Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
File:                     f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa (raw, json)
Hash identifier:          Q26QwNej6L0gUU6oyFmpdjDOdkSEbQZCnmkMnPTTcwM=
Subject key identifier:   88:05:CE:AF:22:F4:31:F3:1D:9A:6B:44:DF:20:E6:DC:06:DC:43:07
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584CD210791B116C6F5DE7B94780
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
Signing time:             Tue 10 Feb 2026 21:07:35 +0000
ROA not before:           Tue 10 Feb 2026 21:07:35 +0000
ROA not after:            Mon 11 May 2026 20:07:35 +0000
asID:                     2496
IP address blocks:        129.237.2.92/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d2:10:79:1b:11:6c:6f:5d:e7:b9:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Feb 10 21:07:35 2026 GMT
            Not After : May 11 20:07:35 2026 GMT
        Subject: CN=2922ceea-6155-46af-a04b-41753ec07e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:fc:3a:c6:48:59:aa:50:b7:9c:ee:a0:a0:
                    83:3d:6a:d8:0a:79:e2:05:01:96:a8:f4:e1:8b:00:
                    8b:b0:c4:57:43:d2:c8:c7:a7:dc:02:73:86:06:90:
                    80:68:c1:bf:42:05:37:d1:56:ce:25:b5:b3:ae:9f:
                    31:a3:01:9c:5c:1d:75:62:73:a5:17:72:37:2b:1a:
                    97:d0:1d:78:2d:22:57:b8:ee:21:a1:f8:d7:fc:47:
                    b6:ef:79:02:c4:41:c4:5f:b1:e4:47:35:86:8d:2a:
                    9a:ce:c6:0c:43:93:4b:8c:58:38:ea:cb:a7:5e:86:
                    3d:4d:f8:98:de:1e:50:02:05:fd:ac:59:3d:1b:50:
                    5f:6d:3a:ad:7a:8d:26:30:82:3e:d6:3f:e8:ff:fd:
                    7f:cc:19:68:1a:20:79:c7:a1:bb:e8:94:da:04:c8:
                    af:a3:77:aa:9c:43:13:09:59:77:82:60:88:52:db:
                    22:1e:bf:7d:9f:dc:9c:42:59:3c:bd:0e:aa:00:14:
                    bc:c3:c6:65:e1:2d:1e:52:e1:8f:9a:74:1d:fd:35:
                    fa:15:97:1b:67:79:51:a4:49:1f:e9:16:1f:b7:4b:
                    90:89:0b:a6:b0:ba:23:23:2f:38:55:81:1a:08:2a:
                    62:ba:21:69:db:b9:81:b7:d1:d4:3b:b7:18:ba:8b:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:CE:AF:22:F4:31:F3:1D:9A:6B:44:DF:20:E6:DC:06:DC:43:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.2.92/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5c:47:a6:dc:1c:50:60:43:c1:ff:c8:6b:4c:6c:45:11:33:
         63:b0:2d:6c:c4:03:d4:e2:c7:d3:be:a3:97:33:70:40:40:69:
         35:81:c0:70:65:fe:75:a8:d5:42:35:11:04:76:12:d7:79:a1:
         78:d4:e3:cc:44:b9:b6:17:b1:cb:a6:52:23:a5:c6:34:38:84:
         e9:82:37:93:bb:08:15:8c:36:5a:3b:ca:eb:e1:58:c4:c1:a8:
         ff:7f:7a:2c:64:ab:5d:61:10:e0:52:d5:f7:3b:05:96:ae:83:
         20:a2:e6:ea:f9:c7:83:31:8b:af:91:da:3e:b1:b7:d7:94:67:
         82:64:75:6d:ff:4a:28:86:b9:74:04:77:ee:84:ca:e4:b2:da:
         c0:78:7e:cb:d4:45:b2:0b:4f:d3:63:1f:d0:0c:34:1c:3b:60:
         c7:27:66:3a:e8:1d:4a:63:15:0d:89:37:a6:57:2e:87:db:97:
         c3:80:af:6b:e5:85:fa:09:20:90:d0:d8:77:4e:e4:e7:9f:83:
         a1:37:0b:06:f2:a6:0c:5f:4a:f7:da:60:55:45:f0:02:61:3d:
         da:1d:c8:a7:7b:69:81:0e:6d:2a:56:45:76:72:62:54:09:b4:
         4e:f1:b4:e9:cd:c8:a4:53:16:8d:15:eb:ca:0d:6a:df:4b:de:
         65:64:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:02 2026 by rpki-client