Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa
File:                     1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa (raw, json)
Hash identifier:          QEXNT17/CPyY8RQGHrlW3J6xd9nNtMQNwemiux8A11M=
Subject key identifier:   8F:4F:C9:1B:E5:19:2E:42:BD:27:36:02:3D:5C:5A:40:0E:1F:4E:7A
Certificate issuer:       /CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
Certificate serial:       010D0C9F4328584A6DBB3D582BFECB01A584DF00
Authority key identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     396982
IP address blocks:        129.121.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3d:58:2b:fe:cb:01:a5:84:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=1a1767e3-336d-491e-ba09-5d0591918776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:9c:76:95:3d:a3:3f:54:2c:32:97:87:3f:
                    3c:b9:84:37:b8:1f:18:27:cc:ec:e0:d6:db:00:23:
                    e6:69:46:0f:7a:82:34:ca:9f:69:99:09:a8:b7:c0:
                    7c:52:eb:43:9c:87:41:7b:16:f4:5b:a2:1e:a7:89:
                    89:2d:ad:a1:f3:34:30:0e:e1:f3:58:06:d1:db:59:
                    34:c5:72:7f:58:d3:61:2c:53:9d:76:39:50:28:95:
                    5e:b4:37:cb:ba:09:91:f4:d6:dc:57:10:96:11:e1:
                    1d:98:67:67:c5:58:b3:88:ad:ab:90:f9:2f:91:62:
                    93:09:f9:ed:af:8d:ca:6e:4f:87:e3:cc:a8:d0:22:
                    3d:f9:31:e6:e5:18:6b:13:d4:22:c9:2b:1f:ab:7e:
                    e7:46:8d:be:0c:de:f3:e8:a7:dd:b8:fd:53:ec:97:
                    69:09:d2:69:1e:2e:e6:6f:38:3e:97:09:da:f4:cd:
                    e1:ee:4a:fc:f0:48:89:94:5d:18:8e:07:d5:f8:56:
                    2c:82:48:45:dd:1a:73:a6:e9:a0:36:5f:bc:7d:37:
                    f4:d5:c1:bd:60:ad:cf:58:25:24:a0:85:f7:d2:95:
                    5e:d5:e9:57:5e:95:f2:d7:17:64:25:51:d9:31:bd:
                    03:b4:8a:ed:79:57:ef:bb:7d:ae:b6:7e:59:41:cc:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:C9:1B:E5:19:2E:42:BD:27:36:02:3D:5C:5A:40:0E:1F:4E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/1e836734-8b6b-3ba5-ad69-ae926f0a483e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl

            X509v3 Authority Key Identifier:
                keyid:E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.121.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:bb:d9:3d:53:0a:22:ab:8b:9b:41:64:2d:4d:32:a4:b9:
         29:b4:07:6e:10:b6:94:8f:99:ea:8a:a3:7e:83:19:4d:16:94:
         6a:1e:e1:90:67:0b:c5:9d:8c:cb:66:01:c8:8f:cf:7c:4a:62:
         84:66:9a:0d:50:93:c4:98:60:78:00:96:b8:82:53:a7:0d:6e:
         98:d0:85:ee:27:63:69:4a:e2:2f:67:b8:e7:fe:47:d7:94:89:
         94:86:47:45:b3:f9:08:7f:a3:1b:b5:a4:00:0d:7c:91:e0:b7:
         1d:05:06:5b:34:fe:97:e8:fa:af:d7:ae:6a:dd:2f:d0:3c:8b:
         99:11:44:81:47:78:19:ac:82:82:68:05:b5:50:05:5f:f2:08:
         88:77:ff:a4:77:88:b5:f8:65:f2:75:58:54:71:37:ad:aa:d4:
         83:a5:65:58:55:60:05:2e:25:76:0b:61:56:be:2d:38:a0:bc:
         f8:db:1d:2f:4a:6d:0e:e4:95:c9:19:e6:2b:97:d7:f6:a9:a6:
         9d:c3:7f:63:9a:ac:7f:29:b3:ac:1b:7f:be:fa:1f:b5:aa:2c:
         fb:a0:4a:98:42:8f:2e:79:e0:7f:6d:34:4d:17:2d:20:f0:c1:
         d9:38:e4:16:9e:fe:e7:12:2d:57:dc:24:81:84:7c:23:d0:99:
         fc:10:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:05:54 2025 by rpki-client