Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
File:                     0df303f2-b310-3346-ada4-7f81864f6c3f.roa (raw, json)
Hash identifier:          bkLpFw5eYWrfL0v0G1nvozyMeQaKHHrJJyx1PjNTlGo=
Subject key identifier:   58:09:18:29:E7:64:F3:19:9F:68:91:EE:19:27:D9:81:04:E3:ED:01
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858493ED3D894532DFD344E408C80
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     396212
IP address blocks:        129.19.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d8:94:53:2d:fd:34:4e:40:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=d4b2c308-4018-4f3c-aaa1-d0c33b90dcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:b4:15:c9:3e:b6:33:d6:7b:a0:54:04:49:
                    fc:42:12:15:bd:d8:ff:b9:9a:5f:79:d0:8c:2c:42:
                    5d:cb:d0:0c:51:80:eb:1b:39:4d:b0:dc:78:fe:5d:
                    08:b9:77:62:f3:96:36:8d:01:4f:f0:08:d3:8f:6d:
                    27:22:d1:fb:cb:bb:d5:33:de:b1:3a:c0:7b:7e:eb:
                    31:e9:7c:fb:38:63:4c:92:f6:07:ed:61:61:62:cf:
                    db:19:21:b7:56:6c:b3:59:4c:fc:53:51:6b:72:72:
                    61:44:92:95:62:c2:c4:80:2e:6f:b4:68:be:87:23:
                    e4:e9:37:3a:d1:7f:cf:e1:f6:6c:61:e0:03:89:d7:
                    d9:2a:d1:f8:9e:c4:cd:92:9c:3c:bf:91:27:de:ad:
                    31:e8:21:dc:6e:0e:58:d8:e7:63:e3:0a:a6:36:1a:
                    8f:36:41:10:8c:d5:10:c6:78:ee:24:30:8b:e2:6f:
                    15:61:99:3e:5c:32:b9:06:d7:0a:be:83:67:61:33:
                    60:e4:95:88:95:0b:d9:54:e7:89:16:76:1e:02:3a:
                    a3:bf:3e:ee:44:a1:48:7d:45:da:8d:8f:7c:d4:be:
                    5f:ba:bc:2a:9a:30:63:8f:6f:24:53:08:74:23:11:
                    2e:e9:e3:21:28:2f:ef:41:4b:24:a9:4e:da:23:ec:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:09:18:29:E7:64:F3:19:9F:68:91:EE:19:27:D9:81:04:E3:ED:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:ad:58:ab:1e:7b:f8:9e:03:6f:11:5e:eb:06:26:de:18:
         a3:bb:3f:d6:47:d5:63:cb:57:95:2c:fb:f2:e6:f5:55:4c:dc:
         7b:90:e2:61:3c:b2:02:70:2b:53:b4:55:c9:52:d0:8c:27:15:
         45:c4:66:1c:c3:06:94:3f:e5:4b:0c:eb:9c:2c:2c:6e:65:a9:
         c6:f5:8d:45:fd:77:13:fe:13:ca:07:75:4c:a1:7f:0c:81:b1:
         ac:73:1b:db:79:59:16:29:e0:a2:a6:43:81:30:99:38:6b:0a:
         d5:87:ed:a5:c9:cf:45:eb:ff:d6:d6:01:ae:27:45:51:5b:53:
         03:0f:a4:a8:e3:de:70:dd:e3:c1:2d:c0:f8:a9:f3:6a:9c:6d:
         fe:e5:4a:c1:1d:84:84:43:95:88:c5:83:ae:14:a4:f2:5a:48:
         26:3d:cc:33:99:50:ab:a3:b7:a4:8c:37:94:8d:ca:1e:fa:a7:
         90:38:ec:58:08:4e:bc:ef:93:85:c0:38:e2:6d:60:1e:79:db:
         16:50:15:69:57:09:a2:af:41:5d:0e:b6:1b:2c:b6:f3:d0:2c:
         86:2a:21:80:18:43:35:97:8f:48:9c:db:5e:2b:3a:14:68:9a:
         8f:b5:9f:52:99:10:c5:96:2d:ef:9a:cf:58:ea:bb:93:a4:ed:
         3c:88:cf:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09iUUy39NE5AjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
ZDRiMmMzMDgtNDAxOC00ZjNjLWFhYTEtZDBjMzNiOTBkY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwW0Fck+tjPWe6BUBEn8QhIVvdj/uZpfedCM
LEJdy9AMUYDrGzlNsNx4/l0IuXdi85Y2jQFP8AjTj20nItH7y7vVM96xOsB7fusx
6Xz7OGNMkvYH7WFhYs/bGSG3VmyzWUz8U1FrcnJhRJKVYsLEgC5vtGi+hyPk6Tc6
0X/P4fZsYeADidfZKtH4nsTNkpw8v5En3q0x6CHcbg5Y2Odj4wqmNhqPNkEQjNUQ
xnjuJDCL4m8VYZk+XDK5BtcKvoNnYTNg5JWIlQvZVOeJFnYeAjqjvz7uRKFIfUXa
jY981L5furwqmjBjj28kUwh0IxEu6eMhKC/vQUskqU7aI+wHEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFgJGCnnZPMZn2iR7hkn2YEE4+0BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMGRmMzAzZjItYjMxMC0z
MzQ2LWFkYTQtN2Y4MTg2NGY2YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqTrVirHnv4ngNvEV7rBibeGKO7P9ZH1WPLV5Us+/Lm9VVM3HuQ4mE8
sgJwK1O0VclS0IwnFUXEZhzDBpQ/5UsM65wsLG5lqcb1jUX9dxP+E8oHdUyhfwyB
saxzG9t5WRYp4KKmQ4EwmThrCtWH7aXJz0Xr/9bWAa4nRVFbUwMPpKjj3nDd48Et
wPip82qcbf7lSsEdhIRDlYjFg64UpPJaSCY9zDOZUKujt6SMN5SNyh76p5A47FgI
Trzvk4XAOOJtYB552xZQFWlXCaKvQV0OthsstvPQLIYqIYAYQzWXj0ic214rOhRo
mo+1n1KZEMWWLe+az1jqu5Ok7TyIzwY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:14 2025 by rpki-client