Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/9e65997f-bf30-3ace-b972-8647e78abe84.roa
File:                     9e65997f-bf30-3ace-b972-8647e78abe84.roa (raw, json)
Hash identifier:          0V30AB5M5i0LQxM5xp4Ew+8awtsbnhcen23O1HnNwPQ=
Subject key identifier:   85:5D:1A:66:AD:35:AC:63:CD:46:79:F3:93:D7:2A:7E:41:5A:64:56
Certificate issuer:       /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
Certificate serial:       010D0C9F4328584E0700A379554E9A38232B4600
Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/9e65997f-bf30-3ace-b972-8647e78abe84.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     14618
IP address blocks:        159.119.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a3:79:55:4e:9a:38:23:2b:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=8c9ddb80-84bd-44ae-aa02-1fe54ec1e00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:3a:e1:99:69:3f:47:36:03:3b:5b:3d:a5:
                    0e:8a:55:13:8d:c2:16:53:13:d3:72:d6:b4:3c:d9:
                    38:73:92:59:30:85:13:58:54:9e:a4:fa:5c:fe:90:
                    6f:9e:42:ee:bb:54:3f:7b:b1:58:3b:09:52:2b:a1:
                    a5:2c:6e:12:f8:41:f5:18:5e:6a:67:fc:87:09:1f:
                    fe:69:51:e9:82:de:b5:1e:5c:58:2e:0a:e8:3f:4e:
                    77:31:94:25:09:99:86:fb:bc:4c:d7:4d:be:6d:29:
                    c4:92:a9:3b:67:bf:ae:18:59:d8:b4:44:31:aa:2e:
                    50:5a:34:71:6f:83:7e:cc:7c:a4:ef:5e:d9:25:74:
                    74:01:48:19:e1:ea:7e:4c:dc:8f:33:3b:79:83:55:
                    bc:36:f4:16:84:da:52:0c:97:35:05:4b:df:84:f1:
                    75:2e:69:8d:b2:dd:9f:24:9e:bb:ad:5d:5d:78:2c:
                    0e:58:83:60:d9:7a:a5:0e:6e:1d:ea:f3:9a:8f:24:
                    5c:3d:0c:f2:33:09:27:9a:f8:3a:ff:46:9b:4c:88:
                    7c:c6:84:a4:a0:b8:6f:f2:fd:01:54:91:e5:50:ac:
                    bc:19:dd:1d:2a:8d:ea:e1:c7:3a:d3:88:e9:d8:cf:
                    2d:48:ef:ba:6b:a0:4a:10:90:1f:79:18:a1:31:b3:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5D:1A:66:AD:35:AC:63:CD:46:79:F3:93:D7:2A:7E:41:5A:64:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/9e65997f-bf30-3ace-b972-8647e78abe84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl

            X509v3 Authority Key Identifier:
                keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.119.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:4b:3d:73:d4:db:12:ee:c3:02:c1:19:72:73:89:fc:3d:
         23:e3:79:a4:b2:29:7a:f7:2d:36:4b:f4:d5:bf:a9:f5:4d:2a:
         37:90:83:19:de:2f:04:ee:02:e6:eb:ec:11:26:f7:1a:a9:6a:
         5a:76:d8:3e:47:03:82:fe:23:53:23:d3:f5:19:18:e6:f4:29:
         a4:40:5c:6b:f9:5c:ca:83:f3:73:0a:29:c4:15:d5:a3:8f:41:
         95:ed:e9:bf:de:bf:82:5a:80:e9:bf:4b:08:3a:60:eb:79:c8:
         6e:52:f8:33:fc:b4:72:b0:d9:5c:34:84:b0:75:60:9a:13:1a:
         ac:b1:2a:cb:ad:e5:ce:6a:f6:6f:24:10:16:20:52:81:f2:e9:
         8d:dc:04:ee:13:a6:a6:7e:63:7e:ca:e1:46:6a:84:ef:11:83:
         6f:0a:33:25:28:3f:37:18:d5:df:eb:47:ae:6e:9b:61:3f:ec:
         b3:41:f7:dd:96:e6:ca:0e:6a:7e:38:bf:e9:b2:b0:18:51:70:
         e8:f5:80:e2:22:fc:05:7b:99:c0:0d:f0:cc:88:05:fd:cc:3d:
         34:a8:6e:e3:05:0f:5a:75:1b:62:5e:32:38:2d:76:af:97:e2:
         ff:f6:7b:85:1d:92:d2:43:d4:eb:bd:f4:ae:b0:8d:bd:8c:a4:
         98:e0:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:43 2026 by rpki-client