Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
File:                     0d245965-f93b-398c-ae46-d494039afdb2.roa (raw, json)
Hash identifier:          Mhgu8FUslF/4o5UxtdvMCG25AiqsuGgDyEZS43QXkTM=
Subject key identifier:   AC:4D:DF:3D:BC:7D:A4:F7:4A:EE:4F:78:27:A2:12:34:4C:0A:BA:16
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F4328584AC0164691D7698A7FDBED0880
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     5719
IP address blocks:        129.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:46:91:d7:69:8a:7f:db:ed:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=7fe7c829-6b57-4af7-b105-3ad4da058f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:68:77:55:9f:6d:4a:9a:ab:13:8e:34:51:
                    86:53:f7:36:32:53:e7:c3:20:cd:94:eb:e9:7c:10:
                    73:bb:37:45:7d:a6:b4:49:fe:d9:af:82:be:7f:38:
                    e7:fa:8a:13:7d:33:a5:ad:30:9e:ff:10:e8:e8:e7:
                    1f:b7:d4:19:c5:21:09:16:9d:74:8a:dc:ae:42:78:
                    fe:d4:e6:f2:8d:f0:c8:0d:cb:8e:61:31:42:75:fb:
                    3b:2f:37:08:62:95:71:30:73:e8:9c:17:db:c4:78:
                    60:ae:15:d9:50:2e:50:1f:84:ec:44:c6:64:ce:2c:
                    27:ba:ec:04:e1:4a:66:10:94:68:2d:6b:f1:1b:a9:
                    28:7c:9a:7d:b7:ec:0f:08:72:59:fa:68:e9:fa:df:
                    ae:0e:f2:9b:84:2b:87:68:c3:46:2c:9f:3f:a4:af:
                    3a:ce:1d:13:d9:df:08:41:39:c7:c5:c8:5e:22:bf:
                    1a:16:9e:28:8a:ba:c1:eb:c5:85:d7:3a:3f:1d:e8:
                    d1:75:bf:26:06:91:7b:36:d7:3d:ed:4d:c9:bd:2f:
                    95:24:8b:5f:f1:cf:8b:09:54:cb:f7:fb:77:b6:a7:
                    2f:6e:d5:24:c2:87:fb:e1:73:cb:45:e3:a9:a3:00:
                    c7:cd:89:26:29:d2:06:f2:d5:cf:f2:0d:36:ff:e2:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:DF:3D:BC:7D:A4:F7:4A:EE:4F:78:27:A2:12:34:4C:0A:BA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:93:ed:32:83:ac:6a:52:9a:ac:01:95:f6:52:02:c0:1f:60:
         64:f2:be:9f:87:de:a2:ff:d6:e1:d2:fb:3f:c6:b7:13:10:2a:
         b2:e0:39:06:ac:1c:31:64:80:e8:0f:23:70:f5:34:31:c1:62:
         20:f4:76:df:50:14:e2:fd:d1:63:fb:68:1b:f9:65:6c:89:ca:
         68:db:78:7c:c3:ac:73:3c:e6:ad:e2:dd:c8:62:6c:4c:2f:7a:
         5e:d1:37:ad:8a:3f:03:8e:44:dc:8b:a0:c7:7b:b4:3f:1c:13:
         50:7d:f4:36:fc:91:ef:29:9f:d1:b7:c4:e0:08:5f:a7:fc:84:
         49:54:69:d7:39:bd:7d:95:4f:33:42:09:ab:17:98:96:4e:0f:
         14:dc:9b:4d:76:8e:54:90:3d:ce:31:5e:e5:96:ee:8f:e5:dd:
         c3:58:68:a8:95:a0:09:c0:43:d4:29:92:42:c6:8e:bb:cf:17:
         09:e0:6d:be:b7:2d:86:7b:5f:6c:80:e4:1f:2b:d4:88:a0:7c:
         d4:ef:b8:fe:e8:c0:cf:23:a8:0a:b9:40:7c:01:d3:64:79:99:
         3e:47:51:e8:4b:a8:33:1f:e8:60:15:9d:2d:03:d5:3d:9a:09:
         75:10:ba:ab:e2:b4:c7:6e:0d:ac:27:91:c7:fb:24:c9:11:0c:
         8d:87:da:66
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErAFkaR12mKf9vtCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjc5NjBhNDEtMzU5Ny00YjlhLThlNzktODBhZTYzNWNl
OGZmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
N2ZlN2M4MjktNmI1Ny00YWY3LWIxMDUtM2FkNGRhMDU4ZjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxNod1WfbUqaqxOONFGGU/c2MlPnwyDNlOvp
fBBzuzdFfaa0Sf7Zr4K+fzjn+ooTfTOlrTCe/xDo6Ocft9QZxSEJFp10ityuQnj+
1ObyjfDIDcuOYTFCdfs7LzcIYpVxMHPonBfbxHhgrhXZUC5QH4TsRMZkziwnuuwE
4UpmEJRoLWvxG6kofJp9t+wPCHJZ+mjp+t+uDvKbhCuHaMNGLJ8/pK86zh0T2d8I
QTnHxcheIr8aFp4oirrB68WF1zo/HejRdb8mBpF7Ntc97U3JvS+VJItf8c+LCVTL
9/t3tqcvbtUkwof74XPLReOpowDHzYkmKdIG8tXP8g02/+JMTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKxN3z28faT3Su5PeCeiEjRMCroWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2
MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFlNjM1Y2U4ZmYvMGQyNDU5NjUtZjkzYi0z
OThjLWFlNDYtZDQ5NDAzOWFmZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjc5NjBhNDEtMzU5Ny00YjlhLThl
NzktODBhZTYzNWNlOGZmLzI3OTYwYTQxLTM1OTctNGI5YS04ZTc5LTgwYWU2MzVj
ZThmZi5jcmwwHwYDVR0jBBgwFoAUKAx+lTalpqo5qdUE5Y0qI6zJIXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNzk2MGE0MS0zNTk3LTRiOWEtOGU3OS04MGFl
NjM1Y2U4ZmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgTEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARJPtMoOsalKarAGV9lICwB9gZPK+n4feov/W4dL7P8a3ExAqsuA5Bqwc
MWSA6A8jcPU0McFiIPR231AU4v3RY/toG/llbInKaNt4fMOsczzmreLdyGJsTC96
XtE3rYo/A45E3Iugx3u0PxwTUH30NvyR7ymf0bfE4Ahfp/yESVRp1zm9fZVPM0IJ
qxeYlk4PFNybTXaOVJA9zjFe5Zbuj+Xdw1hoqJWgCcBD1CmSQsaOu88XCeBtvrct
hntfbIDkHyvUiKB81O+4/ujAzyOoCrlAfAHTZHmZPkdR6EuoMx/oYBWdLQPVPZoJ
dRC6q+K0x24NrCeRx/skyREMjYfaZg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:51 2025 by rpki-client