Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e3eede35-0264-35cb-9484-7390f60bd12c.roa
File:                     e3eede35-0264-35cb-9484-7390f60bd12c.roa (raw, json)
Hash identifier:          3gZihGQrSE6oIPudrYhRUtsKFgA25Z8+08cDbgb5nfM=
Subject key identifier:   B6:BF:E2:09:87:A1:38:92:B5:92:0A:F6:5B:A1:FE:A4:9E:0D:05:A4
Certificate issuer:       /CN=e37d8dd2-7394-4cf9-b015-70c1c857a941
Certificate serial:       010D0C9F4328584B970D06A60804B3E69627D800
Authority key identifier: AA:20:98:D4:35:EB:A8:E6:DA:CC:C2:D9:63:E3:DF:74:B1:BE:E5:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e3eede35-0264-35cb-9484-7390f60bd12c.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     91
IP address blocks:        129.5.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:06:a6:08:04:b3:e6:96:27:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37d8dd2-7394-4cf9-b015-70c1c857a941
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=72253391-6173-4546-9da9-1e63491fb2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:aa:b9:d3:18:41:5f:32:f1:39:ef:e2:1c:
                    7e:3a:19:ac:d8:12:67:bb:00:90:88:fa:d5:e7:e7:
                    8a:4e:3f:7e:bb:a2:6a:9c:9b:d1:41:59:f0:7b:ff:
                    2d:af:6d:26:bc:09:a2:b9:b6:67:6e:ae:93:b4:46:
                    8c:38:58:35:36:03:5c:f1:2e:3c:8a:01:fe:86:95:
                    e0:41:67:e2:24:ad:c6:ce:67:8e:56:44:97:b9:f2:
                    64:b0:72:5b:12:2b:25:26:ad:af:01:d3:c9:0f:36:
                    d1:1b:6e:6e:9c:36:9d:6c:5a:15:8f:8f:a3:04:58:
                    55:bc:a6:14:53:c0:6d:d4:5d:4c:53:36:68:41:67:
                    f7:9f:77:4c:9a:21:31:1a:9d:ae:e4:fe:fc:00:6a:
                    e8:27:93:3d:1d:2f:ac:7c:27:86:55:7a:b5:4b:d6:
                    44:8c:53:b1:93:16:eb:50:92:ac:70:89:af:e1:3d:
                    d2:e3:59:b5:a1:ab:8e:07:03:39:be:9e:dd:f2:54:
                    a4:2d:ce:93:8d:1f:19:59:64:1a:4b:e8:4c:93:3b:
                    d3:d7:5f:96:3c:67:f0:74:d7:53:50:b0:fb:83:bb:
                    2b:42:5f:f3:fa:2e:62:d1:c4:43:84:31:f5:0b:bb:
                    99:11:c7:ef:ad:e4:19:7a:ef:2f:a1:b2:31:1f:80:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:E2:09:87:A1:38:92:B5:92:0A:F6:5B:A1:FE:A4:9E:0D:05:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e3eede35-0264-35cb-9484-7390f60bd12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941/e37d8dd2-7394-4cf9-b015-70c1c857a941.crl

            X509v3 Authority Key Identifier:
                keyid:AA:20:98:D4:35:EB:A8:E6:DA:CC:C2:D9:63:E3:DF:74:B1:BE:E5:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e37d8dd2-7394-4cf9-b015-70c1c857a941.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.5.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:72:b1:b5:f0:b1:c3:fd:c1:c5:5f:de:eb:8c:95:7c:d6:
         0b:24:f0:c3:20:a8:7c:28:03:a3:ee:5e:d1:76:93:02:ae:da:
         a9:e2:4d:d8:04:36:a0:71:4f:65:5b:d0:f1:6d:d1:99:02:f7:
         ec:d8:c0:7f:c0:42:60:05:52:3f:81:6d:49:3e:26:0b:13:85:
         7b:7d:e9:ae:2d:c6:42:2e:79:0d:b8:09:35:06:eb:98:94:e2:
         60:2b:1e:8f:51:83:07:e8:27:e1:65:a7:a6:14:44:53:5e:fa:
         e4:94:7a:1d:84:48:ec:3e:a2:17:12:5c:e8:f3:b3:0f:8b:a7:
         2a:36:d8:bc:81:34:37:48:ca:f2:8b:e1:ae:c9:8f:75:d4:4f:
         3d:a1:3b:ae:1e:88:c2:e9:a4:f0:fd:8d:4d:80:a3:fd:c1:47:
         4c:77:25:34:9c:26:6d:19:0c:02:a3:e9:0d:6d:ad:79:ac:fa:
         19:37:93:ff:ce:e0:45:5f:f6:ff:1c:dd:81:81:73:c4:16:8c:
         13:4d:e1:5f:fd:b9:05:3d:9a:31:93:6f:68:f3:e2:b0:6c:d8:
         62:26:6c:ec:07:71:c5:d4:f5:5c:06:76:a0:50:80:a6:86:01:
         5d:51:e4:74:dc:0e:07:bb:9d:38:53:25:2c:73:35:2a:11:82:
         ed:98:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:05:07 2025 by rpki-client