Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
File:                     0df303f2-b310-3346-ada4-7f81864f6c3f.roa (raw, json)
Hash identifier:          77WyK00mqVxCVBlOUhvyXUsUiH9yqLpwDVros94s9IU=
Subject key identifier:   4F:75:ED:C0:1C:AB:5C:38:F4:11:47:CF:BB:06:96:32:FB:31:B7:4D
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584CBF1730F79ACC9E09BC742E40
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     396212
IP address blocks:        129.19.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:30:f7:9a:cc:9e:09:bc:74:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=3d18c51a-9f2b-44ec-9a20-31a74a284640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:9c:d7:9e:5e:13:ed:99:2a:23:6d:50:49:
                    f0:a8:a1:61:a4:7f:1b:d4:38:7a:56:cc:b9:01:6a:
                    84:cc:ca:df:74:d7:13:59:eb:18:6c:17:38:81:e0:
                    0d:15:4f:b4:75:15:e4:db:7f:96:7d:10:64:27:2c:
                    01:b9:4f:19:6c:a2:6f:da:03:f6:b7:b7:2d:45:1c:
                    0f:1b:8f:ca:a7:09:b7:94:ce:bc:70:2e:03:d4:77:
                    88:6e:69:42:7e:13:1a:56:d2:14:2c:d8:db:98:0a:
                    90:de:49:c9:90:cb:3e:8e:0b:c6:67:41:58:34:84:
                    47:dc:51:bd:80:30:d1:ce:3a:41:1d:46:14:e0:f9:
                    e7:e9:88:40:37:7c:76:d2:db:bd:7b:c4:7f:ea:e5:
                    22:17:0d:f4:ce:ee:68:d3:eb:89:b3:cb:0d:59:c2:
                    48:ab:e5:51:4a:8e:dc:c0:f2:aa:3b:5d:29:ad:37:
                    c7:eb:a7:56:41:8e:c9:87:d3:83:f8:6e:3d:0f:26:
                    1f:eb:dd:59:6b:3b:ea:26:2c:22:93:4a:00:8a:9e:
                    57:b4:5c:71:b0:ff:49:1a:fd:58:05:04:4f:f9:f6:
                    97:1d:f3:a9:1c:94:ba:92:cd:ae:0d:51:15:a8:80:
                    e5:95:c8:d7:9b:57:96:ed:eb:f4:d9:7c:1a:09:31:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:ED:C0:1C:AB:5C:38:F4:11:47:CF:BB:06:96:32:FB:31:B7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f4:f8:59:5b:4f:df:b0:a1:94:5f:a9:f6:04:fd:c9:07:e5:
         f6:4b:f0:ff:8a:86:0b:fd:53:81:7b:50:42:a7:71:f1:e3:a1:
         0a:14:67:ff:a9:e5:08:cc:51:82:85:94:aa:d3:1f:a2:5d:49:
         6a:a1:a1:a1:8b:25:01:96:e1:66:ae:8a:a0:c5:9e:a9:e1:dc:
         f0:3e:8d:b8:3c:d1:41:d7:6b:c9:39:dc:2b:2f:18:28:8c:89:
         29:33:0e:c0:ec:f3:ea:05:a6:6b:f8:c6:ec:c5:6b:3d:14:94:
         f8:79:1e:cd:16:46:fe:35:e8:86:ca:47:28:2f:a7:8e:3b:1a:
         72:61:1b:b8:0d:c9:04:7c:83:d3:d8:17:ef:c9:c0:b1:97:95:
         b9:59:9a:b0:3f:5b:ba:08:d0:3e:a5:35:b7:61:03:c3:11:c1:
         09:fe:85:39:f6:b9:a9:4e:e0:2d:f5:28:16:da:64:84:38:15:
         46:0c:42:ab:56:d3:26:84:43:62:fd:73:4f:c5:63:d4:68:14:
         09:a7:e2:17:53:74:1b:a4:a5:0c:18:59:d9:cf:ea:e3:78:13:
         d3:5d:51:05:6d:a8:c9:c7:a4:f5:0b:8e:70:c5:5f:44:87:d8:
         9f:b0:05:8f:11:7f:ad:bb:88:da:1f:ec:1f:ed:8c:fa:a8:1c:
         87:ff:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:56 2026 by rpki-client