Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa
File:                     66dd902d-1643-3da7-8d26-aa9de0264773.roa (raw, json)
Hash identifier:          N+3PmMI4a+JMPiYRlqaFhhRvYfMMir/iI8wY8Dqests=
Subject key identifier:   27:A8:BC:D7:BC:82:31:BE:42:7E:F7:33:60:30:96:56:95:43:29:84
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584ACA7645FFA4DF0E2202A98700
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa
Signing time:             Fri 08 Aug 2025 18:12:21 +0000
ROA not before:           Fri 08 Aug 2025 18:12:21 +0000
ROA not after:            Thu 06 Nov 2025 19:12:21 +0000
asID:                     31898
IP address blocks:        129.153.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:76:45:ff:a4:df:0e:22:02:a9:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug  8 18:12:21 2025 GMT
            Not After : Nov  6 19:12:21 2025 GMT
        Subject: CN=a51e762e-ab42-4c77-9a67-862f37662918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:62:27:a7:dc:ca:22:4c:8c:de:31:d7:ea:
                    5e:34:6c:1d:01:c6:79:86:76:36:a6:19:62:56:bd:
                    43:c8:97:19:19:4a:a1:2d:64:b4:a8:53:4a:52:f7:
                    a4:70:32:b9:09:95:be:23:c9:ce:2e:1c:14:98:a7:
                    2f:1a:67:61:7b:b2:d6:28:34:bc:93:52:11:0a:10:
                    c0:80:20:72:44:cf:9f:b5:da:e2:ca:f3:bd:b9:1c:
                    50:7e:67:2f:70:96:0b:03:2c:fa:b0:39:58:50:7a:
                    56:10:33:de:0b:03:4c:60:78:c1:89:d7:a9:74:9c:
                    a7:8b:7e:38:21:e5:08:61:f1:6d:e1:76:07:7e:02:
                    3c:ea:1c:33:96:a2:41:82:aa:b8:37:6e:0a:b0:45:
                    e0:63:d6:0b:ba:08:5a:32:6d:aa:5a:c7:d9:cb:f3:
                    f2:3c:e3:0e:43:35:f8:08:8e:cf:33:96:49:09:87:
                    8d:a1:df:f9:7c:d5:36:2a:23:f3:e5:71:0b:04:12:
                    ff:47:db:3b:fe:e7:3a:8f:0f:a7:9a:a2:df:99:1f:
                    47:1c:98:cb:02:fc:2e:35:53:a8:1a:6c:31:0a:8f:
                    e8:cc:f9:ff:2b:74:d2:78:e3:22:c9:e2:27:0a:4e:
                    b8:b5:1a:fa:df:1d:76:7f:78:74:c6:08:fd:fc:16:
                    af:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:BC:D7:BC:82:31:BE:42:7E:F7:33:60:30:96:56:95:43:29:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66dd902d-1643-3da7-8d26-aa9de0264773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.153.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:88:30:01:63:58:da:e4:1e:96:e5:a9:a6:c2:c8:a4:c6:
         fd:da:78:a9:94:03:3e:a5:42:49:9e:e4:1c:5b:dc:92:b1:60:
         72:08:64:b5:51:ad:13:2f:c8:89:ed:d3:9b:b6:4d:06:22:ca:
         9e:12:4c:00:cf:4c:2e:f1:43:2b:43:34:5c:88:11:46:9f:f3:
         fa:04:39:21:c4:33:96:40:f3:11:e9:3e:7b:cf:f1:57:73:b0:
         0d:04:07:b5:9e:f4:fd:82:cc:83:f0:53:cc:7c:a6:16:f6:a8:
         b0:15:bd:53:5f:b5:71:3d:8a:c7:a4:76:eb:30:f9:d3:2f:3d:
         23:5f:73:41:d5:41:26:1b:73:8f:cc:30:92:14:f3:2e:26:cf:
         85:07:ea:50:2b:53:3f:18:e8:3e:f9:cd:fa:86:40:6d:4a:2c:
         6e:41:f7:ba:f5:ee:1f:ca:10:76:21:7e:e6:0c:74:14:63:27:
         c8:c3:59:63:2b:ab:96:ab:50:03:a9:2a:74:db:d9:d7:f7:fc:
         af:84:07:d6:c4:5c:13:93:50:46:70:3f:05:cd:fa:24:44:34:
         2e:f2:43:e4:21:40:e2:e8:fe:23:ef:b0:e8:2a:49:c7:a3:73:
         6a:9b:cb:e7:8c:2f:a7:a7:bb:95:73:92:76:7e:4b:e9:98:52:
         15:ba:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:25:18 2025 by rpki-client