Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa
File:                     74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa (raw, json)
Hash identifier:          ssOEXXrySEmlBOT+9+F7zFSpgZM8x3KzNpZbJsyR3Ks=
Subject key identifier:   92:D6:E9:26:BA:51:EE:0F:E5:D3:E8:4D:A7:32:C9:88:CF:E2:FE:1F
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584EA786EFDC7B43FB7077234C80
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     63293
IP address blocks:        129.134.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:ef:dc:7b:43:fb:70:77:23:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=392dc679-1bfb-495d-9f80-7d0ae3860dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:02:3e:43:6e:d7:b1:17:33:0a:5a:c1:24:
                    f6:50:30:1c:71:ee:0f:04:53:0c:d4:d9:e1:b8:ef:
                    c1:e5:cb:db:e9:eb:8e:d3:1b:0d:6b:a6:a9:7f:ed:
                    95:be:fb:dc:ca:99:3a:ff:67:fe:fe:b0:bb:27:ad:
                    5d:24:ac:be:c1:27:29:54:10:bb:23:99:c5:97:85:
                    40:15:ea:30:e7:b2:ef:5f:e3:8b:13:d8:06:cd:58:
                    17:04:44:b2:33:3a:3e:58:d1:c6:26:b4:3c:10:a5:
                    6c:22:40:b8:a3:8c:d0:44:42:6a:e5:14:3d:07:0c:
                    65:1e:30:36:48:75:ea:99:3f:3b:7c:6f:00:65:77:
                    73:5c:03:a0:6e:24:fe:36:e9:6b:19:ae:40:00:c7:
                    ed:e6:f9:15:23:38:5d:98:65:81:7c:8b:97:3a:d2:
                    5f:e8:71:36:a5:ed:97:67:f9:52:f9:a4:fc:ee:b0:
                    71:9b:44:57:18:88:7a:16:ea:5d:24:e7:5b:ce:3d:
                    00:3d:fa:c3:1a:3c:0b:35:d0:bb:ec:1a:23:4b:72:
                    87:f9:65:ff:e3:01:b0:2b:a6:3f:08:97:2e:df:16:
                    9a:2b:8e:b0:cd:fa:ed:ef:6e:03:20:ff:e5:56:0f:
                    62:ac:01:76:bd:5d:55:2d:63:93:6f:62:78:84:ac:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:E9:26:BA:51:EE:0F:E5:D3:E8:4D:A7:32:C9:88:CF:E2:FE:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:84:d1:64:3b:b0:a3:b9:e8:cc:43:9c:0c:8d:05:f1:7e:65:
         97:6b:00:a0:8b:88:b9:d1:1d:9e:ce:6d:5a:2f:ed:59:3f:29:
         bc:e4:81:8c:0a:35:46:01:83:8b:f0:26:2f:0f:f4:f2:06:6d:
         b0:c4:49:92:59:2e:e8:f9:28:34:d3:64:02:8f:5b:54:90:f2:
         68:b3:da:7e:32:49:12:5d:c1:d0:93:6d:d2:cb:09:82:45:08:
         17:00:75:b6:d5:87:d5:5a:76:aa:ee:e2:2a:22:e2:13:0e:56:
         dd:5c:c6:b8:93:e3:61:c9:e5:90:bf:1f:f3:41:6d:c6:8a:c9:
         3c:8d:38:24:20:f6:0e:1b:21:d8:7b:dd:ad:54:ea:39:90:df:
         af:4f:71:e9:d2:69:da:6e:f6:27:28:b7:35:42:94:4f:e4:83:
         0c:d3:ee:48:91:b4:5a:8f:e1:25:92:a2:ea:7e:3c:8c:e3:6f:
         f8:19:dc:13:4a:6c:9e:d5:a0:4a:28:70:df:c0:e6:4f:db:cb:
         62:2b:e6:44:33:52:8a:ce:c6:65:5f:af:49:e2:13:dc:0c:8a:
         5c:b8:ee:c5:9e:8e:22:34:57:09:f9:3f:eb:9e:14:ba:14:d7:
         12:b9:1b:da:14:c2:b0:5b:67:75:e4:ff:9b:12:f4:f1:d4:d3:
         da:0a:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:47 2026 by rpki-client