Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
File:                     0d245965-f93b-398c-ae46-d494039afdb2.roa (raw, json)
Hash identifier:          6ee9ll9UW7fBDcbKPNhjRUyhvrr0T9gwcMWPT5eMC6s=
Subject key identifier:   D3:9E:E4:6B:CA:4B:C3:BB:60:63:4D:A4:DE:09:42:E1:10:83:2E:8D
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F43285849DF5A7507BC6AF996ADBD08A0
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     5719
IP address blocks:        129.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:75:07:bc:6a:f9:96:ad:bd:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=fdb7085e-526f-4cdc-b4f3-69663a21c560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:e8:07:a0:9e:48:f0:e4:30:e0:b9:05:e4:
                    34:2d:a5:a3:15:36:52:47:a5:8e:44:be:6b:fe:4a:
                    74:1f:83:11:81:fd:82:3e:02:94:5e:32:aa:4e:fc:
                    74:51:29:12:4e:6c:fb:25:d1:75:6e:86:0e:11:5b:
                    1b:d2:ca:dd:f6:8d:5d:30:17:90:b3:f6:55:e6:2c:
                    ab:db:65:6e:3f:96:ba:4d:80:fa:58:43:65:58:c1:
                    9f:42:01:b3:4d:c6:d7:28:47:1d:6d:1d:c9:66:6a:
                    b7:f1:f3:d0:97:2b:33:5d:2f:3c:46:3a:c2:6a:43:
                    87:80:98:39:8b:0e:14:9c:95:0d:50:1b:fe:42:16:
                    66:50:f0:02:a3:c2:1c:1d:41:6e:1e:49:15:e1:57:
                    06:fd:e7:47:61:19:c6:8d:c0:f7:3e:e6:2d:90:ec:
                    12:8e:16:69:1e:a6:79:76:01:a6:1f:30:0c:06:1a:
                    26:bf:a8:20:df:2d:cf:64:7f:0d:b6:80:75:16:a5:
                    85:d9:9c:0b:d9:99:87:4a:fa:d2:51:b5:0f:ea:60:
                    40:ac:64:ac:42:b1:f0:c9:f8:60:b6:9e:e3:d3:c0:
                    3f:55:92:6f:99:7a:b1:30:fb:df:f6:3c:98:85:ce:
                    65:cb:d7:f2:d0:72:65:97:6c:c5:99:52:4e:6c:11:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:E4:6B:CA:4B:C3:BB:60:63:4D:A4:DE:09:42:E1:10:83:2E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:13:2b:39:90:44:57:b7:2a:0e:23:2f:92:6c:19:1e:ed:
         60:78:08:e7:a2:b9:5e:b7:0e:a1:53:45:7e:92:c9:f3:89:09:
         65:74:90:68:d3:23:d1:4a:58:6d:c6:40:2f:09:15:89:a8:44:
         06:15:77:35:81:dc:d3:80:e8:95:e9:76:74:03:b1:a3:de:12:
         e4:05:3a:06:64:bc:7b:03:22:ee:a9:17:13:77:45:fb:1c:c2:
         a0:15:6f:0d:79:4c:2c:d4:48:dd:3f:39:01:7f:a6:bc:43:66:
         a9:d5:5f:1a:0c:e7:1a:4a:19:4d:f9:21:c8:e9:03:b3:89:e9:
         10:b9:28:17:ee:90:73:e8:d8:25:d1:c1:fe:38:cc:15:ab:0a:
         6b:2a:19:af:bc:27:93:7e:9b:be:5e:e8:d2:35:2e:02:c2:a6:
         38:71:4a:41:a8:4e:98:3b:94:0d:74:ec:67:cc:89:65:97:7d:
         6f:c9:63:ce:3c:d9:c2:08:53:f0:e2:31:17:28:e5:fc:06:d5:
         d9:3d:c7:bc:b1:6b:7f:01:1d:bb:23:bc:36:d2:0e:02:a3:97:
         1c:17:d2:44:46:e9:1a:b4:ff:10:cd:71:79:1c:66:8c:a4:54:
         04:a5:4f:23:6a:a4:63:36:0b:24:97:83:db:68:96:03:39:7a:
         36:81:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:16:26 2025 by rpki-client