Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0e7c471c-3297-32f3-90f2-b87a300efa8d.roa
File:                     0e7c471c-3297-32f3-90f2-b87a300efa8d.roa (raw, json)
Hash identifier:          +7QUnTv3zYmTyKDZo/89O1FZ98nMRNbftICjC6H72S8=
Subject key identifier:   53:D4:43:FA:03:0B:FA:89:3B:AA:71:AA:E0:C4:99:06:32:A7:8D:54
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F43285849C1BC26EA65C95DB3723C9B60
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0e7c471c-3297-32f3-90f2-b87a300efa8d.roa
Signing time:             Mon 05 May 2025 22:23:56 +0000
ROA not before:           Mon 05 May 2025 22:23:56 +0000
ROA not after:            Sun 03 Aug 2025 22:23:56 +0000
asID:                     14041
IP address blocks:        129.19.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c1:bc:26:ea:65:c9:5d:b3:72:3c:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: May  5 22:23:56 2025 GMT
            Not After : Aug  3 22:23:56 2025 GMT
        Subject: CN=74f3ddf6-e727-4ca6-96e4-7a980ada9184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:6e:aa:01:f7:98:2a:a7:d6:50:22:b4:2c:
                    29:23:79:36:91:92:44:09:d6:39:1e:56:e2:55:6b:
                    ab:75:b1:ee:ad:97:bf:4e:25:5d:76:e0:a7:9c:61:
                    e6:42:28:0e:8d:dd:c5:30:9e:2c:91:37:ce:3c:7e:
                    9c:a8:eb:27:b6:c1:ff:0b:0c:c0:6e:a4:32:b4:35:
                    11:b8:ae:bc:cc:78:e1:23:e0:67:ee:b9:73:70:9f:
                    a1:d9:28:71:ea:3e:83:34:ea:9b:f0:44:ab:00:a1:
                    95:9d:fb:ab:8d:50:97:e7:54:74:d9:d3:1f:dd:3e:
                    14:01:46:4a:0a:5c:fa:2a:74:e1:46:73:86:12:7f:
                    1b:d2:d1:37:13:6f:08:94:8e:7d:03:db:24:60:93:
                    06:18:58:6f:91:3e:c0:36:8b:75:83:86:19:c1:11:
                    a9:22:c0:1c:3a:28:d6:76:ed:69:60:28:10:05:6e:
                    89:08:99:70:30:11:bf:bf:e5:1f:fd:c9:85:c0:fa:
                    a1:56:a9:bb:1f:72:b9:97:1d:ea:f9:97:85:ca:f0:
                    e8:45:8c:90:6a:43:94:e5:42:6d:2c:59:9d:14:1e:
                    6d:cb:54:d7:0b:0f:68:4e:41:7e:83:ae:a8:c9:4d:
                    12:e0:0a:bb:14:45:d8:53:14:ab:10:b8:55:2d:95:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D4:43:FA:03:0B:FA:89:3B:AA:71:AA:E0:C4:99:06:32:A7:8D:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/0e7c471c-3297-32f3-90f2-b87a300efa8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c2:9d:da:2e:b3:67:fa:66:dd:1b:41:b0:46:7a:eb:f0:ec:
         b8:4e:f7:df:4f:67:e7:10:df:8c:71:5b:75:85:a4:5e:38:27:
         19:ed:45:16:b3:20:35:3a:b8:09:19:2c:3a:37:b4:50:61:cc:
         94:aa:9a:8e:e9:3b:b0:44:a9:e9:23:47:50:93:92:b0:0a:31:
         f4:0a:80:36:22:ac:64:f7:84:de:e0:51:dd:63:1b:5f:50:f6:
         ea:df:99:02:93:0a:85:33:b5:be:14:4e:cb:03:02:64:5a:ef:
         79:93:5f:97:d7:2c:dd:20:27:37:33:19:9a:fc:84:3c:8d:ee:
         6f:78:71:63:90:fc:cd:2a:69:c7:a9:b2:b2:e3:e7:ce:e4:ec:
         56:cb:89:12:48:29:b5:5c:57:73:99:e8:fe:40:e9:2c:de:c2:
         a3:e5:53:92:01:bc:60:c6:7f:3f:82:00:15:89:67:6a:13:5f:
         3d:4f:d2:c3:4f:e2:7c:b6:b2:89:1a:98:07:c5:2b:aa:c5:8a:
         e6:82:f9:1c:53:6f:f9:79:98:70:ca:b3:5f:88:5c:f3:40:a6:
         57:db:89:dc:30:60:bc:9e:fc:d7:02:d0:25:43:c4:b0:12:1e:
         60:90:05:be:86:e0:0c:b0:60:fd:e7:9d:1c:44:7f:47:a5:2f:
         05:f9:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:13:17 2025 by rpki-client