Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa
File:                     19df955f-fc01-3bcc-800f-720f08ca391b.roa (raw, json)
Hash identifier:          m1usqGe/tbdElq+cpczJhZlpiUTYIUuwTrgu1VtCxC8=
Subject key identifier:   8D:34:75:57:AE:DF:AE:56:24:4E:2F:8F:D0:68:AE:06:05:99:25:08
Certificate issuer:       /CN=960156d9-d41c-43da-b054-170189dcb5bc
Certificate serial:       010D0C9F4328584F498A9F060FEB2E2D9BDA3180
Authority key identifier: F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20162
IP address blocks:        129.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:9f:06:0f:eb:2e:2d:9b:da:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960156d9-d41c-43da-b054-170189dcb5bc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=72370ecd-f211-4e18-b2ba-5bc5961cdcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:da:4c:1e:5d:bd:78:af:8c:3d:cb:4d:3d:
                    f0:83:b3:af:79:b3:c2:10:e4:69:29:70:8b:23:51:
                    48:83:a3:91:1e:2e:ab:bd:28:d3:03:fa:60:1a:de:
                    68:c1:c7:6c:2d:85:a3:5a:35:3f:fc:7d:24:a6:a6:
                    81:60:08:db:31:5e:4e:1e:8f:98:7d:e2:fa:5b:f1:
                    16:0c:7d:cd:22:68:51:bc:4c:60:b5:5a:27:59:95:
                    3f:d1:5e:ff:40:70:b3:5e:4e:bf:e4:96:43:63:a4:
                    04:09:c6:32:dc:d6:bd:08:86:45:02:9f:8a:be:5d:
                    58:f5:2e:f8:ca:dd:b5:dc:dc:dd:10:94:31:8c:b9:
                    50:72:ed:0b:ff:b5:db:29:0d:b7:3d:e2:a6:a8:07:
                    54:60:a6:34:51:4d:55:03:1e:b4:6c:59:b0:b1:d4:
                    59:1b:51:f8:2e:d9:90:72:94:c1:4c:c4:9c:fa:62:
                    78:57:cf:45:2f:48:29:d3:7a:d3:6a:6b:11:76:e2:
                    78:25:11:6a:70:2b:47:aa:d1:e5:88:07:79:af:8f:
                    9f:fe:ba:e9:1c:48:a0:4f:10:d6:f4:d0:93:2a:43:
                    8d:15:d0:0a:b6:bd:73:90:8f:7c:93:ea:2a:56:9c:
                    d9:93:33:0b:f4:76:0a:53:6e:ac:0d:ae:7b:c7:b2:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:75:57:AE:DF:AE:56:24:4E:2F:8F:D0:68:AE:06:05:99:25:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.crl

            X509v3 Authority Key Identifier:
                keyid:F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:91:9e:02:f2:69:d7:9c:49:31:2c:aa:52:ef:71:45:aa:4a:
         2e:2b:02:ca:9e:92:7d:11:58:21:d5:96:ca:d1:c8:db:ff:93:
         9a:86:d6:f1:b4:7e:12:06:ec:52:88:e4:1b:a9:2b:5a:c8:e6:
         3f:c1:02:2a:3e:dd:74:80:67:c7:86:0e:79:8f:4c:c1:fd:8a:
         14:09:0d:6b:a6:bb:76:64:03:ea:62:23:26:4a:f6:77:7c:a1:
         4c:25:40:b4:fd:c9:a3:ea:70:49:49:3e:68:f5:84:14:1c:f6:
         07:db:4e:3c:f9:0f:2e:68:11:d7:f1:0c:27:c0:70:0b:64:e5:
         e8:19:ea:f5:7c:a6:6b:28:97:47:15:bb:cf:b6:36:16:43:db:
         f0:c0:93:a0:d8:4a:34:25:09:9c:36:59:76:08:f5:4a:c5:b2:
         0e:19:39:66:39:7e:81:15:df:aa:68:68:b7:c9:20:d1:6e:b0:
         6c:25:90:62:ac:c9:07:4f:b6:5a:97:19:d1:52:0c:5f:ce:7f:
         33:cf:69:4f:f0:d5:c0:6e:2d:e0:e2:d5:ed:ec:2e:78:e2:df:
         a3:8a:0d:76:32:18:e7:4f:e4:5b:f5:3c:a7:8c:e2:08:60:ca:
         f3:26:47:27:b8:a0:c5:c7:02:ed:b2:f9:9a:6c:5f:bb:26:cf:
         ef:68:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 09:19:26 2026 by rpki-client