Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa
File:                     a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa (raw, json)
Hash identifier:          R73VrV6ixBpoHWRlEndsSxBQNpJqRA9FGVpfD4JgUas=
Subject key identifier:   AA:96:25:6A:0C:14:EC:4A:93:97:03:96:F9:46:F6:A9:E5:20:C0:09
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584A1E2AAB430363F7C538584780
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     14041
IP address blocks:        129.19.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ab:43:03:63:f7:c5:38:58:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=886f6b1d-f73d-46d7-9f2e-d74710ed2cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:6c:98:f4:a1:d1:99:99:23:bc:e9:e5:b6:
                    8e:76:9e:52:22:8e:d0:48:54:7e:20:b3:29:19:4c:
                    f7:00:af:bf:2f:18:f9:43:8e:b7:55:31:3a:66:6b:
                    41:84:0e:5d:44:9c:c1:5e:5f:b7:69:94:0f:9b:73:
                    1c:4b:2c:70:a4:6f:e8:08:09:07:98:d8:30:7c:0d:
                    50:44:eb:69:1a:10:7b:c2:6e:ff:5a:5e:18:3c:69:
                    4c:2f:a5:38:7e:43:76:44:15:49:2b:12:af:20:df:
                    b8:21:ed:cb:2c:13:3b:b8:e8:af:ca:c5:46:97:8d:
                    ba:ed:0c:00:28:d2:54:33:2d:17:87:69:96:ad:70:
                    bf:09:66:76:ac:c2:30:39:5e:c4:1b:21:5c:79:b8:
                    b8:b9:b3:ed:a3:5a:54:f0:57:68:7f:4e:42:06:b0:
                    06:da:b6:16:a4:6a:98:af:b9:47:ef:18:40:76:41:
                    b1:9b:c5:e5:c3:49:27:c4:4a:e9:b6:83:0d:b9:ab:
                    b2:e4:09:cd:f2:f4:9b:9c:09:39:22:87:3f:c8:54:
                    6e:69:33:3c:f7:1f:27:94:87:cd:ff:52:9f:1e:f5:
                    ac:91:0f:e5:29:bc:12:38:f7:c2:b1:3f:68:1e:3e:
                    22:2c:21:42:0b:7d:de:6d:16:63:a3:85:4b:2e:93:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:96:25:6A:0C:14:EC:4A:93:97:03:96:F9:46:F6:A9:E5:20:C0:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:da:62:73:14:cc:ab:cb:b6:61:9e:f1:67:64:80:e9:79:
         d9:70:8a:89:86:b8:62:50:1c:03:27:50:e9:cd:cd:28:47:5b:
         f5:34:57:cd:b6:0c:f1:fc:7a:cb:93:aa:d6:c6:af:5a:29:77:
         b2:c0:cf:49:e2:8a:59:52:10:46:e4:f6:03:63:46:d3:5f:9e:
         97:d3:37:6c:d9:59:5a:45:cf:11:22:7f:01:d7:dc:7f:ed:ab:
         4d:59:d9:e8:f5:08:b4:4e:92:a0:dc:26:0f:69:3c:2f:62:25:
         b1:2c:24:b3:3f:25:96:27:04:d0:70:59:58:07:8e:f4:e4:48:
         6a:0d:d5:cd:15:6a:88:4f:ed:e2:b8:4a:48:76:2d:79:71:02:
         6c:4f:ec:8d:f9:8d:18:a6:40:5a:9a:0d:92:33:51:7d:1a:3d:
         f7:01:fb:b4:59:81:be:4f:df:38:10:82:c2:d4:e6:4c:d9:f9:
         d5:c6:36:38:f0:bb:e1:19:9a:30:33:4d:e6:ee:d0:cf:50:fd:
         0f:0c:a8:fe:c4:7d:13:b4:af:4e:a3:da:a0:5c:05:61:ee:e9:
         64:f4:0f:7c:b2:46:8a:14:17:cd:a2:11:c7:87:93:9d:b2:f5:
         53:45:16:75:a1:4b:16:a8:f0:e0:49:a8:78:42:d3:cd:7d:06:
         93:17:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:59:47 2025 by rpki-client