Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/37dcf339-6c37-3889-91d9-639a64539e20.roa
File:                     37dcf339-6c37-3889-91d9-639a64539e20.roa (raw, json)
Hash identifier:          TK/+lbzlmF81SgdJZ/hHtS7GweZ/yY7bEppQCzLcn7Q=
Subject key identifier:   54:58:78:64:50:F0:92:67:11:9B:D7:5A:C7:13:71:34:70:55:4E:41
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584A1E2AABB2B177909EF4BDC800
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/37dcf339-6c37-3889-91d9-639a64539e20.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     14041
IP address blocks:        129.19.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ab:b2:b1:77:90:9e:f4:bd:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=b10e8ca2-bd49-4900-aac2-87a4b09aa301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:eb:df:41:02:79:b3:3a:23:24:28:9c:f5:
                    b5:75:ce:83:43:04:3e:a4:a6:a7:18:bb:6e:0b:68:
                    ff:7c:e3:dd:1d:90:33:77:02:14:79:12:72:59:11:
                    ea:ea:00:a3:14:1c:93:b1:9f:c5:70:c8:67:21:0e:
                    c4:52:3c:91:96:a6:48:60:19:5f:f0:e7:9d:3b:f8:
                    9a:52:a5:0a:2e:d2:cf:89:bf:01:cc:a9:92:bb:70:
                    3a:30:59:13:ff:2d:42:59:e7:dc:d0:af:53:b6:d7:
                    1d:95:8a:f4:aa:af:e1:ff:2b:7e:39:31:d8:0e:2b:
                    46:fb:77:11:4a:75:23:bc:8f:f6:a5:29:0c:10:6b:
                    b9:79:d0:78:2a:9b:9e:b7:50:7e:bb:63:9a:d2:73:
                    44:ac:2c:eb:a0:d5:86:f8:c2:3a:47:2b:23:a2:57:
                    56:5d:ed:15:c6:dd:80:d6:4d:0b:7b:52:07:9c:00:
                    b8:fe:7f:31:f9:c7:72:4a:5a:bb:d0:d7:d2:1f:35:
                    7b:91:57:25:b8:ab:75:34:24:43:f4:67:72:fb:0a:
                    51:20:1e:67:77:cc:9c:9c:b9:7a:69:ee:1b:81:a0:
                    38:3f:24:75:93:b4:b7:ce:dc:58:23:d8:c2:9b:f0:
                    96:71:7e:d1:3a:46:d0:be:60:87:a9:75:3c:10:7f:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:78:64:50:F0:92:67:11:9B:D7:5A:C7:13:71:34:70:55:4E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/37dcf339-6c37-3889-91d9-639a64539e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:17:a3:31:fa:cd:de:c2:7b:20:e3:63:d1:c0:75:21:a8:
         0e:53:a9:97:58:6b:f7:77:3a:d7:39:1a:01:b4:72:b2:fc:72:
         72:f6:66:ca:b0:e4:1c:e3:38:c2:0c:f3:06:0e:af:21:ef:38:
         49:c1:c8:d2:be:65:b5:b3:70:6b:1f:15:40:ea:1a:7e:2f:89:
         a1:f3:d1:7a:19:55:4a:e2:50:51:8a:0c:0d:88:a8:8f:e0:d0:
         a6:78:20:a1:94:c5:6c:d2:41:29:0a:0c:3a:6d:c3:fc:ca:78:
         3e:72:64:d5:35:bd:0c:06:68:7b:12:cb:f0:c8:2a:4d:dd:69:
         26:82:c9:f4:7c:44:8f:fa:e7:c0:37:8c:71:fc:82:e4:3f:aa:
         13:64:be:81:a7:75:4d:77:88:a8:41:37:1d:f4:69:4c:55:72:
         4e:0b:26:5b:62:72:79:58:60:8c:c1:68:dc:75:2c:cc:56:4a:
         ae:28:8d:e6:98:8c:c1:3f:96:78:4a:a7:65:1a:33:9e:fc:3e:
         30:52:6a:4a:d3:20:4f:26:69:64:85:d3:aa:58:15:e9:cf:37:
         01:f5:ce:2d:73:36:4e:e3:99:41:d6:96:2e:70:f0:10:d4:c6:
         01:e1:06:32:cb:be:4f:8d:bd:8a:2f:bd:bf:8d:70:4c:82:da:
         4b:d6:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:31 2025 by rpki-client