Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/5426ec14-8366-35af-a3e1-dcd830fa0108.roa
File:                     5426ec14-8366-35af-a3e1-dcd830fa0108.roa (raw, json)
Hash identifier:          HXQVZHwt10mFGY0ghAL4+9RUCc66GetHnCex4Tynklo=
Subject key identifier:   5F:31:C9:94:D0:21:54:9F:87:46:FF:77:61:3B:69:8C:DB:D4:98:B8
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858496E49897CF02E1AFE53687780
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/5426ec14-8366-35af-a3e1-dcd830fa0108.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     12145
IP address blocks:        129.19.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:89:7c:f0:2e:1a:fe:53:68:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=93c88995-f324-460a-80d0-1bf16f25d3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:1d:75:eb:fb:a7:c5:50:85:1f:9a:a9:15:
                    d9:9e:57:fb:a6:0a:3a:4b:a3:4c:89:b0:e9:fa:fa:
                    7b:66:9d:ea:63:2e:bd:b4:c6:f1:1a:b3:a9:e5:7b:
                    c3:bb:a6:4c:1b:d7:0b:51:3a:e5:7a:e6:24:23:4d:
                    55:04:af:09:fe:9d:4d:cf:53:88:6e:21:16:e9:23:
                    41:b5:92:ef:67:e4:02:c2:90:8c:4d:7a:21:b5:7f:
                    d0:99:d5:7a:45:00:24:e8:f5:ad:46:fa:6a:73:e9:
                    3c:55:fc:92:b8:2a:87:c2:18:ff:70:d1:ff:0e:b8:
                    71:d9:26:56:48:0b:e4:4d:75:86:61:27:d1:a4:d8:
                    77:1d:f2:b2:b7:59:7e:30:4a:be:58:7b:53:e5:ed:
                    2e:0f:4b:73:2e:9e:1d:10:fd:ec:81:d0:3b:26:f3:
                    86:3c:c9:9e:ed:e7:85:16:dd:43:ab:4d:51:50:c3:
                    d8:b8:3d:20:ca:77:5a:14:a8:39:e9:a8:e1:e3:d6:
                    d0:2f:ba:a1:a8:fe:31:0c:2a:38:4f:35:25:56:aa:
                    b0:15:95:3a:17:0f:c9:a4:b6:d5:19:06:64:7d:50:
                    03:35:67:01:f5:d7:10:3d:ec:3c:78:10:4c:b4:9d:
                    91:53:32:9c:94:b8:81:fe:6d:76:05:16:eb:11:ae:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:31:C9:94:D0:21:54:9F:87:46:FF:77:61:3B:69:8C:DB:D4:98:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/5426ec14-8366-35af-a3e1-dcd830fa0108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:87:6a:44:12:40:a7:d6:2e:73:ff:dc:64:0c:ee:a1:aa:
         e8:8e:c0:a8:2f:68:93:dd:34:3c:28:13:9d:63:69:68:a8:8d:
         8c:d7:e5:d1:f5:b9:06:10:53:65:d7:22:8d:f0:09:36:c2:04:
         e9:38:f6:86:3b:e7:2a:1e:1f:ed:20:d9:de:97:00:32:99:b6:
         e3:b8:8b:b1:de:ed:dc:2e:e9:17:61:a1:45:2d:38:e1:cd:c9:
         e9:66:f2:66:47:93:3a:80:a2:24:4c:58:10:e8:30:35:91:f4:
         be:9d:f5:cc:3d:7a:6d:46:a9:50:0b:e0:92:fe:be:d6:1a:31:
         e1:c3:36:cd:bd:05:4d:b3:26:e2:50:81:ca:ab:75:07:5e:8c:
         80:50:ae:3e:e4:57:56:01:1e:1f:2a:4e:28:97:d2:54:93:a0:
         b1:bf:a6:8d:54:26:6e:d5:05:44:77:d6:ac:5e:a3:e6:9f:d0:
         07:65:f6:aa:b4:5b:1a:fb:65:4b:de:1f:61:0b:23:85:9d:06:
         ef:25:d8:5b:de:1a:f8:63:55:90:25:6e:fb:54:d7:61:c7:18:
         6a:3b:71:34:a8:93:18:40:2e:2f:3a:27:a3:a2:9d:93:46:8a:
         85:a1:da:cb:64:37:a8:a5:fd:52:92:3b:2c:e7:8a:7d:0f:77:
         28:d2:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:01:35 2025 by rpki-client