Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/0169d127-4969-38ab-8bb0-cf56c7c50348.roa
File:                     0169d127-4969-38ab-8bb0-cf56c7c50348.roa (raw, json)
Hash identifier:          LmxM4ftajk3OduvyRw5sZdQVY08t5lR7aRr3mRaJDOs=
Subject key identifier:   3E:81:55:5C:DF:EF:8C:20:A7:EF:9E:77:84:81:AE:8D:84:E8:72:06
Certificate issuer:       /CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
Certificate serial:       010D0C9F4328584A3B7AF82A76BBAD2A0B29CD80
Authority key identifier: CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/0169d127-4969-38ab-8bb0-cf56c7c50348.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     19782
IP address blocks:        129.74.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f8:2a:76:bb:ad:2a:0b:29:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=2e4ece6a-baea-4464-af5c-c4d7d84d4df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:98:17:ba:24:c4:d5:9e:b3:d7:55:8a:b1:
                    10:a2:7a:d1:0f:c1:e0:73:67:aa:f7:0b:e2:cd:98:
                    ec:b5:57:81:69:0c:25:6d:d2:28:a4:d5:6e:d7:22:
                    34:8f:f5:43:c5:24:ed:c3:76:95:df:e9:1e:fa:86:
                    88:b7:f9:df:51:34:ef:05:c7:07:cd:a1:b2:08:f9:
                    dc:f5:c6:f9:23:4f:f5:23:59:38:b4:ca:31:6a:93:
                    85:ad:60:7d:4f:4a:46:c3:f3:82:33:0f:c9:8d:f6:
                    4d:80:28:16:83:5c:a4:c9:09:01:62:d3:4b:11:89:
                    a6:a3:5e:bc:38:a6:c9:d9:20:f0:a6:7d:3b:cd:49:
                    02:b3:35:03:70:c2:29:ec:ef:1c:b4:59:ca:c6:f3:
                    00:3d:a0:be:fb:48:93:58:d7:ed:26:97:d9:48:97:
                    5e:53:44:bd:7b:65:b5:94:f0:34:ce:1b:f7:55:a5:
                    71:17:d3:32:37:68:fa:b9:1d:c0:ab:6e:20:f4:34:
                    6e:d6:f7:9f:00:04:ac:0c:8b:50:4f:17:46:32:8f:
                    8a:d5:66:a4:b2:8d:4d:91:14:18:5e:91:aa:2f:4f:
                    7a:3c:b4:7d:ed:d4:6c:7e:35:36:ab:9a:05:cf:f8:
                    5a:11:b7:59:e9:ff:ae:70:21:ac:d7:3c:50:80:c7:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:81:55:5C:DF:EF:8C:20:A7:EF:9E:77:84:81:AE:8D:84:E8:72:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/0169d127-4969-38ab-8bb0-cf56c7c50348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.crl

            X509v3 Authority Key Identifier:
                keyid:CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:f5:0a:62:26:b5:09:ae:a8:10:55:3e:05:b4:67:17:4c:
         26:cd:5d:08:ee:7c:39:ec:e9:76:b8:f9:0d:ce:c1:d4:ae:15:
         15:07:48:17:19:f6:da:9a:ea:2e:c2:59:05:af:86:ab:d5:1a:
         30:ec:85:45:fe:6a:5a:d2:ab:f5:78:26:f5:83:13:ae:e7:a1:
         50:21:3b:25:e5:e0:e6:b8:cf:f7:7f:39:c6:2b:44:55:67:cb:
         c9:4a:4f:08:ad:b4:e1:5f:7f:91:62:9e:3e:27:1c:2b:66:a3:
         d7:60:ce:af:21:00:c5:51:41:6b:66:18:b6:87:15:ff:e1:09:
         46:0b:a7:4f:18:b4:04:46:64:65:31:34:39:c8:74:58:3c:d2:
         fe:cb:56:24:b7:47:90:d5:96:be:f9:d7:b3:98:13:f5:6e:e0:
         7c:5a:49:89:d0:e4:57:4b:9f:f8:d2:51:22:82:14:63:c7:ad:
         f9:cd:69:de:9d:7e:e3:c4:88:c3:76:a2:d5:6b:92:05:08:02:
         14:57:2a:86:1d:da:36:2d:46:4e:f6:f6:f6:e6:c6:93:97:6f:
         5d:fb:0b:e0:34:56:0b:dc:98:60:06:27:c9:e0:9d:54:d0:d8:
         23:0e:e6:b5:87:dd:e8:9d:fd:d9:c4:4e:fd:55:85:72:3e:65:
         c7:86:49:67
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEo7evgqdrutKgspzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA5MzBlMWYtMWEyNS00ZDg1LThjYTEtMTJmZWQ1YWEy
N2ZkMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
MmU0ZWNlNmEtYmFlYS00NDY0LWFmNWMtYzRkN2Q4NGQ0ZGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCeYF7okxNWes9dVirEQonrRD8Hgc2eq9wvi
zZjstVeBaQwlbdIopNVu1yI0j/VDxSTtw3aV3+ke+oaIt/nfUTTvBccHzaGyCPnc
9cb5I0/1I1k4tMoxapOFrWB9T0pGw/OCMw/JjfZNgCgWg1ykyQkBYtNLEYmmo168
OKbJ2SDwpn07zUkCszUDcMIp7O8ctFnKxvMAPaC++0iTWNftJpfZSJdeU0S9e2W1
lPA0zhv3VaVxF9MyN2j6uR3Aq24g9DRu1vefAASsDItQTxdGMo+K1Wakso1NkRQY
XpGqL096PLR97dRsfjU2q5oFz/haEbdZ6f+ucCGs1zxQgMc+9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD6BVVzf74wgp++ed4SBro2E6HIGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDkz
MGUxZi0xYTI1LTRkODUtOGNhMS0xMmZlZDVhYTI3ZmQvMDE2OWQxMjctNDk2OS0z
OGFiLThiYjAtY2Y1NmM3YzUwMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDA5MzBlMWYtMWEyNS00ZDg1LThj
YTEtMTJmZWQ1YWEyN2ZkL2QwOTMwZTFmLTFhMjUtNGQ4NS04Y2ExLTEyZmVkNWFh
MjdmZC5jcmwwHwYDVR0jBBgwFoAUzaxIUZ54C4ggnpZv9phOpo9EhDAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDkzMGUxZi0xYTI1LTRkODUtOGNhMS0xMmZl
ZDVhYTI3ZmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgUowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARdz1CmImtQmuqBBVPgW0ZxdMJs1dCO58Oezpdrj5Dc7B1K4VFQdIFxn2
2prqLsJZBa+Gq9UaMOyFRf5qWtKr9Xgm9YMTruehUCE7JeXg5rjP9385xitEVWfL
yUpPCK204V9/kWKePiccK2aj12DOryEAxVFBa2YYtocV/+EJRgunTxi0BEZkZTE0
Och0WDzS/stWJLdHkNWWvvnXs5gT9W7gfFpJidDkV0uf+NJRIoIUY8et+c1p3p1+
48SIw3ai1WuSBQgCFFcqhh3aNi1GTvb29ubGk5dvXfsL4DRWC9yYYAYnyeCdVNDY
Iw7mtYfd6J392cRO/VWFcj5lx4ZJZw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:43:15 2025 by rpki-client