Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa
File:                     5c85609e-52d3-32f0-af5f-894bf50602aa.roa (raw, json)
Hash identifier:          rEmMooUtEREIOJ+hMqyCWrUfwu+Iz+8rGhdi+ASs1UE=
Subject key identifier:   18:00:96:0E:93:9F:6E:B6:E6:FB:8B:BF:F1:0B:C5:36:91:AE:89:A7
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584CE8F762F0D74E2084CB49C0B0
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     11808
IP address blocks:        129.101.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:62:f0:d7:4e:20:84:cb:49:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=74cadcc5-50bd-482a-8219-718b3ee8c425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:a2:41:6d:b8:98:de:5a:e5:cf:ed:c6:57:
                    02:ae:1e:cb:f4:e2:20:bb:7c:5d:d9:98:c5:a2:7a:
                    d0:64:c3:0f:1c:1d:a5:fd:04:f6:09:b9:a5:55:de:
                    f3:6e:3a:91:fd:fd:96:ee:ee:71:c8:14:a8:df:ca:
                    a8:35:cc:97:fd:ca:de:a5:72:88:65:34:8e:bf:3d:
                    06:56:e9:99:82:65:fb:e5:3f:0c:f9:82:58:57:d7:
                    dc:5e:6f:77:3b:a8:46:23:0f:e3:67:79:35:9a:e2:
                    df:a1:78:e7:ca:cf:7c:77:b7:10:4f:4d:3a:94:50:
                    c2:24:37:65:29:15:1c:23:cc:e6:07:ef:74:ca:87:
                    5a:e0:60:59:e3:b6:f8:55:9c:e6:52:52:e3:85:81:
                    ae:44:09:f2:ad:40:09:b7:59:21:02:5c:96:64:15:
                    2a:06:90:67:a5:08:08:9c:ed:34:60:b9:2f:a4:29:
                    1c:94:fa:25:7f:c9:37:fa:1b:41:37:9b:92:71:67:
                    fb:5f:80:ed:9c:39:09:e5:cc:5e:51:8d:13:04:c0:
                    50:d5:9c:34:d6:3a:4e:2c:d3:bc:fe:6d:88:73:8f:
                    8d:8c:2b:59:bf:47:61:0a:ac:48:19:ba:b2:b7:be:
                    24:d9:8d:4c:e0:d8:79:03:37:0e:bd:f7:00:95:38:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:00:96:0E:93:9F:6E:B6:E6:FB:8B:BF:F1:0B:C5:36:91:AE:89:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5c85609e-52d3-32f0-af5f-894bf50602aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:08:b8:3e:39:47:05:20:bf:f5:15:35:fd:88:09:51:54:aa:
         c1:cd:ab:62:93:46:82:f0:fd:76:2f:18:c9:84:00:ef:af:b2:
         8f:a6:58:b0:90:a8:95:2e:67:72:c5:52:07:d7:76:cf:51:73:
         c5:52:94:3d:db:63:6c:25:79:48:9d:60:95:4a:72:45:45:27:
         c2:5a:6c:2d:09:60:74:76:1f:1c:2f:db:50:1b:45:28:5c:4d:
         64:9b:01:4d:76:02:15:b4:8f:a1:91:f5:ab:ac:51:18:d8:7f:
         4b:1d:be:92:5d:31:c1:2e:83:b0:e5:8c:7c:8b:0d:2c:6d:39:
         f3:ee:ac:42:d4:86:b2:ce:0f:d2:5f:88:4f:80:61:e0:89:d6:
         89:e7:8b:5a:ca:93:f2:52:ff:19:06:74:d3:17:ef:76:c2:f1:
         df:e6:57:2a:53:1e:d0:7e:12:ad:c4:96:0c:4d:96:22:4a:f4:
         ad:9b:41:ac:59:1f:27:db:ec:b2:69:50:bd:48:c5:90:5f:55:
         8a:03:56:42:6d:46:cf:36:81:5d:e3:1b:c5:3f:a9:60:ab:b1:
         4e:c3:a9:ec:4f:3f:44:e8:35:3a:3c:02:60:cb:87:e0:df:85:
         3a:d7:69:c7:12:ac:58:9a:11:ac:1e:8e:3a:ea:f6:3c:16:f1:
         48:be:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:31 2026 by rpki-client