Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0e7c471c-3297-32f3-90f2-b87a300efa8d.roa
File:                     0e7c471c-3297-32f3-90f2-b87a300efa8d.roa (raw, json)
Hash identifier:          0brzKINBWtKu9L8DNSDCESXVR+bWCfQNj20KM56zSYQ=
Subject key identifier:   4F:25:90:98:FE:92:FC:4E:21:57:D3:CA:03:FE:5E:A3:7C:22:FF:C6
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584F655D6F3DF221FFC232A6B180
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0e7c471c-3297-32f3-90f2-b87a300efa8d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     14041
IP address blocks:        129.19.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6f:3d:f2:21:ff:c2:32:a6:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=69e81281-fa39-4ba2-abf8-e9995efe607b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:f0:45:ae:41:98:fc:3c:b7:84:65:2a:6b:
                    32:d4:74:51:b9:e4:f3:6d:92:c4:95:2e:cc:8c:97:
                    40:44:0e:65:f1:89:c2:d5:6c:cc:5b:ab:ce:f6:43:
                    51:97:2d:08:fc:a1:4f:b6:ae:56:79:58:f8:0b:b2:
                    06:f1:a7:87:f0:c5:ca:ec:7c:6a:25:fd:71:b5:3b:
                    f1:64:f8:d3:7c:b8:b0:5f:52:74:ef:4f:55:17:13:
                    3e:3d:eb:ca:9e:15:2c:b3:d3:ca:01:52:dd:8e:c9:
                    67:63:44:32:57:d4:1c:79:41:e1:74:77:3b:78:d7:
                    42:3d:ca:54:fc:2b:cd:a8:12:55:2c:62:cb:41:70:
                    d1:d9:ca:67:4d:c2:70:00:ab:f1:c0:2c:f5:32:68:
                    6b:d7:7f:17:8d:dc:5c:55:e9:c1:28:e4:1a:d5:2b:
                    96:b8:1f:d2:9b:87:79:06:f0:e0:18:12:ac:2b:72:
                    ac:20:a5:57:33:b5:8e:fb:dc:c5:df:4e:57:41:5e:
                    62:08:ad:09:76:31:1f:e1:db:25:24:4c:19:07:b5:
                    17:54:2c:5c:e8:ea:6f:96:37:e4:9c:ba:26:bd:a1:
                    be:c6:1f:42:18:ac:26:f7:e2:61:1a:51:9e:7d:29:
                    a0:4f:26:57:d6:98:dd:1e:31:a4:52:76:69:20:0f:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:25:90:98:FE:92:FC:4E:21:57:D3:CA:03:FE:5E:A3:7C:22:FF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0e7c471c-3297-32f3-90f2-b87a300efa8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:96:26:10:41:69:75:39:88:e8:4c:93:28:c7:f2:5a:d4:6a:
         71:28:30:03:87:a7:4e:4a:f3:20:f1:87:9f:a1:91:6a:8f:a3:
         1f:0d:1c:01:61:e7:ed:20:66:42:86:77:b6:23:6e:52:8d:ef:
         9d:e1:c6:7a:a1:79:57:51:ed:52:fb:d6:b5:fd:3a:9c:da:e6:
         c9:ed:3d:e6:10:2d:34:73:e6:66:a8:bf:5f:ea:28:e9:bc:0a:
         62:4a:e0:05:72:e8:52:57:12:1d:d5:07:d1:cb:f7:02:8c:5e:
         53:46:e1:cc:3d:bf:0d:68:88:0b:0a:90:3e:2f:d8:b2:9a:c2:
         80:a4:95:8d:ce:c1:e1:ff:52:81:53:5e:5d:1c:4e:37:be:fd:
         4c:9e:79:3c:06:da:31:d4:b6:19:75:98:65:db:a6:8e:97:e2:
         97:47:4e:7f:39:1a:fb:c8:d9:1d:7a:df:09:e0:1b:b5:dd:5a:
         0d:3a:d6:23:2b:d2:fd:21:fd:c4:4f:24:93:fe:25:fa:98:65:
         8e:e6:21:ff:f5:b2:f8:80:df:a3:ac:28:ff:19:73:7c:31:96:
         dd:a6:6c:e7:0f:3d:01:1d:70:26:6f:c2:a0:19:8b:29:3c:0b:
         ef:3b:82:28:de:cf:00:7a:f7:fa:93:29:1f:1e:5d:f6:87:22:
         ba:c2:4e:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW898iH/wjKmsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy
ZmQ1MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
NjllODEyODEtZmEzOS00YmEyLWFiZjgtZTk5OTVlZmU2MDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7XwRa5BmPw8t4RlKmsy1HRRueTzbZLElS7M
jJdARA5l8YnC1WzMW6vO9kNRly0I/KFPtq5WeVj4C7IG8aeH8MXK7HxqJf1xtTvx
ZPjTfLiwX1J0709VFxM+PevKnhUss9PKAVLdjslnY0QyV9QceUHhdHc7eNdCPcpU
/CvNqBJVLGLLQXDR2cpnTcJwAKvxwCz1Mmhr138XjdxcVenBKOQa1SuWuB/Sm4d5
BvDgGBKsK3KsIKVXM7WO+9zF305XQV5iCK0JdjEf4dslJEwZB7UXVCxc6Opvljfk
nLomvaG+xh9CGKwm9+JhGlGefSmgTyZX1pjdHjGkUnZpIA9eCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8lkJj+kvxOIVfTygP+XqN8Iv/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy
ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMGU3YzQ3MWMtMzI5Ny0z
MmYzLTkwZjItYjg3YTMwMGVmYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5
ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl
MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2
ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKWJhBBaXU5iOhMkyjH8lrUanEoMAOHp05K8yDxh5+hkWqPox8NHAFh
5+0gZkKGd7YjblKN753hxnqheVdR7VL71rX9Opza5sntPeYQLTRz5maov1/qKOm8
CmJK4AVy6FJXEh3VB9HL9wKMXlNG4cw9vw1oiAsKkD4v2LKawoCklY3OweH/UoFT
Xl0cTje+/UyeeTwG2jHUthl1mGXbpo6X4pdHTn85GvvI2R163wngG7XdWg061iMr
0v0h/cRPJJP+JfqYZY7mIf/1sviA36OsKP8Zc3wxlt2mbOcPPQEdcCZvwqAZiyk8
C+87gijezwB69/qTKR8eXfaHIrrCTuk=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:47:38 2026 by rpki-client