Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53190931-ea19-32bf-a915-8c6173b1fb90.roa
File:                     53190931-ea19-32bf-a915-8c6173b1fb90.roa (raw, json)
Hash identifier:          4p0CRoBDGBfGefFwUt5W9GXL4BVSZQOAlmAUKao+Tr8=
Subject key identifier:   5F:93:BA:43:97:27:2B:FF:9E:23:FF:F1:F8:11:8F:1D:C2:F6:A2:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D747004B9BD8A9CDBB8D2BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53190931-ea19-32bf-a915-8c6173b1fb90.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        129.44.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:04:b9:bd:8a:9c:db:b8:d2:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=eeccf9b3-0724-4fa7-b7bd-841ca539bc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:1a:af:b5:91:3e:d5:90:76:81:3d:0b:eb:
                    ce:10:ed:a1:fe:6a:ff:56:b4:4e:cd:7d:e7:c7:43:
                    70:08:4f:bb:11:de:8b:a7:b0:51:21:ef:27:4c:27:
                    58:06:3b:16:cd:f6:4d:c1:9a:76:5e:36:de:a7:f9:
                    e8:f4:88:a9:ce:23:c6:6b:6d:3c:f4:c2:40:d4:fb:
                    69:ec:e7:4a:14:3c:34:33:e2:1c:08:26:5b:6f:59:
                    e2:09:f3:62:84:ac:7a:04:a3:c3:a4:32:b4:e8:e9:
                    e0:6d:46:95:4b:0e:ee:15:12:bb:a7:07:3c:40:f1:
                    11:e9:d6:6b:75:af:d7:58:a0:42:63:ea:41:fc:56:
                    65:2f:89:38:f3:46:ab:0a:28:2d:ef:fd:97:ad:2f:
                    fa:13:2e:23:5b:bf:b3:0d:cd:dc:68:eb:00:c2:76:
                    d4:30:73:36:8a:3c:58:b7:94:93:51:a2:4f:7e:f0:
                    65:e2:b4:ba:78:a9:3b:7f:0e:23:0e:f2:cc:fb:99:
                    e8:6e:ee:1b:82:8c:52:77:82:1f:f9:e7:5d:77:89:
                    39:87:27:2d:de:44:73:fc:ef:cd:25:07:e8:81:3c:
                    af:72:0b:e8:5d:9e:e6:51:6f:a9:a4:cb:df:f6:ac:
                    42:dc:bb:5c:c8:d3:47:ae:36:0b:ad:d0:71:b7:00:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:BA:43:97:27:2B:FF:9E:23:FF:F1:F8:11:8F:1D:C2:F6:A2:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/53190931-ea19-32bf-a915-8c6173b1fb90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.44.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:30:58:03:3c:32:72:7f:87:12:8e:2d:b7:f2:3c:47:0b:64:
         ec:17:79:b9:69:0d:fe:f8:9f:6a:47:05:e5:78:8d:fe:61:61:
         fd:6e:ae:44:a0:d8:1d:83:10:7b:24:17:ce:2d:9e:b1:a0:74:
         b0:86:e1:68:4e:72:f9:99:0b:f2:6d:3b:86:01:4a:06:61:57:
         fe:4e:42:6a:12:67:7a:81:84:58:5a:55:b9:2a:ed:c3:75:19:
         40:a2:a3:4f:35:18:bb:7e:e7:11:ae:f8:6c:d7:db:45:c2:db:
         e5:82:1d:5d:31:2e:01:45:89:93:ee:a6:34:34:33:f3:71:0c:
         50:c4:81:0b:68:90:59:df:1c:e8:3f:ab:a5:97:cc:70:2d:26:
         14:ff:51:ca:1f:5a:a3:b7:a7:9b:f3:c6:ff:a0:79:22:94:46:
         e9:90:5e:5d:9a:35:17:33:c7:9d:f1:26:4f:be:b8:e6:36:bf:
         c0:53:cb:93:bd:08:f1:ac:74:aa:9e:6f:19:ce:5c:b6:a4:1f:
         a0:a8:ec:ca:68:9a:4d:6d:a9:31:e0:b6:d4:3d:82:67:0a:f1:
         61:d3:fc:c9:71:37:72:5d:bd:4f:fd:f9:73:d8:0c:7c:54:af:
         c1:25:b0:2c:ff:2d:9f:f7:62:7a:21:84:a2:b9:13:42:e4:c7:
         48:3b:c0:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAS5vYqc27jSugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZWVjY2Y5YjMtMDcyNC00ZmE3LWI3YmQtODQxY2E1MzliYzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCEar7WRPtWQdoE9C+vOEO2h/mr/VrROzX3n
x0NwCE+7Ed6Lp7BRIe8nTCdYBjsWzfZNwZp2Xjbep/no9IipziPGa2089MJA1Ptp
7OdKFDw0M+IcCCZbb1niCfNihKx6BKPDpDK06OngbUaVSw7uFRK7pwc8QPER6dZr
da/XWKBCY+pB/FZlL4k480arCigt7/2XrS/6Ey4jW7+zDc3caOsAwnbUMHM2ijxY
t5STUaJPfvBl4rS6eKk7fw4jDvLM+5nobu4bgoxSd4If+eddd4k5hyct3kRz/O/N
JQfogTyvcgvoXZ7mUW+ppMvf9qxC3LtcyNNHrjYLrdBxtwD1EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF+TukOXJyv/niP/8fgRjx3C9qIzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTMxOTA5MzEtZWExOS0z
MmJmLWE5MTUtOGM2MTczYjFmYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgSyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKgwWAM8MnJ/hxKOLbfyPEcLZOwXeblpDf74n2pHBeV4jf5hYf1urkSg
2B2DEHskF84tnrGgdLCG4WhOcvmZC/JtO4YBSgZhV/5OQmoSZ3qBhFhaVbkq7cN1
GUCio081GLt+5xGu+GzX20XC2+WCHV0xLgFFiZPupjQ0M/NxDFDEgQtokFnfHOg/
q6WXzHAtJhT/UcofWqO3p5vzxv+geSKURumQXl2aNRczx53xJk++uOY2v8BTy5O9
CPGsdKqebxnOXLakH6Co7Mpomk1tqTHgttQ9gmcK8WHT/MlxN3JdvU/9+XPYDHxU
r8ElsCz/LZ/3YnohhKK5E0Lkx0g7wDo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:03:37 2026 by rpki-client