Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa
File:                     98debb85-2197-3492-b7bb-b5bfcf794138.roa (raw, json)
Hash identifier:          ykGA+AtJosB4lfmRIU3BqY4NEHXdR/WG9DjL/NcigAg=
Subject key identifier:   4A:58:DA:C2:FC:C6:9C:AF:6A:0B:32:58:E7:F4:98:F9:2D:DE:F8:A5
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584D04E23814071545B81518B680
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     393657
IP address blocks:        129.19.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:38:14:07:15:45:b8:15:18:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=c0ef6847-a173-4d83-b268-6e4d83c5f886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ec:59:79:87:b4:06:cc:66:fb:e1:79:a1:d0:
                    a5:39:ee:cb:9f:c3:dd:37:5f:da:2a:c5:47:2a:a5:
                    c1:50:08:df:89:04:c9:d3:14:79:a6:78:ad:a8:e1:
                    24:ba:f4:69:2e:0f:ba:b6:f5:76:24:90:90:5d:4e:
                    e9:60:5f:2c:5e:c8:a0:c1:98:00:a2:57:39:29:a1:
                    b2:05:a0:92:9d:69:8f:e9:39:e8:29:b4:76:a9:c8:
                    0b:16:39:b3:41:2f:98:d5:46:8f:91:64:95:87:d3:
                    80:42:9b:92:95:07:a0:5e:e5:ff:52:97:c7:cd:fd:
                    c8:68:0b:24:ad:a0:1f:29:7e:c2:42:24:d2:a9:5d:
                    f4:1c:95:3b:82:28:11:d7:37:81:c0:c8:cb:fe:a8:
                    4a:7a:cd:cb:34:f0:3a:78:4f:23:18:52:52:b1:8d:
                    33:a2:ce:a0:62:0c:a6:8d:18:14:ee:51:1c:25:80:
                    75:c0:26:76:8c:40:56:e0:ea:2c:8b:c2:5a:7d:91:
                    92:fe:dd:d2:e5:db:7b:e9:e5:dc:44:18:b9:9d:d6:
                    5a:1b:7d:1a:f6:0d:16:4f:fd:ee:c0:05:58:27:15:
                    5d:f2:80:65:51:5f:dc:7c:00:1e:2b:10:17:08:47:
                    ad:9c:2e:4c:4d:0c:31:ac:03:ce:e3:64:35:c5:a3:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:58:DA:C2:FC:C6:9C:AF:6A:0B:32:58:E7:F4:98:F9:2D:DE:F8:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:60:6f:4c:bb:b9:69:2b:d3:6f:03:75:20:d1:4b:50:e4:4f:
         10:6e:b7:2f:e0:a2:24:63:eb:38:93:0d:42:1c:40:22:50:97:
         ea:a3:8a:4e:13:53:a8:76:1a:ce:32:39:89:1e:5c:48:d1:2b:
         ae:2b:53:00:08:01:c5:d7:d9:2b:76:94:c8:c3:b2:a3:ea:18:
         46:5d:64:03:23:0c:63:52:dd:9b:fb:54:7a:02:4b:09:a4:ae:
         d3:ce:65:1f:1f:54:a3:54:31:13:5c:75:a8:a9:21:a5:ee:a2:
         48:a1:8f:0a:37:2a:d4:54:a6:42:b0:26:07:98:de:66:92:74:
         92:b8:29:a1:c1:77:ce:77:4f:36:47:b0:49:7f:92:7b:c2:63:
         0f:72:90:33:22:0c:81:03:10:dc:18:de:86:f6:ab:78:2c:ab:
         42:a9:41:99:6f:1d:5e:1d:24:39:cb:7c:9c:b6:8a:b9:a3:36:
         4d:82:77:b4:21:bd:bc:fc:6f:d2:25:8c:07:72:38:8a:15:e2:
         2d:e6:70:77:38:e2:93:f3:77:5b:0a:d7:e8:4c:97:66:0c:7a:
         36:6a:9c:29:4f:bb:4d:8c:f6:18:b5:2b:2a:41:bd:7d:77:70:
         6d:c9:a7:2e:72:33:ab:06:5a:fe:e6:22:f8:92:e5:e6:cc:0e:
         2b:d8:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:00 2026 by rpki-client