Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa
File:                     84ca2728-b0e3-391d-8237-b70d83a756d8.roa (raw, json)
Hash identifier:          j+AQUYrO/rObGAyLNO7kfCqhrZJ/+VG4cRVT03YihXY=
Subject key identifier:   99:A5:94:82:B6:9B:CD:FD:86:09:49:6C:2D:CC:09:C1:D7:B9:70:0C
Certificate issuer:       /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
Certificate serial:       010D0C9F4328584E070094577B8C49C1CD059A80
Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     16509
IP address blocks:        159.119.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:94:57:7b:8c:49:c1:cd:05:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=40661968-42fa-4c6d-954a-52fa29669d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:61:82:86:31:7d:19:0e:75:7d:5e:e2:04:
                    f3:f3:88:59:23:82:b3:ac:cc:07:d7:ed:4f:6d:4e:
                    17:32:7a:98:ad:52:9d:dc:dc:f2:28:73:60:f9:46:
                    d5:35:1f:fc:41:a6:d4:0d:9a:1d:dd:3c:01:bc:cf:
                    a8:72:80:2d:90:56:62:a5:d3:8d:95:99:12:d6:cd:
                    60:e7:00:c6:5f:e2:d5:20:6c:cc:19:c0:0b:bf:ee:
                    af:4b:4c:49:dc:87:6f:d4:59:cb:bf:a3:e4:2c:ec:
                    b7:85:ea:3b:35:62:a0:0c:f5:af:1c:31:0f:c1:a7:
                    14:ba:9d:68:fe:c8:24:d1:60:0b:ed:d9:32:f5:71:
                    59:02:d1:17:09:a0:e9:fb:7b:5e:fb:17:da:d4:21:
                    93:b6:d2:99:8e:f8:9c:74:5c:b8:00:37:4d:b3:6c:
                    10:42:d9:de:42:2f:61:b2:49:2d:2a:75:2b:78:8e:
                    f3:73:ae:ad:24:06:90:96:dc:86:11:fb:c9:26:e0:
                    42:5e:42:76:04:2d:81:05:76:a7:16:86:14:56:7e:
                    77:08:b4:a1:e8:80:d1:6b:d8:81:61:e6:1b:03:7e:
                    83:ac:ed:92:cb:1c:24:e8:2a:6c:77:6a:a0:09:53:
                    4c:74:6f:58:c8:e4:c4:5c:61:8a:19:fa:b9:48:79:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:94:82:B6:9B:CD:FD:86:09:49:6C:2D:CC:09:C1:D7:B9:70:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl

            X509v3 Authority Key Identifier:
                keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.119.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:de:35:d4:61:ec:76:78:42:b7:c4:3a:58:10:d0:e8:67:d9:
         bc:8a:42:2a:81:86:8b:de:6c:1c:8b:38:b1:43:4d:73:2d:9f:
         53:c5:43:85:4d:e8:bc:2a:dc:a3:70:ba:5f:0c:38:99:d1:24:
         84:08:7c:ab:98:60:46:31:10:61:f4:c2:25:31:29:d8:59:a9:
         10:c9:43:98:24:8e:c6:a5:ca:c0:3a:f8:5b:70:4c:8c:82:d5:
         65:f3:4e:e9:d1:32:3c:96:4d:76:07:8a:c5:89:62:90:74:ed:
         49:de:5c:5e:ad:4d:23:f5:1c:6e:fb:3d:5c:51:b6:31:a6:8f:
         84:c9:f0:a5:6a:fc:1c:ee:05:aa:72:59:25:b2:e4:9d:c5:1e:
         73:58:03:0b:e3:6a:b2:39:d6:44:2e:07:e5:89:f6:4c:f4:e6:
         65:bc:76:95:53:aa:e2:a7:fc:31:f6:03:82:68:00:01:50:6a:
         67:bd:d4:d5:a6:7a:36:cc:be:af:6a:c5:5e:d1:f8:ae:39:a3:
         76:eb:83:b0:c1:96:ae:fd:f8:e6:e2:0d:e3:4e:56:cc:e3:b7:
         a0:c5:23:04:a0:f5:7a:2a:d5:18:cd:48:94:c6:25:1e:48:75:
         0d:76:02:ce:1e:7b:e8:30:7f:d4:84:9c:1b:7f:d4:14:90:de:
         d4:d3:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:48 2026 by rpki-client