Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d1778909-636a-34cd-9058-a31e640179df.roa
File:                     d1778909-636a-34cd-9058-a31e640179df.roa (raw, json)
Hash identifier:          pTZ75iKlz4U1rFIGdXDXWZrS+vgftorQL0bJMSuniPc=
Subject key identifier:   B6:91:73:C1:07:F6:49:D6:2E:51:4E:8D:27:69:DC:94:41:4E:1A:E1
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5FDF59F0BC55DE997A7B8C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d1778909-636a-34cd-9058-a31e640179df.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     2914
IP address blocks:        129.250.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:59:f0:bc:55:de:99:7a:7b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=c3a7b014-40aa-4a4e-9932-6b00eb6a7518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:84:ed:33:11:2e:c7:03:3d:49:d7:3f:cd:
                    7c:bb:e4:c2:85:f8:37:f7:c1:bf:07:85:4e:fb:da:
                    df:b7:96:c0:37:31:8b:f7:aa:f4:ba:84:a6:6c:d2:
                    42:69:38:11:c7:9c:bd:5a:b6:e9:7d:3f:d8:bf:fd:
                    e5:cd:5d:6a:9b:9b:b9:11:34:a3:e7:b0:d4:30:98:
                    02:17:12:2c:11:c2:cf:c0:1a:22:b0:2a:9f:01:f6:
                    5e:2d:83:5e:1b:0d:f3:06:9d:05:e5:a5:f1:94:2f:
                    3b:b3:b9:76:f3:b7:bd:f5:14:10:54:ad:85:a0:7f:
                    d7:73:fe:23:ca:46:a2:f5:1b:48:90:19:b9:72:7a:
                    56:61:a5:46:5e:95:69:56:20:b5:61:ef:f0:f2:21:
                    56:f1:4c:93:cb:be:5c:43:a3:f1:1e:bf:e2:9e:68:
                    06:03:06:0c:02:6e:df:22:43:e4:52:f2:36:81:9c:
                    e1:0f:62:7a:4a:3e:3a:38:27:82:43:04:b8:74:e5:
                    2d:f4:f5:15:6f:68:cf:e5:fc:0e:fb:57:90:2c:69:
                    82:76:60:81:85:18:4b:45:13:87:ec:07:d6:c4:f4:
                    d3:92:de:d8:2e:e5:58:5c:f5:14:52:98:1f:d6:fc:
                    3a:1a:63:0b:32:8d:4a:81:be:6a:e5:d2:67:17:d0:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:73:C1:07:F6:49:D6:2E:51:4E:8D:27:69:DC:94:41:4E:1A:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d1778909-636a-34cd-9058-a31e640179df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:15:c5:e4:48:af:6c:32:f7:c0:83:3e:c7:3e:77:1d:07:e6:
         7b:88:ce:b8:85:9d:97:13:df:cc:bf:8c:ec:e0:ce:92:5e:e6:
         5b:81:b3:88:b1:97:2a:39:ca:4a:20:27:aa:af:48:38:1b:2a:
         32:c4:d0:69:b2:98:74:fd:b9:bc:0b:06:2a:61:4a:ae:9c:e7:
         e6:9c:c3:32:93:f9:08:e4:7f:2a:a0:7d:b6:47:eb:55:39:f3:
         b2:53:70:71:6d:00:29:fd:64:33:ce:c6:30:0a:8a:b1:2f:8b:
         7c:00:1d:db:b7:5d:c4:f7:2c:5f:cf:8f:25:a7:c3:33:b4:b3:
         b2:03:ab:fc:54:54:30:75:31:c8:64:51:65:bc:09:de:01:35:
         d9:e7:b3:b4:ae:97:cb:3d:0c:1f:f1:ff:dd:f5:06:b8:28:31:
         0f:1f:e5:74:29:f3:34:68:8d:cb:cf:d7:8e:f0:a6:6e:fb:de:
         08:aa:77:9e:52:e1:f4:bd:2f:3b:68:05:e4:16:28:01:c7:f6:
         1d:df:4a:cf:b0:f2:01:0e:10:68:d6:70:39:b2:d4:31:46:32:
         70:1c:fb:0a:46:36:de:5a:2e:a2:cb:1f:01:6f:20:28:de:43:
         b2:d8:ac:ed:c9:79:dc:7a:2f:0e:f4:b4:b3:e4:dc:9a:23:10:
         95:eb:ce:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:52 2026 by rpki-client