Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa
File:                     a98512e7-344c-36be-b82d-198e7f9783ca.roa (raw, json)
Hash identifier:          YryWg/DrpIyysAI2CBS+Js/gBSNrsL7dox//7qkJMhk=
Subject key identifier:   FD:39:6C:77:EC:06:FB:B3:0C:33:35:1C:62:D6:9B:62:70:3E:2C:D0
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584D6AAA75010C4B1FF57FD72800
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14593
IP address blocks:        135.129.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:75:01:0c:4b:1f:f5:7f:d7:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=fcc04a3d-dd92-4d0f-a41b-8fdc0e5458b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:c4:38:bb:4c:9a:05:74:8a:fb:f2:a8:f3:
                    93:05:70:ce:f5:94:54:03:cc:70:d8:3f:68:88:98:
                    87:b3:66:a1:cd:d3:42:e8:eb:d3:13:a7:f9:b5:f1:
                    23:ce:bc:7b:04:97:ec:7a:92:e0:3d:ca:4b:b4:e4:
                    f8:42:a9:03:2b:c1:51:91:cf:64:1a:84:75:61:5a:
                    17:c9:22:7d:26:55:f2:43:7d:70:b6:49:9b:ee:0d:
                    aa:48:a5:ef:57:6b:94:78:23:d5:e8:21:e5:9f:48:
                    c6:ef:5c:d2:1b:d8:b3:6e:99:4f:81:03:6c:4b:e0:
                    67:26:dd:73:5d:dc:53:6a:6e:0d:4c:43:01:c3:b5:
                    bf:8e:36:87:bf:ab:95:25:af:a8:12:0c:b3:17:d9:
                    d1:c8:c4:53:85:29:21:6b:47:47:11:bf:82:5d:cf:
                    2a:22:a8:28:68:ee:27:92:ca:fd:8e:f8:ee:fc:54:
                    49:bb:46:d0:2d:09:03:75:4c:c6:22:94:81:99:37:
                    1e:6e:63:61:48:92:95:af:e8:35:f2:d6:7b:59:ea:
                    18:a6:c5:8a:dc:c6:52:b8:f6:df:56:15:17:96:32:
                    99:ba:43:e7:da:2b:15:ff:d7:85:6c:fe:2c:41:2c:
                    5f:b6:80:f1:42:57:10:e9:4a:f9:5e:83:3b:26:d2:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:39:6C:77:EC:06:FB:B3:0C:33:35:1C:62:D6:9B:62:70:3E:2C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:95:28:5c:ee:14:6b:5b:b3:70:f9:6e:3d:33:b8:64:76:8e:
         74:45:ef:b1:fb:4d:57:01:4a:8a:25:d6:64:27:48:e3:26:5d:
         76:18:74:01:28:f6:4c:a7:0a:60:a9:29:53:06:81:d6:32:25:
         dd:8b:f9:d4:b3:e7:61:99:0a:63:8a:11:24:f4:49:7c:1d:0c:
         45:33:28:f7:07:34:b5:bc:a0:58:08:4f:01:ef:65:3e:8f:1a:
         3f:ae:fa:fb:e7:5e:51:c2:11:00:f3:c1:80:33:b5:55:d4:53:
         db:b1:1b:43:d0:fe:89:ce:ee:f8:ba:29:42:c9:d1:37:09:8d:
         97:25:f0:5a:84:88:75:f4:d3:5c:38:62:cd:f7:8d:a4:d1:04:
         32:ee:f7:5e:13:ac:b2:e4:7e:aa:ad:b1:99:4d:0b:87:28:e7:
         6b:08:bb:f2:db:7f:0a:af:02:1d:cb:91:49:e8:7e:3d:24:12:
         f3:9e:52:f6:8d:14:27:0f:c6:18:6b:97:cb:62:9b:75:23:1c:
         3a:02:be:9f:a8:b6:94:f9:c2:b6:22:36:99:15:fd:ea:61:6a:
         dc:9a:3a:b2:49:6b:8c:21:8f:d7:6d:9c:4d:56:dd:f0:07:3b:
         33:75:ca:bb:fc:9f:6d:49:42:28:28:d1:21:51:b2:b7:95:27:
         84:a5:dc:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnUBDEsf9X/XKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ZmNjMDRhM2QtZGQ5Mi00ZDBmLWE0MWItOGZkYzBlNTQ1OGI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRXEOLtMmgV0ivvyqPOTBXDO9ZRUA8xw2D9o
iJiHs2ahzdNC6OvTE6f5tfEjzrx7BJfsepLgPcpLtOT4QqkDK8FRkc9kGoR1YVoX
ySJ9JlXyQ31wtkmb7g2qSKXvV2uUeCPV6CHln0jG71zSG9izbplPgQNsS+BnJt1z
XdxTam4NTEMBw7W/jjaHv6uVJa+oEgyzF9nRyMRThSkha0dHEb+CXc8qIqgoaO4n
ksr9jvju/FRJu0bQLQkDdUzGIpSBmTcebmNhSJKVr+g18tZ7WeoYpsWK3MZSuPbf
VhUXljKZukPn2isV/9eFbP4sQSxftoDxQlcQ6Ur5XoM7JtLIxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP05bHfsBvuzDDM1HGLWm2JwPizQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYTk4NTEyZTctMzQ0Yy0z
NmJlLWI4MmQtMTk4ZTdmOTc4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGh4EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmVKFzuFGtbs3D5bj0zuGR2jnRF77H7TVcBSool1mQnSOMmXXYYdAEo
9kynCmCpKVMGgdYyJd2L+dSz52GZCmOKEST0SXwdDEUzKPcHNLW8oFgITwHvZT6P
Gj+u+vvnXlHCEQDzwYAztVXUU9uxG0PQ/onO7vi6KULJ0TcJjZcl8FqEiHX001w4
Ys33jaTRBDLu914TrLLkfqqtsZlNC4co52sIu/LbfwqvAh3LkUnofj0kEvOeUvaN
FCcPxhhrl8tim3UjHDoCvp+otpT5wrYiNpkV/ephatyaOrJJa4whj9dtnE1W3fAH
OzN1yrv8n21JQigo0SFRsreVJ4Sl3LE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:04 2026 by rpki-client