Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa
File:                     606b7f9a-8f76-30f2-9853-afcb97489ddc.roa (raw, json)
Hash identifier:          e+wtkeiVL68jZwMiPBN/AMDL0YxBDW4PTJj7vqk4Z/Y=
Subject key identifier:   F2:56:9B:B2:6B:B8:80:2F:88:D8:20:23:B0:03:09:27:A6:4B:36:E3
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584AFEE6AB2AEE5128E8C0686200
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     393869
IP address blocks:        129.19.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ab:2a:ee:51:28:e8:c0:68:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=ead324be-c0e0-4dd4-accc-9d6ede05d796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:12:f3:22:bf:12:63:b1:e3:82:94:db:d7:
                    35:30:83:7d:38:0c:e6:1b:eb:6e:b2:2b:fb:ca:e9:
                    a1:ed:6a:77:db:9e:34:e8:35:50:38:3d:1a:2e:60:
                    7d:c6:d9:56:ad:0d:6b:8a:23:e8:13:62:cd:25:c8:
                    49:90:6e:dd:66:3c:12:0e:21:b7:5d:94:31:98:0a:
                    63:3a:b2:20:21:f8:6d:27:54:65:5c:65:ef:74:a5:
                    f7:65:79:2c:86:62:f2:31:20:56:fa:5f:d6:8f:c4:
                    28:53:0d:00:df:cc:7a:03:22:1c:ca:e4:4c:41:4b:
                    b6:55:8b:b6:92:b8:3f:78:c7:60:06:8d:8e:5e:5e:
                    ee:4a:48:5e:5e:99:d7:16:71:ba:d8:37:56:dd:f5:
                    d1:e0:e1:f7:bc:0c:2b:24:1a:0c:d4:81:c6:73:5f:
                    84:6a:00:40:23:e5:fd:82:5a:81:37:6e:7c:3e:40:
                    c3:47:40:ca:fb:b3:ea:46:db:c9:1f:41:ef:99:73:
                    30:9f:fc:9a:b1:6d:60:f3:73:c1:df:8d:71:1f:9e:
                    e4:23:95:3e:df:75:c8:6b:07:43:1f:7b:cc:28:db:
                    33:51:17:03:76:0b:46:5c:16:a7:6e:43:43:4a:47:
                    bc:be:8c:ed:9a:52:71:30:ca:36:73:27:1e:24:7c:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:9B:B2:6B:B8:80:2F:88:D8:20:23:B0:03:09:27:A6:4B:36:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:66:29:d2:70:bd:50:f8:c4:ad:39:33:38:1c:71:df:38:
         e7:09:dd:a8:62:11:ca:35:14:1a:52:78:32:2b:64:a9:26:c2:
         e6:3a:b0:42:06:73:f0:fb:ae:26:e3:4b:13:80:fa:5c:20:46:
         e6:98:08:aa:5b:6c:8d:79:a0:60:69:c2:8d:ea:3f:a7:3f:8e:
         83:1e:7a:cc:e9:f8:fc:b8:1b:35:c4:7d:05:18:d4:93:8a:4f:
         b4:b1:f8:a0:67:ba:aa:0a:f0:42:ae:a2:cb:76:d6:29:2e:d0:
         89:0e:63:b4:4d:92:30:c6:60:bb:0c:76:10:80:59:e8:3e:0b:
         bc:e6:76:48:69:cc:97:a9:2a:e3:5c:d0:58:91:a3:8a:f9:94:
         b1:0d:c3:ac:a5:42:55:64:9e:2a:07:32:38:2b:d1:06:be:5b:
         c6:65:47:d2:1b:23:58:c2:af:a8:27:7d:57:a7:37:2d:7c:aa:
         e1:45:52:01:55:6f:4d:31:5b:71:a2:ff:36:cb:78:66:58:17:
         fc:6c:5d:27:d3:11:af:c2:68:d5:01:72:ce:6f:6b:76:3a:32:
         22:a6:68:ac:ec:20:bf:3f:12:bf:9a:1e:95:92:c2:01:15:97:
         09:ac:48:ab:b4:05:de:7c:eb:6b:ff:94:27:8d:eb:52:a2:88:
         dd:f3:86:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qsq7lEo6MBoYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZWFkMzI0YmUtYzBlMC00ZGQ0LWFjY2MtOWQ2ZWRlMDVkNzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0QS8yK/EmOx44KU29c1MIN9OAzmG+tusiv7
yumh7Wp325406DVQOD0aLmB9xtlWrQ1riiPoE2LNJchJkG7dZjwSDiG3XZQxmApj
OrIgIfhtJ1RlXGXvdKX3ZXkshmLyMSBW+l/Wj8QoUw0A38x6AyIcyuRMQUu2VYu2
krg/eMdgBo2OXl7uSkheXpnXFnG62DdW3fXR4OH3vAwrJBoM1IHGc1+EagBAI+X9
glqBN258PkDDR0DK+7PqRtvJH0HvmXMwn/yasW1g83PB341xH57kI5U+33XIawdD
H3vMKNszURcDdgtGXBanbkNDSke8voztmlJxMMo2cyceJHwb1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJWm7JruIAviNggI7ADCSemSzbjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNjA2YjdmOWEtOGY3Ni0z
MGYyLTk4NTMtYWZjYjk3NDg5ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgROwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIfKZinScL1Q+MStOTM4HHHfOOcJ3ahiEco1FBpSeDIrZKkmwuY6sEIG
c/D7ribjSxOA+lwgRuaYCKpbbI15oGBpwo3qP6c/joMeeszp+Py4GzXEfQUY1JOK
T7Sx+KBnuqoK8EKuost21iku0IkOY7RNkjDGYLsMdhCAWeg+C7zmdkhpzJepKuNc
0FiRo4r5lLENw6ylQlVknioHMjgr0Qa+W8ZlR9IbI1jCr6gnfVenNy18quFFUgFV
b00xW3Gi/zbLeGZYF/xsXSfTEa/CaNUBcs5va3Y6MiKmaKzsIL8/Er+aHpWSwgEV
lwmsSKu0Bd5862v/lCeN61KiiN3zhjU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:34:41 2025 by rpki-client