Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/c5244d5b-3acf-3b16-bbcf-143674499c22.roa
File:                     c5244d5b-3acf-3b16-bbcf-143674499c22.roa (raw, json)
Hash identifier:          IpZBeafKsaTEMs6ozDn4DRg+7VIje+4cQMGnTIEbLl8=
Subject key identifier:   F9:C2:CA:9F:77:35:82:89:29:2C:46:12:F5:5A:D9:6C:3D:32:F4:02
Certificate issuer:       /CN=eab20ab2-0bb0-40f1-b861-843a84fe42fa
Certificate serial:       010D0C9F4328584A72ED6FAF81FC2C82F41E7258
Authority key identifier: AD:2F:B3:1A:8C:35:DB:8C:AE:4B:E4:F6:FE:5B:6F:66:59:E5:21:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/c5244d5b-3acf-3b16-bbcf-143674499c22.roa
Signing time:             Tue 08 Jul 2025 09:41:19 +0000
ROA not before:           Tue 08 Jul 2025 09:41:19 +0000
ROA not after:            Mon 06 Oct 2025 09:41:19 +0000
asID:                     26046
IP address blocks:        129.123.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:72:ed:6f:af:81:fc:2c:82:f4:1e:72:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab20ab2-0bb0-40f1-b861-843a84fe42fa
        Validity
            Not Before: Jul  8 09:41:19 2025 GMT
            Not After : Oct  6 09:41:19 2025 GMT
        Subject: CN=7f3e716b-c4c2-4411-b43a-4533ea383b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a6:f7:c6:1b:8a:02:3c:e1:d4:d3:69:79:ae:
                    c0:ac:92:9e:51:13:0f:25:ad:12:8a:7b:0c:a1:f1:
                    ca:9d:b6:92:50:dc:6b:b3:b7:54:9d:b8:59:4a:9f:
                    dc:a7:f2:ca:4a:af:e3:02:79:c6:df:bf:2e:83:67:
                    d1:c0:18:b4:fb:21:05:ee:cd:64:03:3f:8b:41:97:
                    63:c2:4f:1f:8b:ce:51:c1:c6:79:bb:11:90:07:3e:
                    3f:ed:af:d5:1a:83:32:d9:81:04:a8:75:04:3e:8f:
                    13:42:bf:2c:63:69:c5:07:12:a6:65:76:aa:9b:5d:
                    cb:7e:7a:17:91:f4:7d:36:48:56:4d:63:03:4b:70:
                    54:c9:28:8d:9f:8b:a7:fa:cb:9c:b0:c4:75:9c:93:
                    78:45:cb:69:75:83:f6:ad:7e:a5:e0:21:d9:bd:d7:
                    85:c6:64:ea:b3:04:d8:1d:ab:82:6a:c8:c2:2e:9d:
                    5b:35:d4:b5:87:11:75:0a:a8:be:5e:b0:6b:29:7d:
                    ce:ca:11:c2:da:bb:de:f7:85:ea:7e:91:7b:e8:6f:
                    43:68:19:2d:a9:af:65:08:16:9a:ea:67:fb:50:81:
                    d1:9c:78:5e:99:e0:49:ea:1e:f6:2c:f0:37:57:27:
                    2d:0c:cd:c8:69:30:bc:b9:ae:81:f1:ec:b1:7f:f8:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C2:CA:9F:77:35:82:89:29:2C:46:12:F5:5A:D9:6C:3D:32:F4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/c5244d5b-3acf-3b16-bbcf-143674499c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa/eab20ab2-0bb0-40f1-b861-843a84fe42fa.crl

            X509v3 Authority Key Identifier:
                keyid:AD:2F:B3:1A:8C:35:DB:8C:AE:4B:E4:F6:FE:5B:6F:66:59:E5:21:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/eab20ab2-0bb0-40f1-b861-843a84fe42fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:25:36:e9:4a:a4:65:a2:a2:3d:c4:a1:6c:f0:8f:86:b7:
         ca:43:3d:e6:8e:be:9f:a1:eb:32:0a:a1:97:e5:12:97:86:8b:
         7e:5d:b0:19:14:98:01:ef:4d:87:04:ab:bc:ea:7c:51:e5:98:
         8d:81:b5:d6:df:92:d2:6d:4c:34:5a:8b:b1:ca:4b:9c:e4:4b:
         70:ce:e0:23:c4:70:08:5e:c8:e8:99:28:a3:ff:a8:62:9b:8e:
         5e:4d:87:37:77:c3:79:08:26:9f:a6:ce:46:b4:f8:8c:4d:99:
         cd:a5:0d:25:45:5b:06:24:bf:25:ab:7c:2e:29:db:2e:6e:35:
         c4:77:ba:ab:d1:b9:4b:08:b7:c4:b6:ec:cb:20:d2:00:a2:7f:
         36:04:4d:c0:36:75:d6:fe:9f:19:4d:14:97:9e:29:e8:39:dd:
         4c:a0:fb:f8:a2:c2:a9:08:6a:84:85:01:8d:c0:b4:00:8e:e6:
         be:b5:63:f2:17:f2:36:89:0b:08:66:50:04:3b:5b:e9:ee:cf:
         60:0d:97:cd:30:62:49:48:09:84:28:f1:c2:0a:a5:8c:5a:6c:
         96:35:c2:69:86:f8:ec:c1:c1:7b:ad:8f:b8:cc:e3:68:c8:32:
         77:5d:4a:e6:45:5f:9f:88:3a:bc:e9:5c:5c:76:a6:94:18:48:
         7e:74:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:38 2025 by rpki-client