Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4265008f-3b4c-3399-b947-c689ea5e2dfc.roa
File:                     4265008f-3b4c-3399-b947-c689ea5e2dfc.roa (raw, json)
Hash identifier:          iNpdEhgFpZYAhjU9lJEyJhZqvbuKB0++Z7FGRgOvpwA=
Subject key identifier:   C1:B1:DA:4F:2A:DC:6F:5E:4C:D2:EF:11:62:A5:4C:B9:B7:2E:F0:A2
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584CC7772E803DEDDA377294FD80
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4265008f-3b4c-3399-b947-c689ea5e2dfc.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     4181
IP address blocks:        129.189.0.0/16 maxlen: 24
                          167.237.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:2e:80:3d:ed:da:37:72:94:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=804f4d5b-4e6a-40db-942d-5fcde22e6e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:91:8b:d8:75:f0:bf:d2:35:02:ec:26:06:
                    fc:ac:33:83:99:d8:5c:cf:56:9f:39:75:b7:48:49:
                    a5:9f:5a:65:1b:76:66:d0:44:97:1e:3c:b7:e5:f5:
                    24:cd:c2:ce:48:d5:ef:09:4d:5c:f2:c4:79:59:aa:
                    7c:bd:b2:d5:a9:17:13:c2:99:ad:5f:08:c3:e5:a3:
                    43:11:1d:a0:15:bf:47:ca:16:ee:53:82:3e:0d:a1:
                    40:e9:1c:b8:d5:8d:1d:4d:d3:eb:87:50:88:b5:c7:
                    58:1e:c7:41:95:42:62:a2:62:20:00:52:a4:a0:b8:
                    4d:df:d0:2e:4c:ee:c6:db:97:94:fe:11:c5:ee:14:
                    7b:78:01:2c:ee:8b:92:c3:6b:2f:5a:82:38:48:ea:
                    df:92:35:b0:83:a3:a1:ec:88:74:54:34:f2:d9:18:
                    37:53:4e:8f:3a:d2:65:bd:6b:97:12:ef:75:de:11:
                    e6:b9:13:65:6b:02:1b:0f:1c:17:83:3b:b6:83:24:
                    87:00:4a:17:d5:09:0d:04:87:5d:82:a7:68:5e:67:
                    46:db:88:b2:56:b4:45:33:35:9f:c7:c0:15:64:0e:
                    04:6a:d6:e8:2d:a3:c7:cc:a2:a1:68:2b:1c:51:3c:
                    fd:2c:3d:95:2d:68:5d:79:46:f2:b3:df:aa:bf:d7:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B1:DA:4F:2A:DC:6F:5E:4C:D2:EF:11:62:A5:4C:B9:B7:2E:F0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4265008f-3b4c-3399-b947-c689ea5e2dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.189.0.0/16
                  167.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:6b:79:c2:51:36:30:71:b6:45:f6:e0:87:45:ed:b0:d0:
         2c:a5:85:56:f3:01:2b:1a:fc:c9:24:b6:aa:55:b0:2a:16:dd:
         5b:1a:cb:1d:e1:e3:bc:cd:ec:c6:85:b1:96:82:14:1f:21:02:
         3d:d5:b0:af:2e:1a:ad:ae:b7:c0:09:db:5e:bf:fd:d2:59:f8:
         3e:a7:09:33:9b:32:91:9c:f5:1e:ce:33:af:64:1e:b0:66:0b:
         23:26:e3:2a:1c:aa:5d:b1:b5:a0:74:b5:67:b0:77:55:4c:13:
         7c:3f:55:38:1f:36:8d:3b:57:23:dd:84:b5:b9:bb:f1:c0:76:
         bb:fb:e9:aa:da:06:39:e9:14:65:5d:c3:b6:b3:83:57:12:6f:
         f4:42:40:fd:bb:20:e2:d1:70:2a:a6:ec:66:28:c2:b8:a5:b3:
         c3:89:63:50:e6:fb:23:88:46:a3:5e:a7:44:bf:89:5e:36:e0:
         60:ce:33:bf:b4:36:21:36:4e:b3:4c:36:11:19:da:58:bb:6a:
         bc:a2:fc:92:de:c5:6a:38:d2:53:53:78:54:00:42:5a:f9:96:
         27:d3:c6:ac:99:ca:2b:86:3d:5f:15:7b:0e:88:e8:40:09:ff:
         c8:00:a1:bd:d7:6a:61:69:09:c8:9b:bb:ff:47:6b:bf:59:3d:
         3d:35:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:39 2026 by rpki-client