Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/458843d2-129b-355c-b517-0c8fef96f905.roa
File:                     458843d2-129b-355c-b517-0c8fef96f905.roa (raw, json)
Hash identifier:          S7Qte7PzWbA/v/Aw7tLQA6XB6bcheudUB0TkQM2p7pY=
Subject key identifier:   13:26:8B:48:FA:C8:98:AE:08:C1:CB:31:F4:51:D0:A5:39:E2:2D:4F
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F43285849849EF2DB49EE306B2967ACC0
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/458843d2-129b-355c-b517-0c8fef96f905.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     17015
IP address blocks:        129.19.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f2:db:49:ee:30:6b:29:67:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=7a26ea5f-6d5d-4703-bc9a-604c9dc5026f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0f:f6:ac:e4:ec:97:00:86:62:b2:99:8e:ab:
                    f4:54:37:1f:3d:9b:a4:96:ea:eb:ee:43:07:35:df:
                    38:16:79:1e:0c:9a:58:ae:cd:64:1c:4c:4e:b1:be:
                    5a:4d:a2:61:7f:f5:c0:12:f0:16:43:2d:bd:36:f2:
                    97:a9:89:b1:d4:d9:83:1e:92:02:e4:5c:21:7f:dd:
                    0a:a6:c7:5b:f8:d3:00:1f:a1:eb:9e:6d:7e:df:2e:
                    32:bf:07:e8:71:39:cd:01:f3:91:dc:f9:0e:dd:b3:
                    9d:df:20:25:03:e2:11:f1:3e:6f:09:8b:82:75:80:
                    18:54:f8:3c:20:79:73:4d:86:37:11:c8:15:f4:91:
                    a5:c2:a5:22:4c:51:00:f5:75:06:72:58:82:ae:44:
                    c7:9e:55:aa:5a:09:13:4e:cf:9c:ff:f2:df:f0:89:
                    fe:30:0c:fd:e3:d4:c0:9c:58:cd:04:9f:3c:99:a8:
                    54:26:6f:2a:11:38:54:f5:28:4b:7c:d4:f3:ec:6b:
                    a9:79:fc:bb:f9:1e:8d:a9:23:ca:f3:ab:38:44:7d:
                    96:89:44:13:98:52:ca:ce:9a:db:03:45:a4:5d:b6:
                    66:b1:0d:13:68:23:78:b2:02:c5:37:7b:7c:89:d0:
                    57:57:90:2e:13:9f:9d:15:48:60:b5:e2:a1:d6:f1:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:8B:48:FA:C8:98:AE:08:C1:CB:31:F4:51:D0:A5:39:E2:2D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/458843d2-129b-355c-b517-0c8fef96f905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:9f:1d:42:b4:60:61:56:2c:1a:6e:7e:c0:04:cf:fd:32:
         32:fd:5d:ce:ab:46:07:05:84:ff:00:85:ad:1d:da:36:e4:6a:
         3e:9b:cb:4e:b7:93:ed:4e:5c:10:a1:9e:49:3f:36:ef:24:2f:
         7b:ac:12:63:ff:07:b9:f8:0b:49:36:ef:49:41:55:bc:11:43:
         98:99:95:17:60:f2:1c:1d:8d:77:53:f2:2b:50:3b:ca:d4:45:
         03:97:3b:5e:b1:ee:fd:cb:36:f1:cf:ea:ad:ab:d9:88:ac:d6:
         81:a0:c6:54:06:1a:77:8c:84:b7:a1:52:ee:bb:3c:14:62:bc:
         3a:51:5d:42:32:75:22:12:9d:e8:a6:e5:91:23:b2:90:98:fe:
         9f:04:bd:40:b1:64:eb:a3:2a:95:0d:36:5d:16:94:b5:f7:30:
         da:51:c0:28:a6:da:01:f5:76:98:3f:d2:af:2a:e0:f0:2d:20:
         2d:ff:29:17:95:8c:05:e0:e9:06:62:20:22:1e:ad:72:86:03:
         29:f1:ab:90:d0:ef:3a:3d:72:3a:c8:45:ca:fd:35:4d:15:8c:
         ca:5b:a6:6c:cf:ec:cd:67:86:fa:3a:23:b4:88:0f:23:2a:a1:
         25:49:98:c5:df:14:14:64:70:01:d8:55:2e:39:ea:71:7c:81:
         fa:66:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:23:43 2025 by rpki-client