Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa
File:                     34ad3243-bb56-3e0b-a578-90571746a32a.roa (raw, json)
Hash identifier:          qnwHcgLu1tlh7MRTyT0SGj6O8R1fJ8GkkNtZ5m7bgHA=
Subject key identifier:   24:B1:E6:25:9B:6B:03:F7:76:84:71:1F:AD:C4:DF:AB:22:72:14:CD
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584F655E69E4D18BFE5D948DF880
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     14041
IP address blocks:        129.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:69:e4:d1:8b:fe:5d:94:8d:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=f2f952a5-4cb7-4cff-a9df-7ac3bce13ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:31:99:58:c2:54:f3:ed:65:0f:d9:48:09:
                    7c:c0:2c:ef:31:3e:34:e1:29:16:4c:09:2e:4f:d3:
                    2c:a2:2c:76:30:de:13:cf:56:bc:60:49:35:9d:9f:
                    88:3a:ab:52:2b:d7:f2:03:99:c7:7d:b5:76:91:7a:
                    59:f0:80:27:53:f8:cc:11:04:8e:95:b3:96:ff:f5:
                    11:04:f3:3c:72:17:61:ca:18:4f:62:f5:30:95:36:
                    cf:a5:35:37:34:60:d5:14:8c:7c:6a:a4:f9:dc:4b:
                    38:46:63:1a:56:3d:96:03:62:cb:28:18:1e:8b:e7:
                    be:7e:8a:70:47:01:18:1a:07:50:68:15:4c:4f:54:
                    0c:ea:2c:d1:13:c9:74:cf:90:8e:2d:a0:4c:86:b0:
                    07:16:d5:6b:ed:19:b1:c5:b2:6a:d9:b1:90:60:b3:
                    37:51:70:14:f9:88:a1:70:7c:62:97:11:6a:e5:6c:
                    a3:a1:b9:2a:ee:f1:c5:93:3e:bd:48:80:0d:62:d7:
                    ca:06:7c:f5:a8:17:60:da:6a:d7:d6:b8:24:a9:3c:
                    55:71:bd:e4:cb:74:2d:7c:34:52:c1:d5:e2:0d:e0:
                    45:ed:3e:45:cc:b6:2b:51:12:b2:7b:ef:b5:f6:51:
                    3a:74:f7:9e:d0:ea:2e:dc:86:9a:6f:61:25:ea:dd:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:E6:25:9B:6B:03:F7:76:84:71:1F:AD:C4:DF:AB:22:72:14:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:03:02:e0:33:4a:82:a9:1d:3a:18:74:14:5d:77:f3:1e:96:
         09:37:f5:52:2b:91:83:c2:f0:c9:78:5d:ab:2a:93:37:1c:eb:
         9e:8e:01:55:0e:65:5a:94:7c:0d:11:eb:fa:37:29:de:5d:d7:
         4a:6a:c0:d9:0e:e2:a6:46:e4:6a:34:d6:88:4e:65:2f:1c:2b:
         9f:8f:a2:34:e1:fe:e7:6a:fe:27:4c:64:0d:0b:07:1f:da:26:
         f6:1b:6c:1e:f7:a3:c0:6f:1a:ee:e8:1b:f4:63:60:03:e8:73:
         a6:bd:11:5c:68:5e:97:fb:fb:40:ef:da:9d:c7:6b:73:77:21:
         d4:9f:fe:c3:98:9c:02:45:0a:54:76:a8:67:12:37:e4:a6:d2:
         1b:e8:9b:50:6c:ce:de:82:cc:d1:41:b4:97:71:e6:f3:cc:63:
         72:5a:dd:df:6f:14:40:d3:25:42:9f:7d:0d:26:94:42:99:c5:
         d0:f9:11:69:9e:16:cd:0f:36:2a:26:12:46:d5:32:30:c6:8a:
         9c:76:2d:f6:58:64:d6:06:41:7b:7d:9a:0c:ce:5e:07:14:8b:
         41:31:f2:3d:0d:fa:d1:9f:63:28:20:e4:31:c6:c6:6e:1b:3f:
         72:a6:e3:3a:6e:c2:47:a7:b8:2a:a9:26:26:2e:2f:e2:33:33:
         90:a0:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:41:30 2026 by rpki-client