Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7979923-a890-39a0-a32b-a47071dd1ea0.roa
File:                     b7979923-a890-39a0-a32b-a47071dd1ea0.roa (raw, json)
Hash identifier:          3u/9VrychftP3b62QF2lSobFEzSeR4mxJ2+jMECQ7cM=
Subject key identifier:   C2:B1:B5:E7:31:00:2D:90:EA:FF:BF:75:D8:18:0E:88:CF:39:19:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FE339B0E7C0054BE85200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7979923-a890-39a0-a32b-a47071dd1ea0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        129.44.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:e3:39:b0:e7:c0:05:4b:e8:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=4b37940b-faa0-47fd-b4ee-b120d98450de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:cb:79:18:f1:b4:4b:bd:9c:6c:a3:20:1e:
                    3c:de:e5:e5:48:a8:56:fd:75:b1:f0:8b:6e:9d:c6:
                    93:71:6f:3b:e4:55:a1:48:60:dc:6a:af:bb:c4:9c:
                    6a:70:46:55:e3:e9:37:de:46:91:bf:84:34:51:f4:
                    96:3c:ff:d1:ee:b9:fe:8c:65:77:0d:2d:e6:b3:bc:
                    d9:71:b7:15:b3:4a:81:29:61:ac:b6:c8:52:e7:21:
                    68:52:f3:bf:23:41:5d:c3:88:fd:da:bc:24:7b:da:
                    47:69:f1:54:8a:6c:be:76:ee:0a:66:1c:33:d2:d2:
                    fa:be:6b:ce:63:d0:56:08:a3:e9:4d:ab:9b:cf:a1:
                    aa:89:84:a5:39:20:4c:f8:8d:97:3f:fb:b4:c0:89:
                    df:78:ef:0d:65:4b:38:d9:25:d1:67:0c:85:fb:9f:
                    bd:c6:36:90:df:6a:ba:1a:70:48:e7:c7:a3:d7:09:
                    2e:a7:28:95:99:66:4f:74:91:01:a3:6c:47:f1:47:
                    cf:d3:a5:c9:69:b4:d5:dd:a8:2b:18:94:6e:8e:93:
                    c4:90:1e:9d:cd:9a:f8:d4:5c:9e:6d:6d:05:39:1b:
                    17:42:e9:d6:0b:24:23:cd:94:be:86:cc:16:99:a7:
                    49:64:72:15:34:a0:75:84:5e:e6:79:c6:7d:e4:a8:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:B5:E7:31:00:2D:90:EA:FF:BF:75:D8:18:0E:88:CF:39:19:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7979923-a890-39a0-a32b-a47071dd1ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.44.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:24:df:0d:83:5f:68:17:6a:46:a4:8c:6d:90:9c:3e:6b:b7:
         fb:96:eb:44:d4:18:b6:d9:fd:09:43:ad:69:a6:08:e9:dc:44:
         83:fe:9c:62:2f:74:4d:34:9c:2e:d9:ab:12:1d:ba:7c:8b:76:
         02:84:85:0f:c3:8c:43:bd:a5:fc:e4:8b:d0:fd:72:3e:d1:3c:
         a5:59:ca:f2:50:2b:8b:74:5f:df:55:d8:76:fc:cd:e5:f7:ef:
         fc:29:1c:b6:e1:00:5b:36:1b:6c:75:2d:00:e0:dc:ea:2f:ed:
         51:6e:a7:cc:af:f1:5f:c0:8c:ff:ea:98:63:e9:bb:0f:5b:b8:
         95:9a:f2:1b:39:62:bd:95:b1:c8:88:63:f1:85:01:fe:c1:da:
         09:a3:39:d3:d8:68:26:5d:b4:af:ce:de:bd:31:8c:74:6a:2f:
         14:93:57:cf:5b:c3:0b:0c:bc:eb:91:75:68:7f:94:73:63:12:
         fb:33:c5:25:92:c1:e3:24:3d:7e:d5:39:32:b2:6d:42:3c:cb:
         71:67:0a:62:32:fa:ad:b9:07:67:a6:15:fa:cf:ef:4c:08:27:
         5d:ce:81:9b:42:1f:06:e4:e8:76:2a:ca:a8:f3:ba:89:96:f8:
         80:0e:4a:21:50:ec:64:8e:f3:95:a4:a3:01:4b:51:53:5b:7b:
         f8:f9:1f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:38 2026 by rpki-client