f8:95:6b:2d:1e:9f:a9:4f:42:
         75:de:43:a5:37:f2:8b:95:d2:9f:a4:18:24:ce:2d:8e:72:20:
         0a:63:b1:3f:41:28:a1:e1:54:32:b9:3a:2b:3b:11:02:32:fb:
         88:84:35:06:ba:e6:0c:5e:96:2c:18:59:07:18:18:29:47:16:
         60:f4:5a:a4:4c:df:dc:32:45:e6:b1:94:2a:e9:0e:65:31:c7:
         b9:52:64:ed:1a:f5:fb:8e:c1:57:48:ee:ce:e3:03:6b:6f:d0:
         8b:6a:8d:5c:86:be:7c:4f:5a:dc:bb:da:24:76:69:a6:b3:86:
         9f:4f:26:f4:e4:68:bf:bb:60:d4:07:bc:98:82:a5:14:98:c4:
         03:71:9f:8d:b8:6d:bb:3e:6b:37:a0:60:7f:db:7a:3e:dd:b2:
         b6:79:fb:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYo50iDObKUlzkIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZjQ2YjNkYWYtYjViMy00ZDJlLTgxMjUtZGYyYzRhYmFmMDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOsSvOi5dKDchCBvgRuVHibNK1EnGUxeCHh6
KwQrBhVReUY2/jQ4gPj/QPd/i/8at577w8v/JJPkV9M9QWjUVOkYuQ9y4QqjaSTM
lEu7cdZg+e4Wj0bWS8/53rSU9VMU30PrdajdyxH/5IMdQ4xFcISDXd8E2cMVys5r
Qv8JxQSQWjwWWLbht6jR+JJf1vQ4aOvZMwWwAuMR5uiThrgFYN8eRmO975tmraYv
gISLHbjgXdGbP+4C2AE1g+uoXQaWSTPP4oAlcm8fkM1Aj0FDlJzgP0z35v1we3o1
ppfYrLKMssfUTKjB0zASYV25Rx13rU6u3M3MXF6Ycx4arHvNXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImhjof6yvFKzZLLIQzeAetdeeHrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTBjYzc2YWMtNTQ5Zi0z
OGUwLWFlYzEtYWFiNGFjMzQ2YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgdUQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNzxt+84DEg1WLBuDa1R/yphyX9dPZ2iOGzsTwUA8fOzJjjfEYY5HP0
kymlyLh18/e8eDhkoD9o6XErJULFZ1xk85DRsmB4uo2j/L7Ey4vgpGq62GdE0Mco
YgRrXJzTFOqk/PiVay0en6lPQnXeQ6U38ouV0p+kGCTOLY5yIApjsT9BKKHhVDK5
Ois7EQIy+4iENQa65gxeliwYWQcYGClHFmD0WqRM39wyReaxlCrpDmUxx7lSZO0a
9fuOwVdI7s7jA2tv0ItqjVyGvnxPWty72iR2aaazhp9PJvTkaL+7YNQHvJiCpRSY
xANxn424bbs+azegYH/bej7dsrZ5+8Y=
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:50:36 2025 by rpki-client