Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
File:                     0df303f2-b310-3346-ada4-7f81864f6c3f.roa (raw, json)
Hash identifier:          XxbZCF6cEHgy226a1JRqp9DqO8JkfZBpE2HyGk4RslQ=
Subject key identifier:   8D:C0:01:4A:CD:E3:CF:8D:68:11:9F:38:1B:95:09:16:E5:61:77:09
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584D9FB573A072EF0B9EE0957F80
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     396212
IP address blocks:        129.19.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:73:a0:72:ef:0b:9e:e0:95:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=d1eb474d-3ff3-4ad0-be48-a1a799fd5c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:45:70:90:b4:c4:58:89:33:5d:b7:57:23:
                    c2:9e:fe:d7:fe:be:ce:3d:ea:8a:97:3c:a2:c0:ca:
                    39:9d:61:f3:3f:36:68:c7:a0:c1:90:da:08:5d:57:
                    74:4e:6d:3f:c5:34:e9:49:9a:ce:c8:be:00:2e:23:
                    d6:0d:8b:2a:c1:dc:67:d3:46:40:f4:cd:b8:21:19:
                    1a:d9:c7:4b:39:7e:78:ba:50:a6:d8:7e:af:e9:6e:
                    f9:52:bf:2c:6e:04:b1:f8:42:22:9c:22:f1:1f:78:
                    08:c3:5f:14:05:c9:11:1e:00:62:bf:b2:73:05:62:
                    05:87:84:53:86:8e:15:67:87:b9:d2:52:73:8b:0b:
                    e7:f5:e7:3d:7f:d4:a8:2d:0f:e9:79:32:70:83:90:
                    02:ad:5e:57:5f:93:a4:41:68:90:54:5c:18:74:07:
                    75:d1:39:15:5c:92:c1:3a:06:9f:61:25:20:7a:f6:
                    96:64:ef:f5:b6:b8:2b:e2:0f:83:0b:96:21:3b:13:
                    8f:36:80:3d:1a:5f:e2:71:a1:c7:bd:b3:f3:0f:c9:
                    e5:48:c2:a5:df:b1:d6:c4:d9:4e:95:fd:c8:7b:8b:
                    ee:fa:0b:ad:a5:91:f8:45:f5:f7:39:ef:b8:6c:d6:
                    db:b5:4a:c5:77:2e:1e:74:ee:a1:90:1e:2c:df:7f:
                    22:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:01:4A:CD:E3:CF:8D:68:11:9F:38:1B:95:09:16:E5:61:77:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0df303f2-b310-3346-ada4-7f81864f6c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:2e:cb:c7:7f:fb:2e:64:1b:27:7f:43:34:b0:89:62:cb:85:
         de:eb:84:00:07:23:7d:2a:5b:0a:d2:00:6f:fe:e3:fa:f2:0d:
         2a:60:70:22:c5:82:45:4a:a1:a7:ad:a4:b6:64:7a:9e:2a:d8:
         f7:16:97:81:18:5e:39:7f:1c:3f:47:a8:9f:ae:5f:f6:9b:0a:
         c1:c1:50:09:47:53:d6:47:80:5c:23:f5:fb:96:8c:1b:e6:e3:
         ce:70:fc:93:f0:09:d6:b2:57:a4:c2:e5:1c:ee:70:02:3a:07:
         1c:e3:06:89:58:1d:98:ed:18:c1:b0:0c:37:4e:6d:1c:ec:20:
         d5:78:a2:91:be:fe:9c:ac:9e:d4:14:29:a8:72:9b:de:a0:b8:
         cb:92:a8:01:79:97:34:0e:b7:14:14:2c:82:3e:2d:88:b8:1a:
         db:7e:fa:52:6e:e6:db:90:8c:59:3c:2c:7c:98:d5:2a:93:2a:
         98:f0:ea:34:26:92:f8:3f:be:be:cb:06:83:66:be:66:d8:29:
         35:0a:fd:40:92:e8:81:14:6e:c6:4b:bb:ce:1e:6f:70:a0:30:
         2e:af:b9:b9:1c:e0:fb:ec:90:55:66:c3:16:b1:de:01:8e:80:
         40:7c:79:41:e9:f0:8b:33:a1:e0:b7:d5:df:1a:ca:a1:68:04:
         10:f1:02:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXOgcu8LnuCVf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
ZDFlYjQ3NGQtM2ZmMy00YWQwLWJlNDgtYTFhNzk5ZmQ1YzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQdFcJC0xFiJM123VyPCnv7X/r7OPeqKlzyi
wMo5nWHzPzZox6DBkNoIXVd0Tm0/xTTpSZrOyL4ALiPWDYsqwdxn00ZA9M24IRka
2cdLOX54ulCm2H6v6W75Ur8sbgSx+EIinCLxH3gIw18UBckRHgBiv7JzBWIFh4RT
ho4VZ4e50lJziwvn9ec9f9SoLQ/peTJwg5ACrV5XX5OkQWiQVFwYdAd10TkVXJLB
OgafYSUgevaWZO/1trgr4g+DC5YhOxOPNoA9Gl/icaHHvbPzD8nlSMKl37HWxNlO
lf3Ie4vu+gutpZH4RfX3Oe+4bNbbtUrFdy4edO6hkB4s338iTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3AAUrN48+NaBGfOBuVCRblYXcJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMGRmMzAzZjItYjMxMC0z
MzQ2LWFkYTQtN2Y4MTg2NGY2YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKMuy8d/+y5kGyd/QzSwiWLLhd7rhAAHI30qWwrSAG/+4/ryDSpgcCLF
gkVKoaetpLZkep4q2PcWl4EYXjl/HD9HqJ+uX/abCsHBUAlHU9ZHgFwj9fuWjBvm
485w/JPwCdayV6TC5RzucAI6BxzjBolYHZjtGMGwDDdObRzsINV4opG+/pysntQU
Kahym96guMuSqAF5lzQOtxQULII+LYi4Gtt++lJu5tuQjFk8LHyY1SqTKpjw6jQm
kvg/vr7LBoNmvmbYKTUK/UCS6IEUbsZLu84eb3CgMC6vubkc4PvskFVmwxax3gGO
gEB8eUHp8IszoeC31d8ayqFoBBDxApM=
-----END CERTIFICATE-----
Generated at Wed May 13 04:05:26 2026 by rpki-client