Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c0070b49-b28e-3284-9534-d1b8531b257d.roa
File:                     c0070b49-b28e-3284-9534-d1b8531b257d.roa (raw, json)
Hash identifier:          a+3Amou+cPvRqb/ChUKO3PwqdFpLLdr0b/8ElIVdQRs=
Subject key identifier:   0E:8A:8F:7E:7E:C6:85:94:2B:E3:A6:D9:C6:B3:16:E8:DA:EC:3C:77
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584E6B0A310C5ABB373B3D99A000
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c0070b49-b28e-3284-9534-d1b8531b257d.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     30136
IP address blocks:        129.19.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:31:0c:5a:bb:37:3b:3d:99:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=4275617a-55cb-4673-abca-f33de588f1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:eb:5c:50:13:43:e6:eb:31:74:a8:a2:07:
                    55:96:0b:fb:db:3b:6c:3f:ae:0c:72:37:f1:cc:e0:
                    b5:33:eb:5d:68:cb:c7:81:a5:2c:a3:96:1e:1b:70:
                    6a:a9:f8:48:b3:be:0d:20:13:c8:db:16:d9:a4:3b:
                    10:bb:9b:c8:67:f7:c2:4f:14:e6:20:18:8a:ed:e9:
                    81:09:90:49:e3:3d:23:6e:69:aa:dd:66:86:f3:bf:
                    3c:1b:26:2a:38:fa:37:ca:38:2a:40:39:98:09:68:
                    ff:11:71:bd:27:75:78:ad:df:ff:ca:44:3a:52:07:
                    d3:1a:b6:60:81:70:18:63:d6:85:6c:6a:49:4d:57:
                    f4:cd:61:fe:b8:4a:af:27:4f:80:2f:31:2d:3d:66:
                    e0:11:4a:5d:c0:c9:a6:c7:a8:09:f2:07:0a:fd:f1:
                    fc:3c:d6:60:f8:00:92:e5:46:1c:b8:bd:61:4d:1d:
                    65:40:ba:f5:6b:28:4b:7b:83:65:e9:62:7a:4b:ef:
                    d8:84:e1:94:32:59:39:5e:01:57:72:80:bd:90:a5:
                    29:99:09:b9:c8:9f:fd:9d:4d:05:e9:aa:cf:9e:6e:
                    fb:2f:c1:74:c5:f3:6f:35:8c:00:33:c8:56:d8:1a:
                    c1:26:a0:67:98:c6:f0:77:ba:9a:99:a1:df:ae:46:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8A:8F:7E:7E:C6:85:94:2B:E3:A6:D9:C6:B3:16:E8:DA:EC:3C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c0070b49-b28e-3284-9534-d1b8531b257d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:5f:c9:1b:c8:76:78:ea:d8:e5:fa:94:de:ae:fb:36:e1:
         d8:51:f2:42:cb:f0:9b:da:53:74:32:0d:e3:a6:4b:d8:39:19:
         22:bf:c7:92:dc:9f:d1:8e:b7:2d:ae:ae:36:a3:5d:20:40:18:
         e0:b8:01:9f:67:a8:72:48:c1:b4:9b:d7:6e:22:93:e3:1d:dc:
         42:76:20:c4:b4:f6:44:a6:59:b8:82:69:f9:f0:34:ef:2d:c6:
         2b:26:7c:9e:13:a5:37:0e:c5:6f:b9:0c:ee:f1:c3:9d:d8:ff:
         5d:8b:ab:70:24:51:42:97:37:89:91:08:ef:14:4c:9e:d7:c4:
         4a:e3:43:cb:53:99:a3:ea:9d:ef:6a:22:00:4f:58:7e:ea:c7:
         0a:98:f0:56:82:73:37:c7:5d:52:56:4a:2b:f7:1d:e7:22:63:
         4f:2e:64:86:d2:ad:50:47:b0:8a:b1:2b:43:40:44:0c:d6:49:
         b9:1b:bf:60:f2:36:5b:14:59:5c:1c:dd:8c:8e:cd:4b:36:fa:
         af:13:ad:89:b4:65:9f:6b:89:dd:4e:05:ac:01:02:2f:bb:64:
         a1:e9:f2:7a:09:7d:2b:19:2c:99:9b:00:64:fb:ca:05:ce:ba:
         7d:71:4a:a9:1c:0d:da:61:70:b8:44:a8:05:d9:19:1f:fb:12:
         57:28:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:44 2026 by rpki-client