Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa
File:                     4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa (raw, json)
Hash identifier:          s/jHZPZVTp93zw3rPMA6cFGqkzvZLadsyhgT8Z4jLb0=
Subject key identifier:   AA:1B:3D:66:80:50:5B:61:1B:F1:33:15:59:D1:71:CB:B7:A3:78:98
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584A698B1BE7CB177467FD39AC80
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     54393
IP address blocks:        129.19.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:1b:e7:cb:17:74:67:fd:39:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=391a308b-5eb3-4519-a7f5-e75c74773279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:58:45:ee:b1:48:06:93:e8:c3:cb:97:ff:
                    63:e8:76:c5:c7:85:a7:2a:3b:36:68:f4:c2:bc:06:
                    49:6e:ac:43:e9:f0:ee:1a:43:14:e2:8f:1d:e9:5c:
                    b7:3b:ef:6d:ba:e8:00:4b:d2:f3:bf:ca:6e:35:b5:
                    3b:16:0e:fc:d1:89:76:6a:ca:75:57:4b:70:a2:2f:
                    f9:46:1d:00:e1:03:1c:aa:3b:1e:18:83:54:6a:fc:
                    cf:84:13:b5:7d:c1:91:c1:7d:75:90:4f:68:11:06:
                    97:99:db:7c:c2:52:ce:ac:40:40:02:0a:20:c9:60:
                    86:21:c5:eb:b6:87:58:12:5f:f5:b1:c5:6d:99:eb:
                    00:c5:12:53:09:08:17:b0:25:28:be:14:22:0a:fc:
                    19:e3:26:2d:c1:56:ac:30:93:3b:bf:24:da:85:68:
                    09:a5:f1:39:7c:15:21:7c:ed:37:20:bf:48:a7:91:
                    e3:60:85:73:a9:e4:94:da:f8:c8:f4:38:45:fc:e4:
                    c4:4d:3e:d2:26:93:2b:ce:39:7b:4e:ce:d6:2c:c3:
                    2e:1e:12:8a:8e:53:71:12:d2:a6:88:fc:95:13:a0:
                    e3:67:d6:00:dc:7f:eb:cf:36:e4:3c:2c:7f:72:08:
                    e9:64:f5:ec:49:84:22:be:8a:d2:d4:29:cb:bd:f2:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:3D:66:80:50:5B:61:1B:F1:33:15:59:D1:71:CB:B7:A3:78:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:48:57:cf:c3:5f:b7:60:f5:76:4d:4a:74:2b:94:7b:18:65:
         cc:2e:f8:1f:29:91:c5:81:d3:73:82:27:a2:fa:35:18:b5:77:
         03:72:73:44:df:d7:59:54:86:38:a3:82:83:15:57:57:c1:c8:
         7b:19:92:9d:a4:e0:4c:83:bd:71:ca:92:8e:14:1b:64:58:ad:
         59:e1:3e:27:a9:ac:33:ff:bd:98:6b:78:8f:7e:e0:74:8d:02:
         b5:c5:00:75:d1:33:e8:ce:1a:10:15:6b:49:99:5e:74:6f:27:
         f4:d6:3e:91:39:31:ce:40:7a:0c:72:d3:f9:cc:4d:2a:88:30:
         61:55:49:a4:e8:26:fc:b3:b6:05:ee:f1:52:4c:13:a8:6a:8d:
         ab:35:ec:bd:a5:f6:71:7a:c1:a3:19:7a:31:db:ba:cd:3f:2d:
         02:4b:18:da:2a:a2:ed:10:45:59:b0:18:ce:fd:f2:71:e6:c8:
         fb:d6:4c:7c:60:83:01:db:1a:b3:02:3d:d9:ed:c0:d6:43:72:
         bd:10:36:d4:88:c6:ea:a9:c0:38:05:32:42:3d:a0:6e:5f:43:
         56:4e:23:db:78:0d:63:14:72:dd:f0:6f:62:35:3b:c1:cf:94:
         57:9c:85:f9:c5:22:04:29:2a:26:67:ec:41:4b:24:ee:69:a9:
         8b:bb:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:48:37 2025 by rpki-client