Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa
File:                     34ad3243-bb56-3e0b-a578-90571746a32a.roa (raw, json)
Hash identifier:          glFMRtP+bzRPwIlP0GmJm3HGi2GTvSexTsGUUuJ+y8g=
Subject key identifier:   3C:E1:3F:CC:1A:4A:C2:8E:FD:D4:1A:00:33:D9:50:CE:08:A5:ED:5F
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584E210FDA4383E7F11357457080
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14041
IP address blocks:        129.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:da:43:83:e7:f1:13:57:45:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=af392b5e-290e-4d12-ba1d-7ebc2e1f4fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:eb:e4:e2:13:48:b6:00:e3:38:84:7c:d0:32:
                    e3:1f:0f:82:97:be:23:00:33:42:1e:80:bd:f6:8a:
                    31:75:cd:91:06:e9:8f:df:70:6a:f3:9f:44:b1:d4:
                    e0:dc:31:c9:8a:3d:e9:de:48:8b:06:c3:7f:29:f8:
                    fd:1e:59:3a:8e:c6:62:5d:49:08:f8:52:89:6b:37:
                    3e:15:17:36:0e:da:dc:0e:15:ed:91:3a:69:29:7b:
                    54:94:e9:cf:a9:91:ef:d7:bb:5a:11:0a:56:c5:6b:
                    d7:2e:90:1a:19:3c:47:e5:4a:b2:be:15:a1:e5:4f:
                    56:9f:c1:49:fc:36:4a:fe:e0:8c:4d:c3:1b:1d:ae:
                    6f:cc:98:13:6d:31:37:e3:32:5e:59:ee:82:53:c8:
                    7e:08:a7:c1:b8:47:d2:bf:b2:3b:13:3e:92:76:0c:
                    8b:d9:a9:a0:c3:cd:3b:0c:8a:00:85:e3:0e:de:5d:
                    76:3c:fb:20:83:f2:3b:61:a8:81:57:8d:4a:b0:0a:
                    3a:80:63:38:c1:64:e1:8a:5a:83:a9:27:68:d4:98:
                    e5:a8:b8:59:d2:da:55:9c:6a:cb:76:05:5d:62:08:
                    d9:6b:33:3f:48:bd:77:dd:72:5b:98:62:b9:e8:15:
                    cc:93:0a:4c:c7:f4:1c:7b:27:aa:72:62:1e:4c:b4:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:3F:CC:1A:4A:C2:8E:FD:D4:1A:00:33:D9:50:CE:08:A5:ED:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/34ad3243-bb56-3e0b-a578-90571746a32a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:cf:37:f2:00:40:88:d7:98:13:73:8c:14:5d:b3:58:82:
         05:99:2a:ef:cb:17:8f:25:a0:75:be:dc:4a:c6:e2:7f:89:b6:
         56:6e:5e:52:d1:6b:df:d0:bb:0d:9f:b0:af:d8:8f:77:fd:99:
         b5:f5:53:d5:38:e2:7d:c9:26:4c:24:02:81:51:22:55:8c:f4:
         1d:ff:1c:bf:03:70:9f:d6:b4:d0:53:83:f3:ad:68:07:94:64:
         22:e7:57:76:fb:4c:d1:3d:51:50:15:8d:8e:85:bd:2d:80:4b:
         d5:e3:34:bf:4d:c7:8b:62:d6:ca:dc:a9:4c:6f:a8:25:bf:fe:
         25:7b:8d:eb:68:3e:07:5c:d1:50:51:82:f5:e1:65:99:8c:8c:
         43:8d:da:67:02:1b:33:14:61:c7:3d:30:87:0b:df:88:93:5f:
         66:ed:4f:97:36:c5:a6:56:ba:c7:d7:82:f8:d3:86:d2:38:bb:
         81:4c:75:da:fa:b2:e1:8c:14:f8:33:3f:07:3e:b6:c1:25:1e:
         2e:b5:41:5a:f2:b2:dc:ce:c0:27:71:c6:13:85:4e:8f:bc:85:
         ed:0d:c1:82:bc:83:b0:d2:72:e2:61:4f:9a:94:ad:f5:63:ba:
         7b:c3:e0:9e:2a:fd:ce:98:bc:d0:46:03:27:dd:1f:0c:88:0f:
         1f:c9:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:39 2026 by rpki-client