Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/788f82dc-ebfa-3c0a-8171-fcb43fcdb3b0.roa
File:                     788f82dc-ebfa-3c0a-8171-fcb43fcdb3b0.roa (raw, json)
Hash identifier:          yZg/z2iT/ybdVpvCtBA7O7Viialj03Ou39nAt/ufrbU=
Subject key identifier:   BC:0C:C2:C0:1C:D7:F4:8B:72:11:8E:6C:BC:67:DA:27:09:D6:9F:3F
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584E7204D61663E8E6326B74D680
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/788f82dc-ebfa-3c0a-8171-fcb43fcdb3b0.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     30136
IP address blocks:        129.19.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d6:16:63:e8:e6:32:6b:74:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=dc4f4aa0-34d3-41b9-aabc-f26df31de12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:9b:14:dd:f1:41:df:09:42:0e:98:e7:41:
                    22:22:a7:6c:2b:d8:81:74:b4:c6:57:02:aa:d5:c0:
                    9c:12:a1:1e:18:af:25:a2:98:75:26:95:ce:d6:fe:
                    9c:d6:e2:12:9d:fc:b9:05:e9:74:75:70:9e:ab:a6:
                    55:77:9c:35:e6:81:45:60:f0:4c:b1:cb:ec:c8:68:
                    b9:a0:be:97:4b:16:a7:4f:71:e2:6d:16:2e:8e:f6:
                    73:ed:33:fb:03:e6:ca:0b:20:1f:56:e9:f8:68:db:
                    60:73:18:d4:45:17:21:85:3c:31:aa:7d:31:7a:40:
                    74:91:cb:4b:b9:01:17:6c:05:ac:19:b7:14:71:7c:
                    cc:3e:c6:fb:46:1a:4b:0e:75:85:70:fb:a4:f8:ba:
                    de:d8:66:d2:b4:13:1b:8f:3d:f8:d7:8f:00:09:25:
                    00:d6:3d:b7:d0:fb:aa:f4:6a:66:d8:e6:a7:ce:25:
                    09:9c:d3:d7:53:7b:44:09:ec:89:2a:0e:04:e8:c8:
                    06:ec:1b:17:59:6d:96:eb:4a:e6:8b:7d:08:fa:0b:
                    a0:84:72:e3:a0:06:dc:b7:c8:cc:a0:1a:00:ce:97:
                    5e:8f:5a:a5:16:57:b9:7e:d3:3f:bd:d3:a4:f8:21:
                    51:76:0e:35:8a:2e:c5:8d:ed:eb:0c:18:be:1c:25:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0C:C2:C0:1C:D7:F4:8B:72:11:8E:6C:BC:67:DA:27:09:D6:9F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/788f82dc-ebfa-3c0a-8171-fcb43fcdb3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:0b:8f:e1:69:ac:d2:35:c6:f3:03:b9:6d:ff:c9:d3:58:
         15:b2:59:1b:ea:a2:8b:da:38:20:fc:84:3b:ba:f8:3c:49:3c:
         e2:44:e3:b1:61:89:85:22:b0:2b:f2:9c:7a:d1:6c:b8:80:a4:
         e1:01:15:a7:4d:22:3d:55:d0:8a:91:a8:ed:1a:ff:c3:5d:64:
         60:4c:bb:c5:69:02:45:f3:4d:ec:67:cd:48:ba:a1:b6:24:d6:
         1c:67:1e:62:6c:8a:10:0a:da:91:0c:46:ef:e9:36:e4:6f:df:
         58:f6:3a:7a:8e:50:01:19:e0:e0:4a:b3:47:af:49:b0:7c:dd:
         16:fd:33:be:b7:82:8b:44:09:87:15:56:1e:1b:83:ea:ff:5b:
         41:cd:9b:4b:6c:4e:7f:b5:c3:2a:81:4c:49:f0:dd:53:22:45:
         7f:3a:89:bf:d9:dc:68:c9:a9:10:66:60:fd:8a:c2:d8:51:3f:
         31:ac:51:b8:62:0d:c8:ee:0d:75:8b:b5:0d:55:98:3d:33:4c:
         0d:52:2d:19:02:8b:e8:a6:ea:e2:58:35:f3:62:2a:1f:92:28:
         82:0a:c8:13:13:33:c8:35:d3:90:e3:93:77:91:4d:f7:b4:c0:
         a8:c7:ae:04:39:f8:f5:fc:81:e7:76:59:8f:34:43:53:b2:b4:
         de:f3:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:58 2026 by rpki-client