Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa
File:                     a5bf3ded-14db-36b1-939a-11cea42f1831.roa (raw, json)
Hash identifier:          LCeVeVp6FVa5shKVK8skr6Kgq0bOdvynzdZcHw+DXeM=
Subject key identifier:   D2:BC:F6:8A:12:16:4F:97:9E:D7:CC:49:14:93:ED:D0:1B:D7:79:36
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584EA7879E0EC4DE599B095F80A0
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     12145
IP address blocks:        129.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9e:0e:c4:de:59:9b:09:5f:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e890f896-d35d-46af-895e-885284bdea64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:72:ef:85:90:c3:f4:27:5e:7e:14:6b:2b:
                    2a:fc:cf:61:9a:d6:11:c0:2e:b3:36:ee:8e:b6:d7:
                    a3:20:95:84:3e:51:6d:e9:a8:5a:04:7d:78:9b:1e:
                    ba:2b:75:00:f4:ce:db:5b:1c:21:87:a0:d1:a0:51:
                    d9:2e:c0:bc:e5:de:48:77:9d:05:f3:54:ce:64:00:
                    69:36:85:81:4d:c9:c1:6a:c8:e3:c5:56:e2:bf:fc:
                    8a:c7:82:23:4f:a5:2d:8a:af:c6:fa:4f:30:31:6e:
                    92:77:61:12:ae:64:96:96:75:d0:ac:05:f5:dd:83:
                    27:61:cf:c2:4b:13:ae:9e:0d:ed:ed:51:8c:ab:7d:
                    41:18:24:ec:56:71:cf:d2:78:86:be:9e:15:1b:9e:
                    7e:8a:22:fb:b4:b6:2e:dc:e2:5f:5f:f6:2e:68:8d:
                    cf:4a:ff:00:24:72:a2:55:59:94:d5:5f:b2:b3:f7:
                    c7:cb:3f:44:57:56:80:db:d4:8c:ab:26:0e:2c:be:
                    9e:5d:0f:db:df:2f:32:4b:dc:a0:fe:18:9e:59:40:
                    7c:38:39:c4:64:8e:62:4c:b8:eb:c2:fa:35:f5:9f:
                    54:ce:0d:5c:c8:e5:81:61:a7:6e:6a:74:3b:63:51:
                    32:be:28:c8:bb:b7:e7:ae:27:22:fe:e5:60:48:58:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BC:F6:8A:12:16:4F:97:9E:D7:CC:49:14:93:ED:D0:1B:D7:79:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.82.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:10:84:bd:40:5f:d7:45:ea:68:24:d7:80:48:d5:3c:0d:
         16:30:45:6d:3c:db:95:37:5b:c6:7c:92:95:b8:1a:64:aa:0b:
         9d:34:b5:41:f5:e5:1c:31:31:c4:e3:83:cb:ad:e2:3d:8b:c2:
         fb:db:10:e9:20:8f:3e:54:60:05:27:a4:28:de:72:ab:82:b0:
         f5:e3:18:2e:4c:04:39:17:81:31:66:e1:4c:09:f6:24:60:5b:
         d6:e9:ee:25:95:7a:0c:f1:8b:49:79:f4:79:57:8e:61:10:2e:
         96:11:cf:09:7e:ba:d7:ad:ff:0d:3b:0b:4b:b1:64:b8:33:57:
         98:78:d7:b0:1a:a1:c0:76:7c:2d:4a:ea:a2:58:2f:18:17:f3:
         43:f7:d8:07:dc:51:ab:ae:6e:ec:1a:66:8a:5c:eb:bf:9c:32:
         07:62:4b:4b:5b:d5:b1:f2:a4:5c:ae:2d:9d:64:27:d6:88:e3:
         cc:36:94:71:fa:0c:71:09:ad:14:f8:e5:85:6a:30:6f:e1:7e:
         ba:76:2f:c4:3d:de:9e:2b:4a:f2:a8:01:be:4a:b7:ee:cb:8c:
         74:67:cc:e4:61:1c:a6:d5:c0:6f:09:c2:a8:32:c7:98:ac:5c:
         9e:fa:d1:98:45:48:a1:84:2b:c6:6c:ec:17:fa:16:6a:86:2a:
         6e:8d:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:08:33 2026 by rpki-client