Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa
File:                     34ad3243-bb56-3e0b-a578-90571746a32a.roa (raw, json)
Hash identifier:          u6Ra58eIemGp974zrH979iKBVIf5TWYxXHHhe7qZfzU=
Subject key identifier:   C0:D9:08:8E:4B:62:67:08:17:F1:F7:A6:23:AB:12:D1:30:15:C6:D8
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584EC372B097A432E30CFBF84180
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     14041
IP address blocks:        129.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:b0:97:a4:32:e3:0c:fb:f8:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=d5101269-593f-4f60-b30c-aa867948c1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:ab:d9:d6:e0:18:ea:05:d9:69:70:7b:d0:
                    be:a2:0f:9d:f5:91:15:34:28:44:64:96:4e:f8:08:
                    a8:27:80:3a:40:1d:a8:2c:8e:b1:52:a0:47:bf:9f:
                    f1:5b:5f:60:17:9b:2d:08:69:ca:10:a9:07:bc:57:
                    51:a6:d7:8e:30:f3:47:03:77:fb:63:e9:b0:27:51:
                    ba:18:00:70:a6:85:2d:66:3e:44:51:28:b1:90:17:
                    01:28:d6:1f:3e:ce:43:27:54:7c:5c:63:94:1d:48:
                    0b:92:f9:7b:bd:2a:cd:00:76:87:94:bf:b7:0e:35:
                    14:04:61:2d:14:14:7a:e9:1b:74:e5:dd:91:87:bb:
                    c8:09:49:5b:d4:b1:f4:3e:b9:ee:e9:77:aa:87:f3:
                    3b:c5:d6:26:89:0a:45:11:7d:30:0c:06:3a:12:30:
                    a6:a8:11:7c:2c:ae:95:13:be:8e:40:10:eb:3b:62:
                    b2:c8:b3:44:2d:f7:fd:07:7b:fc:e0:b3:ac:e4:70:
                    49:ba:22:f3:44:a7:5b:1b:de:a2:97:99:ef:cd:76:
                    c6:fe:30:df:74:d6:3a:40:c5:26:ae:30:e8:f4:22:
                    54:df:df:b4:73:9c:58:a8:0c:e1:de:a5:d8:76:dc:
                    0d:50:64:51:5e:04:2a:d2:ef:31:7b:d2:6e:06:51:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D9:08:8E:4B:62:67:08:17:F1:F7:A6:23:AB:12:D1:30:15:C6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:cc:76:28:fb:a0:a8:0a:e1:f8:9e:c1:5a:c7:89:b8:75:
         12:ef:b2:07:ba:90:6b:ae:85:e4:7f:49:9f:f1:81:1f:06:3d:
         8e:93:b0:a2:de:c7:34:ec:7d:fe:fc:3b:5b:32:06:16:6d:76:
         9a:4c:f5:d3:af:d5:de:d9:74:44:b7:53:17:57:b9:c8:4f:76:
         16:fd:26:43:5c:00:b4:a3:c5:fd:27:74:1e:4c:c2:75:09:ee:
         86:e8:27:31:e8:c8:7a:6f:e4:14:b1:9e:35:8f:c5:d1:3a:e2:
         38:68:ae:48:4c:51:52:cb:74:3f:69:7f:e3:dd:ff:4c:0c:5e:
         62:2e:94:0e:63:37:71:bc:f2:22:f6:2c:90:89:0e:f0:ac:2d:
         27:a6:85:bd:c0:bc:72:b5:ff:ec:d7:88:e1:35:7f:8f:27:16:
         58:1b:2a:1f:48:38:13:11:7a:45:bc:bf:ae:f2:ab:c7:d3:5c:
         5d:5a:fe:a4:88:d6:24:b1:11:be:8b:26:df:7c:4b:75:22:90:
         f9:98:e3:e9:95:0f:2e:31:e2:40:51:c1:48:89:cd:09:a9:2a:
         4e:37:e3:c1:8f:39:ab:3c:b5:83:45:55:4a:50:aa:e3:db:90:
         97:5e:16:18:d3:d1:95:ae:db:2d:10:aa:91:9c:e7:1c:8c:b0:
         c5:1b:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:09:23 2026 by rpki-client