Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa
File:                     30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa (raw, json)
Hash identifier:          k4yEmq3rJHIajWEaAij6WqhMlD/RZDvk+6z809j2SyI=
Subject key identifier:   AF:79:50:D6:EB:E9:04:92:6B:60:D5:11:BE:E1:A4:E0:FD:AD:A5:FA
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858485E35B7236E2C52279215B780
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     14041
IP address blocks:        129.19.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b7:23:6e:2c:52:27:92:15:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=50ea9b33-2443-4e77-8bd9-8b045b05004b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:44:a3:93:bd:0f:be:38:97:98:c5:a3:7f:
                    3a:d8:62:77:42:f3:a7:c4:63:33:7e:7d:e4:87:6e:
                    9d:01:68:60:96:ce:eb:6a:c8:28:19:70:60:97:2c:
                    42:e1:8f:35:fe:64:6c:1c:8b:18:64:a3:7c:e4:27:
                    88:ec:fa:28:92:f7:c4:7d:51:51:0e:f2:48:8d:3b:
                    b4:b9:70:50:96:df:96:3d:39:3c:c5:c3:42:e8:be:
                    01:48:09:7d:cf:66:b3:3a:55:0f:11:cf:27:96:04:
                    a0:ca:f9:ca:46:f7:bb:ba:e7:76:99:67:ee:b6:80:
                    09:35:df:c7:46:a1:46:6d:b9:64:22:1a:56:7b:1d:
                    89:81:d1:ad:f9:e5:55:e0:2c:79:d1:72:c5:25:00:
                    ff:42:f9:7e:19:35:bf:35:5c:8d:aa:7f:77:3d:fa:
                    42:dc:39:bb:2c:3b:c8:e3:9e:fc:bc:25:08:4e:75:
                    67:9c:6d:13:f5:e5:84:51:d9:52:28:2f:dd:0b:8c:
                    19:ac:fa:9f:9f:ff:58:42:2c:22:57:a8:dc:9e:0b:
                    be:9f:ec:93:ef:76:e8:f8:06:9b:c7:57:10:a1:eb:
                    2f:b3:43:35:ea:5c:65:95:e2:dd:19:a1:bb:fe:e1:
                    4b:48:e2:69:67:91:0a:fd:0d:6e:f3:a5:be:af:85:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:50:D6:EB:E9:04:92:6B:60:D5:11:BE:E1:A4:E0:FD:AD:A5:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:96:bf:a7:e1:ff:a5:ea:1d:71:56:3b:10:b0:6d:b9:ba:be:
         4f:d2:54:e6:4d:12:5b:7d:35:e2:ac:a1:89:2a:21:38:72:51:
         d4:16:c6:5e:06:10:76:e6:de:bd:19:58:bb:bc:47:40:ac:48:
         18:27:89:9f:43:40:a3:ad:48:d4:52:ad:de:98:c2:68:11:5a:
         27:90:e4:60:70:5e:35:69:f8:23:f7:a0:ea:e8:7f:8f:90:eb:
         98:fd:5f:f4:ce:da:ed:e0:69:13:aa:0a:20:34:33:0a:8a:40:
         39:0a:41:71:71:db:a6:8b:95:d0:69:24:35:7c:6f:0d:59:e0:
         a4:3a:50:fe:f2:33:ae:f9:ec:e6:0c:0c:da:cb:77:94:16:f4:
         8d:39:51:18:b1:0c:08:9c:21:08:93:8f:83:a1:af:6d:28:23:
         ef:58:f7:d0:41:da:46:39:22:97:81:b9:72:62:ba:13:96:97:
         58:15:d3:91:f7:7a:15:ff:99:23:b3:48:e7:1b:08:55:49:fb:
         2a:d6:df:8f:89:32:2e:93:13:5a:1d:17:14:f2:fd:06:c5:9f:
         73:2c:a9:e7:ca:2a:1f:4b:dc:1b:75:cb:e6:a8:22:79:22:63:
         f3:43:fa:89:66:f0:40:9d:62:3a:44:9a:af:c0:68:9b:6c:58:
         7e:1c:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:19:20 2025 by rpki-client