Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa
File:                     c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa (raw, json)
Hash identifier:          e3cZeXfPks33bFHhwDSBnY7zuPEpaumTAfAj4e2LxCM=
Subject key identifier:   4B:4A:A5:6D:7F:0C:71:C7:AA:DE:AB:A3:17:FE:AD:8F:0B:D4:FA:47
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F43285848C6E63BAFEDB36AFBD54EC240
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     401317
IP address blocks:        129.19.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:3b:af:ed:b3:6a:fb:d5:4e:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=e3b71d79-c0e8-4829-8dbe-4da4915dabff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:9f:cf:32:6f:f8:07:ce:6a:c4:e0:43:8c:
                    2a:ca:40:91:a9:08:d1:dd:b5:4e:b7:83:74:6f:b9:
                    d1:f9:6c:3b:3b:42:82:01:7b:6a:c5:c1:e1:cb:b9:
                    c5:f0:d1:12:d6:86:d3:59:a1:a8:16:6f:1c:69:ca:
                    99:1d:e4:13:d7:49:ce:b5:18:e1:a0:f9:f4:9d:be:
                    fc:55:cc:e6:5d:0e:7f:69:8a:9e:43:da:d8:f7:89:
                    08:20:f4:f9:69:74:36:a9:0f:d1:38:2c:bc:4b:0e:
                    46:03:c3:86:99:18:83:3d:77:b2:86:95:ff:1a:5a:
                    90:50:a1:23:93:62:0c:e4:58:d1:b7:a3:9d:f6:87:
                    68:27:2e:84:f9:30:f8:6f:60:38:67:4b:94:0b:09:
                    08:cb:2d:dd:fb:4b:76:b6:48:40:f6:6b:7c:db:18:
                    0f:07:fb:1f:c7:3c:4d:58:71:55:c0:1d:0c:c3:fe:
                    b1:d3:60:de:39:b7:bc:20:98:dc:f1:ef:69:da:d8:
                    ae:e3:ed:bc:43:e9:7c:b8:a3:65:4e:ca:a2:12:4f:
                    a5:5c:12:6d:dc:c9:db:4c:02:a5:b3:5f:bb:4a:79:
                    c3:82:66:63:52:16:3a:77:ef:22:73:2d:a9:9a:38:
                    b1:8e:0c:1e:d5:1c:94:07:80:14:07:de:ac:f6:c6:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:A5:6D:7F:0C:71:C7:AA:DE:AB:A3:17:FE:AD:8F:0B:D4:FA:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c132fc62-f9f9-399f-92a9-02aa5d4c0266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b1:f0:41:99:a5:e1:66:78:ea:c4:11:f5:b8:dd:f2:b6:c1:
         3f:1a:d5:77:a0:83:5c:ca:56:8f:e3:33:56:58:ba:ed:74:a8:
         44:7b:a4:76:3b:f8:a5:34:26:a7:b7:0e:58:ab:97:f3:d1:bb:
         ed:c2:e5:f5:74:20:e0:6a:7f:3e:01:30:b8:01:d9:f7:c8:46:
         e2:11:66:fd:3f:37:63:6b:6b:34:27:65:e8:86:b4:2a:bc:9a:
         0a:cc:38:3e:07:ba:69:b5:a6:8d:b5:11:f5:e4:74:5d:5f:a5:
         0f:d1:82:3c:a2:17:4a:ab:09:9b:fa:4a:24:b2:cb:5d:bd:aa:
         c9:4b:0a:5d:ee:2d:ff:52:6b:42:b9:cf:33:59:03:e2:53:00:
         59:05:37:aa:a9:eb:e6:30:17:15:60:cc:12:26:f0:cf:75:48:
         34:91:5c:99:3c:f3:0c:69:3a:4b:f6:d6:9f:c7:fe:9c:50:b8:
         8b:36:51:67:f2:4e:29:77:2d:d5:f8:92:17:cc:30:4d:1a:e6:
         8f:b7:ab:5b:9c:2f:33:01:f7:07:73:c0:7e:e4:6f:90:d7:11:
         5e:cc:3c:75:66:04:7e:37:63:7b:89:04:22:a6:7c:da:15:9c:
         d7:4a:2c:b8:45:53:bb:17:da:2a:56:fc:87:2e:49:92:bb:0d:
         c9:16:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:14 2025 by rpki-client