Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/37dcf339-6c37-3889-91d9-639a64539e20.roa
File:                     37dcf339-6c37-3889-91d9-639a64539e20.roa (raw, json)
Hash identifier:          +LP2Vmc4XUC3tN6fXzE4nRC9ZoXTXm7xIIQAoHImSQc=
Subject key identifier:   45:E0:1F:A2:3C:B8:DF:71:70:E5:DF:80:F9:83:13:9C:27:93:39:AB
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584AFEE6AB3D55F1F33225721240
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/37dcf339-6c37-3889-91d9-639a64539e20.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     14041
IP address blocks:        129.19.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ab:3d:55:f1:f3:32:25:72:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=408c32b7-7bd2-4c38-adfa-6a2fa609f22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:e1:df:a4:c0:92:ae:1e:7c:0b:be:ef:fe:
                    b6:87:ad:d6:7d:f2:14:0c:1a:06:68:09:ff:c4:00:
                    bc:b7:ec:55:9a:06:b5:42:4a:6f:40:20:17:bc:1f:
                    ca:4c:5b:10:df:37:5a:7d:5e:aa:d2:da:73:28:fa:
                    26:00:64:ef:0a:e3:57:a1:f2:f9:30:6e:80:ae:4b:
                    0c:e5:c1:5b:60:5b:93:a4:cd:de:11:e1:4f:79:fa:
                    17:4e:3a:c9:f8:ff:ad:43:59:29:4f:03:18:c0:52:
                    61:e4:6e:da:85:48:9d:e4:94:fe:8a:b6:bc:6c:8f:
                    9a:33:d0:a8:f6:e7:d1:2b:9b:ae:87:f0:0a:2a:d7:
                    d1:40:c2:3f:94:d1:c1:d2:45:7a:a1:c6:ce:9b:72:
                    1a:2c:c3:0b:f3:00:0c:be:89:71:12:d8:0a:bc:8f:
                    f8:18:c7:56:44:d4:a4:3a:6f:f8:bd:ae:a0:ff:25:
                    be:46:16:8e:dc:21:ad:62:6d:1c:84:45:ac:e3:2b:
                    fd:f5:0a:7b:42:28:11:0f:c5:94:f1:bd:ab:47:91:
                    01:ea:e4:eb:ab:6d:ef:18:da:b7:e2:0c:6d:9c:ab:
                    29:98:60:8f:72:41:ef:1e:c1:92:9a:db:7d:d2:e6:
                    bf:6e:55:38:e4:0d:8d:5d:4a:85:c1:28:37:6d:2e:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E0:1F:A2:3C:B8:DF:71:70:E5:DF:80:F9:83:13:9C:27:93:39:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/37dcf339-6c37-3889-91d9-639a64539e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:22:28:f0:42:bd:39:2b:38:ae:0d:0c:de:ac:28:b6:cf:
         ca:85:4f:04:2d:2a:03:27:c6:93:a3:e1:1a:ee:ed:d8:34:e1:
         00:37:89:5e:6e:d8:6b:c4:75:56:5b:c8:04:2f:4c:d6:f0:6c:
         58:d1:59:f5:e9:47:5c:99:7c:69:ea:d5:83:82:5b:7a:19:e1:
         b7:4f:e8:94:3a:21:e0:db:40:49:d7:a6:0d:ab:10:69:3c:fe:
         48:9a:18:cb:46:fd:c4:11:90:5e:cb:5d:07:b6:de:73:22:ed:
         7b:61:f7:65:12:97:2f:1e:02:65:2c:a8:3f:86:ac:b2:db:d4:
         21:ba:91:78:cd:f3:19:05:ec:87:25:f0:ca:20:8e:a5:55:d6:
         43:7e:01:37:86:4a:37:88:0c:70:22:7b:e9:9a:d7:91:96:71:
         80:09:c2:d2:4b:38:88:0f:46:ed:b8:d5:da:f1:c1:32:bd:a5:
         15:f5:43:f7:cb:9a:79:9a:e9:f0:26:fb:fb:cc:c6:0a:d6:20:
         bb:60:f7:d5:7b:d8:8d:62:8c:46:2e:c4:9e:73:51:60:3f:75:
         55:e4:7a:75:d1:0d:a4:6e:56:96:e0:68:81:8e:6f:fd:f0:3d:
         0e:db:3b:df:73:2c:41:6f:66:8b:05:64:06:31:65:cf:f3:af:
         15:5e:d8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 00:39:40 2025 by rpki-client