Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
File:                     f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa (raw, json)
Hash identifier:          awR8KU8mve8HjgZqWI5iRMkdRXCz2sdzgtd/iWmA7xM=
Subject key identifier:   C0:3D:76:D5:5F:E6:02:B8:71:41:C1:B6:6F:B7:0C:F2:82:58:F8:14
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584F348278E3007F73384B838C80
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     2496
IP address blocks:        129.237.2.92/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:78:e3:00:7f:73:38:4b:83:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=459938c5-630e-45de-9823-14a1f42d4bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:49:a1:c6:63:0c:b5:98:91:dc:05:93:1a:
                    1f:31:b2:62:3c:6d:e2:7f:92:de:cf:7e:1b:c1:7d:
                    ea:74:eb:31:01:3c:78:82:a4:9d:d6:74:11:a3:d6:
                    fe:11:cd:a1:ad:fe:ff:90:37:54:ee:42:0e:b3:2e:
                    ec:7a:94:d1:25:e1:1d:70:4d:5e:11:7e:17:8a:51:
                    e9:c6:20:ee:49:41:a5:04:de:5f:e6:8d:dd:a8:f8:
                    8f:8d:2f:b4:72:a0:d5:a4:88:bb:0e:a1:3d:cf:17:
                    1e:97:54:22:51:53:fa:c0:84:f3:51:62:c9:94:7f:
                    ad:57:40:be:b2:ac:00:1b:77:cf:90:56:64:21:da:
                    bb:24:e1:25:63:86:c5:46:a5:2f:a1:72:df:0a:72:
                    b8:29:af:23:e6:41:b5:99:12:54:86:88:73:0e:f2:
                    14:25:2e:dc:47:c8:ac:ee:b3:05:35:45:8d:9f:df:
                    8b:9f:6b:a5:73:e1:4e:26:4f:2f:e3:2c:31:52:a4:
                    e7:e3:e9:ec:3e:22:a1:e9:a9:14:14:60:06:0a:5c:
                    50:7f:4a:b5:74:cf:ac:3a:1c:8d:26:fa:20:4b:d7:
                    13:dd:2b:2c:e0:45:f6:63:db:51:8f:9d:bb:fa:48:
                    02:6e:ef:06:15:1e:5c:2f:2d:06:db:7f:ce:fd:10:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:76:D5:5F:E6:02:B8:71:41:C1:B6:6F:B7:0C:F2:82:58:F8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.2.92/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:90:db:9d:92:db:fe:d7:44:77:cc:2b:dd:7c:b1:2b:69:de:
         ac:67:c4:05:c0:64:9d:d2:71:39:3d:9c:e3:60:20:5b:b6:d8:
         59:7b:2f:da:46:bf:d8:22:9f:d1:9b:f3:cd:98:4b:74:33:68:
         4c:85:7e:57:33:ad:1e:9d:61:96:6a:26:2e:be:a7:cd:f6:90:
         ae:47:04:41:42:bf:35:b3:40:f2:91:ab:db:5a:f6:70:a3:99:
         1f:36:49:ca:ce:26:0d:4b:cf:36:f5:b8:d7:e1:df:62:be:c9:
         70:16:3f:33:b1:9b:b9:7e:0e:9b:a6:61:1f:f8:8d:6a:55:db:
         e2:9e:9d:29:8c:80:dd:5c:50:2d:55:3b:34:0c:14:68:8e:60:
         50:c3:35:12:14:52:72:bb:c2:eb:49:8a:69:8c:c9:f6:6c:f6:
         3c:01:62:e5:cc:61:23:4f:2d:7c:29:83:87:f1:e2:c4:a1:45:
         54:10:6e:0c:1b:bf:0d:35:36:85:11:f0:fd:40:03:1d:81:fd:
         0a:8f:10:fe:55:63:ba:ff:f0:a4:39:61:15:d8:47:c2:aa:0d:
         df:60:82:5a:14:cf:c8:48:8d:b6:b8:a6:70:b1:b2:b9:82:be:
         3f:66:b7:bd:79:c8:68:cd:01:e1:2a:0c:f1:a5:2c:11:66:cd:
         e0:a1:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:29 2026 by rpki-client