Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/0169d127-4969-38ab-8bb0-cf56c7c50348.roa
File:                     0169d127-4969-38ab-8bb0-cf56c7c50348.roa (raw, json)
Hash identifier:          ptmH38c0oYLn+IjqrBjtwGwcLW0QL+2Z7bUdPQcZXfk=
Subject key identifier:   3D:37:B5:52:05:AC:68:FB:6B:EA:F2:9E:C2:F2:1B:03:8B:3C:84:3A
Certificate issuer:       /CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
Certificate serial:       010D0C9F432858495C243C9849E16C5632695800
Authority key identifier: CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/0169d127-4969-38ab-8bb0-cf56c7c50348.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     19782
IP address blocks:        129.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3c:98:49:e1:6c:56:32:69:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8daffa71-9cb8-4ac5-a318-0f128ef012a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:94:e5:07:69:c3:75:df:4f:f2:c9:99:92:1a:
                    a8:44:63:68:85:24:97:58:66:0c:e4:b7:a6:80:86:
                    26:d3:bf:4e:8e:cd:d1:a4:6e:c5:54:51:3e:8f:66:
                    03:c3:77:ef:a5:2f:1b:52:00:57:dd:a0:88:69:3d:
                    eb:00:7a:4d:11:e3:db:fc:c9:26:41:29:ec:94:4d:
                    be:9d:43:61:ec:f1:f7:ab:1d:9c:68:2c:b0:60:b0:
                    03:0d:48:ec:9c:56:22:4e:ff:9f:6f:f1:a2:2c:6f:
                    fe:00:aa:da:0c:75:16:c1:9f:5b:65:ed:58:6c:f0:
                    31:a5:c8:fe:37:c3:fe:bb:63:ab:2f:94:94:ff:17:
                    50:dd:5a:fa:64:bc:41:8a:1f:f8:3f:7c:96:ec:3e:
                    14:3a:e6:6f:84:cd:20:dd:c4:40:1a:86:42:5f:db:
                    6f:5c:7a:03:15:2e:51:80:eb:c2:5f:8c:77:00:ca:
                    55:50:d7:dc:88:bf:6a:74:c1:92:3c:c6:fd:be:5c:
                    f8:81:0f:88:38:0b:f9:af:62:e4:a6:55:d5:3f:43:
                    ad:02:5f:42:cc:1a:02:fd:94:47:7c:fc:7c:37:0b:
                    77:b3:b3:0f:ac:4e:79:6a:0c:f1:d9:11:0c:fc:14:
                    72:98:d9:0a:7d:67:bc:3e:67:23:d3:bc:07:ce:8c:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:37:B5:52:05:AC:68:FB:6B:EA:F2:9E:C2:F2:1B:03:8B:3C:84:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/0169d127-4969-38ab-8bb0-cf56c7c50348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.crl

            X509v3 Authority Key Identifier:
                keyid:CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:8b:0d:e3:3a:6c:54:13:2d:1f:8d:d8:16:e0:5f:f1:39:
         37:3b:d1:d9:73:61:f5:1a:ab:41:5b:63:b2:32:21:45:0d:3d:
         9d:94:31:5a:bc:ab:9c:60:95:c8:63:56:0a:85:90:b3:3b:cf:
         b5:5b:51:a6:f3:d0:6d:db:f6:5c:6a:d5:b5:80:dc:fa:e1:18:
         91:0b:21:55:be:31:c4:9b:2d:19:b4:37:03:c4:7b:bc:00:08:
         f7:40:51:df:f5:30:ab:40:33:36:95:a2:ac:1c:00:1a:c0:d5:
         1e:77:a9:76:19:d8:42:2e:aa:56:c8:71:f7:e1:07:30:26:c5:
         cc:e0:88:95:08:47:84:e5:c4:bf:24:e4:87:5c:96:09:74:ae:
         87:eb:58:ee:41:2e:53:42:c6:1b:17:dc:2e:bf:b4:88:5b:0a:
         dd:b6:1e:26:ab:0b:bb:94:c2:ce:70:22:19:71:58:af:ff:30:
         80:03:c1:4d:32:54:c7:2a:5d:a5:b0:64:4f:2e:db:38:ad:0c:
         36:7e:75:01:06:58:2f:b7:a4:11:77:74:22:ef:e6:f0:a9:37:
         2b:a8:65:76:2a:c8:a0:ed:b6:ea:c1:1a:4d:72:15:dc:e6:81:
         6b:53:9c:7b:00:de:f4:37:8d:6d:69:cc:45:0b:aa:83:79:cc:
         c0:40:6d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:40 2025 by rpki-client