Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa
File:                     4ccd42f4-0724-3487-8445-a44356895c00.roa (raw, json)
Hash identifier:          x9T9fMMM5nawcMRsgZDchp/NBe7FpOi3h+7jjxa1d9A=
Subject key identifier:   34:14:F4:EB:1B:A1:4D:AE:DD:CA:83:8C:80:0A:61:53:CC:81:65:40
Certificate issuer:       /CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef
Certificate serial:       010D0C9F4328584DE41B24D9A9846124AB4D54C0
Authority key identifier: 1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     14936
IP address blocks:        161.129.62.0/24 maxlen: 24
                          2620:30:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:24:d9:a9:84:61:24:ab:4d:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5781a71d-d5ec-4601-8f43-5902a97ba6ef
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=c07026b5-49f7-40e5-8a62-e378a7bf35df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:3c:62:c3:a5:a1:cc:47:a2:53:c4:1e:7b:
                    f2:28:55:e7:93:e9:32:08:54:83:e4:2b:98:91:78:
                    8c:46:47:18:ae:de:55:d1:f7:ec:fc:c6:69:7a:16:
                    46:28:cf:05:7c:91:ea:7c:ba:0a:d9:c3:d3:74:1e:
                    7a:86:ef:c6:e9:27:2a:0c:e5:5c:c0:6e:fa:3c:f5:
                    6b:82:5d:fc:d5:cc:10:8d:5d:67:71:15:ef:9c:57:
                    df:ea:27:03:cb:be:5d:f1:2d:42:21:4d:08:14:31:
                    20:22:f0:a6:00:11:85:46:a3:3e:ac:ea:d9:e1:0d:
                    45:1e:27:01:51:71:62:1c:2f:3d:f3:c7:4c:61:1f:
                    5f:68:8a:e4:9f:60:66:f9:d0:8f:f1:51:4b:1b:b9:
                    a6:13:51:13:7f:26:ab:13:dc:75:5d:1f:a9:e9:e6:
                    9c:3a:d5:59:ca:54:2c:41:58:3f:33:d8:88:2e:21:
                    69:01:15:08:ea:03:7e:6b:f4:af:3a:df:c4:c9:33:
                    49:3f:69:c5:72:31:2c:aa:44:73:80:9c:d9:de:5d:
                    87:bb:9f:d0:7e:79:42:0a:4b:97:c4:44:b8:c1:87:
                    28:3f:bb:0f:12:45:38:d7:43:38:f8:1d:4d:6b:c4:
                    7e:7a:48:84:84:0a:a8:e8:93:73:b5:81:8b:cb:ee:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:14:F4:EB:1B:A1:4D:AE:DD:CA:83:8C:80:0A:61:53:CC:81:65:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/4ccd42f4-0724-3487-8445-a44356895c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef/5781a71d-d5ec-4601-8f43-5902a97ba6ef.crl

            X509v3 Authority Key Identifier:
                keyid:1E:3B:B3:A4:84:98:0E:80:05:FC:5E:3D:42:65:B9:71:1C:79:6A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5781a71d-d5ec-4601-8f43-5902a97ba6ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.62.0/24
                IPv6:
                  2620:30:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:99:2d:47:0d:b7:40:7f:99:19:93:6d:e0:74:b1:bb:ae:be:
         80:d4:13:bd:cc:8a:a0:07:ed:61:9d:1e:0d:49:3b:55:53:30:
         6e:e5:64:28:a7:46:85:40:31:e5:42:2e:4b:4d:0c:34:87:ce:
         d4:48:32:17:59:f2:9d:52:42:57:2f:55:11:dc:3d:c8:76:dd:
         27:b8:54:ec:58:de:6a:9e:e2:5c:4e:96:8f:95:c5:82:03:d6:
         1e:fe:0f:c9:a4:a0:95:86:d7:c9:d1:37:0f:12:9a:8d:79:2f:
         b0:93:b0:f3:52:05:ef:e6:e0:4c:70:b3:eb:5b:90:13:ca:a8:
         dd:37:9e:c0:5b:e8:3c:cb:a6:20:58:d9:ef:4a:aa:bb:ea:d2:
         74:6f:2d:8f:8c:c7:db:19:97:a1:c1:15:90:c3:2c:87:af:dd:
         ad:ef:3b:e1:7c:51:3b:56:00:99:14:95:95:0b:81:da:a2:55:
         1e:14:eb:a2:4d:50:6f:11:32:e0:35:9a:33:59:c0:8c:d3:a2:
         82:78:34:29:e2:f3:0d:b3:3c:e4:f6:be:26:0c:7f:69:1d:12:
         ed:93:03:82:16:90:bc:13:f8:f8:b1:64:7a:e3:18:61:fe:f6:
         73:51:81:27:73:24:b2:d1:ab:e5:98:d4:c1:1f:92:64:ac:42:
         0c:00:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:35 2026 by rpki-client