Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
File:                     b758d768-536e-3bf2-96a6-ecc0554032dd.roa (raw, json)
Hash identifier:          90GBH2+DqCCuZkK2WIU1f6eT3WH7lpJEy46YcAfe04M=
Subject key identifier:   9D:71:69:13:D3:D2:87:BD:58:E6:A3:F1:05:7E:49:69:50:DA:51:5D
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584F225D08825812D12270BBCB00
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     14041
IP address blocks:        129.19.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:08:82:58:12:d1:22:70:bb:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=0c9447e3-f88b-4f01-a24b-569a04c244b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:a1:fe:06:f7:5f:47:03:7a:2f:01:5c:e5:
                    91:68:e9:a3:dd:d3:96:48:a8:53:0a:61:25:63:5b:
                    97:75:47:cf:26:c1:bb:0d:2a:6f:5d:ad:4d:2d:df:
                    cb:fb:03:58:e1:cb:f9:8c:f2:fb:4f:dd:b8:ba:b7:
                    24:24:4d:50:8e:44:7c:f0:9b:39:3d:f4:a0:72:18:
                    c3:0b:d4:bd:4a:3b:f8:5c:44:b8:24:94:70:db:1b:
                    c3:6d:cd:e2:08:eb:3f:01:27:54:4e:97:70:9a:9d:
                    29:b9:ff:9f:f7:80:f6:38:48:dd:cd:cc:34:89:91:
                    69:4e:57:a8:dc:ac:81:7f:32:fd:53:11:40:c6:a3:
                    67:4f:d5:aa:0e:43:49:bd:09:69:2b:b4:44:d3:e4:
                    8c:ae:24:22:4a:5d:01:6d:5f:53:93:14:7f:98:53:
                    b0:cb:74:07:42:53:46:27:b5:93:95:4d:dd:f5:53:
                    42:7d:a3:bb:2d:53:80:ca:8f:4a:57:16:7c:b0:31:
                    d6:fa:9b:ce:bf:12:af:97:ee:1c:67:d2:43:07:70:
                    91:c1:3b:74:86:99:04:20:08:dd:48:b1:a4:52:b5:
                    41:f6:ca:6c:7e:27:65:f1:b5:e4:35:84:01:b5:74:
                    58:7f:01:46:92:7f:d5:31:18:3e:4a:67:de:99:d9:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:69:13:D3:D2:87:BD:58:E6:A3:F1:05:7E:49:69:50:DA:51:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/b758d768-536e-3bf2-96a6-ecc0554032dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:40:63:1f:18:4a:95:47:95:d2:a3:f0:91:5e:5d:da:ac:62:
         63:c2:b5:6d:36:e5:56:37:d4:75:a1:e5:67:38:af:4a:a8:c0:
         12:03:82:36:89:a1:da:c2:36:e7:5c:6e:c1:ff:d9:35:31:44:
         5f:e7:71:cd:a4:70:59:4b:45:7b:cb:e3:b4:a9:67:4b:fb:6d:
         a2:23:e0:7f:17:c1:bc:b8:2f:17:4c:0a:2e:7b:4c:dd:e1:a1:
         16:b0:a3:c0:bf:8f:0e:60:d5:06:d8:11:c1:03:3b:a8:ed:d8:
         45:2e:ae:48:bd:e5:cb:3c:ab:85:12:b6:f7:2f:2b:45:c9:91:
         ba:fa:5a:6f:f6:5f:22:fa:01:25:57:ed:ea:39:23:e8:31:17:
         c7:9c:81:79:d4:1f:2c:78:6f:5d:d1:d8:12:3d:f4:1a:87:a6:
         4e:50:16:f4:dc:b1:9f:6a:fc:1d:55:11:db:60:6c:53:8e:a7:
         76:eb:50:44:ef:2d:69:cd:6b:84:9e:4c:21:fd:d2:e8:08:a1:
         6d:19:01:b0:62:fe:66:e7:81:6a:02:1c:18:4e:8a:24:00:f1:
         7f:17:52:ac:6c:2a:15:84:10:c5:52:26:6c:c4:b7:11:18:bd:
         9a:49:0b:f1:b8:59:71:5b:46:ee:e1:ef:e9:9a:c7:14:4d:45:
         55:6e:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:17 2026 by rpki-client