Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa
File:                     d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa (raw, json)
Hash identifier:          hk8F2LErdaoUTCx4+7oioM5eIqkvS9FH5xOImyv847E=
Subject key identifier:   3F:EF:AE:35:C7:D2:FE:83:CA:D3:CF:D7:B3:52:C5:24:15:BE:28:AE
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F4328584E7FFA3A5A2C0E1E5FA051D600
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     65
IP address blocks:        129.19.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:3a:5a:2c:0e:1e:5f:a0:51:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=5d5e428e-c197-44f3-af08-bd03079740a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:47:51:87:2a:7a:3e:0a:9b:30:c1:22:15:
                    a0:f9:0f:46:92:c9:e3:0e:e9:b0:10:c5:71:bb:6f:
                    79:77:8c:a8:9d:b9:f4:0b:9a:f1:4a:cb:6a:cb:60:
                    7b:b7:85:b1:f5:20:f6:be:f1:68:79:60:22:b1:54:
                    43:7c:0d:61:f5:0f:c8:03:8f:ea:76:99:0a:af:61:
                    36:fd:85:c2:5b:a4:8b:60:11:09:7c:7a:ca:a6:7e:
                    85:00:b0:b5:c0:f0:0f:19:76:b7:7a:c2:7c:4a:4b:
                    bf:be:7a:41:bb:1b:d0:55:8e:58:fc:55:70:cc:04:
                    f1:3b:c8:5c:1c:44:ef:0b:6d:b0:54:5c:70:05:68:
                    37:99:a0:fc:a8:30:e9:ba:02:6c:d6:26:66:b7:1b:
                    74:31:e2:23:32:de:a3:70:b7:d9:b9:39:88:5c:43:
                    15:dd:91:95:04:7b:f9:2d:1f:a6:f2:32:3c:de:cf:
                    a3:3a:a2:ba:e0:c4:03:af:ed:1b:e5:1a:be:cb:c1:
                    78:aa:aa:9a:62:1b:52:6c:ac:86:6b:36:3f:79:63:
                    7a:6b:6c:a7:7a:c7:0d:93:cd:59:b0:10:d4:a2:fd:
                    ba:a0:72:a5:67:49:88:16:61:c8:6e:27:f8:30:98:
                    18:00:f4:ac:0f:19:0f:5c:d9:9b:90:dc:6b:cc:11:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EF:AE:35:C7:D2:FE:83:CA:D3:CF:D7:B3:52:C5:24:15:BE:28:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:01:f5:49:3b:af:57:b4:34:99:bf:ce:78:1c:19:c6:14:f0:
         26:cb:5f:c6:7d:66:89:35:e5:bc:38:b8:19:bb:9b:c1:e0:e3:
         79:5d:1d:09:cb:f1:ea:03:e1:6e:9e:e1:b9:9d:31:89:c1:41:
         30:8c:64:57:f9:28:03:2f:9d:16:b6:30:70:25:4b:ad:da:8d:
         98:de:a6:27:31:46:ad:c2:a3:62:ae:f6:f1:c8:13:97:67:2c:
         1a:26:7f:8b:8a:a3:6c:b2:74:16:46:71:b2:9c:b0:dd:ad:64:
         c7:c8:6e:07:8e:d0:a2:1c:5f:e4:56:47:f9:2f:87:ba:a1:38:
         6f:2c:a5:dc:37:aa:36:e4:e1:7e:0c:16:6b:d4:09:71:83:31:
         51:d8:3d:5a:8a:59:4f:a6:18:c0:72:c0:12:9d:c4:ba:9a:2f:
         9a:03:01:c2:21:20:8f:c8:53:ef:e8:0a:a5:52:6b:67:65:c9:
         5a:b3:c0:af:37:be:ac:7d:8e:40:e1:77:02:d0:3c:6f:3c:51:
         bd:50:be:37:f0:22:33:3b:43:e2:a6:b1:53:3b:cf:66:d1:8d:
         b9:be:8d:c4:25:f9:1b:0d:38:dc:85:67:cf:c4:72:21:17:ea:
         f4:f0:04:22:dd:4e:c8:bb:fd:72:34:05:26:6b:e4:6f:36:c8:
         d8:62:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:32 2026 by rpki-client