Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa
File:                     c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa (raw, json)
Hash identifier:          s0pqQhZIfDcUz8hwiI/HdAgXIMQdpfE2zPvEFgauZ+E=
Subject key identifier:   8B:87:44:D8:FD:EC:E3:F0:DF:6B:C9:CB:01:7E:CD:B6:65:FF:A2:E0
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F0D6CE6031AA5E620E17E9B4C
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        129.151.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e6:03:1a:a5:e6:20:e1:7e:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=59350b7d-5265-4717-a8d3-40610dc21063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:d8:4a:c3:83:ea:ec:f8:68:18:b5:b7:cb:
                    eb:bd:d6:7d:0c:01:74:9f:4b:39:13:2e:24:61:39:
                    4c:9d:12:55:1f:a0:6f:0c:c2:c8:c4:bf:4a:a1:b3:
                    df:c5:cd:b3:eb:df:1c:5e:da:5b:3f:e2:87:bc:7d:
                    d5:58:a0:2e:cb:ba:2e:89:c2:e2:3f:56:ca:62:02:
                    42:fe:18:8a:e7:5c:3b:11:6a:cc:3c:b3:52:e0:7f:
                    6a:68:10:68:fe:7e:59:71:25:dd:73:94:7e:f8:b0:
                    f0:0a:0d:e1:32:77:fd:9e:bc:10:80:7e:ac:29:50:
                    98:09:48:a3:d2:58:99:52:93:c9:7e:53:2b:a6:57:
                    35:72:4e:5c:82:9d:04:27:2d:4d:6c:01:62:43:cd:
                    61:d4:20:b7:7d:af:f4:41:e5:cd:9e:05:b8:4e:1c:
                    93:a7:ea:3c:c6:b6:fe:2b:d2:a2:7d:ac:2d:1a:73:
                    82:14:fc:c2:81:eb:58:08:f8:f5:e9:f3:03:09:4a:
                    6f:09:5f:9a:0f:78:b2:53:92:fc:9a:ab:aa:58:bf:
                    6b:eb:0f:31:ad:05:d5:ea:1b:94:1f:2b:60:1d:f4:
                    b0:0a:56:8c:e6:82:27:29:ae:35:73:f1:6d:f2:9a:
                    f8:c5:ad:23:81:30:10:e9:fa:17:6c:85:6d:cc:36:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:87:44:D8:FD:EC:E3:F0:DF:6B:C9:CB:01:7E:CD:B6:65:FF:A2:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c41cad0d-5ff0-3d93-aefe-79fd7289c096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.151.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:5f:64:d3:df:de:18:e0:5e:66:ab:88:66:d6:d3:0e:59:
         2f:c7:29:2e:71:b0:fb:3c:f3:7a:fe:bb:57:a8:94:8f:89:f9:
         db:bf:ba:e0:d1:50:6d:23:bf:c4:e1:07:3e:c2:09:0a:f6:dd:
         f5:e2:a8:85:48:64:3a:df:f9:ee:17:95:56:af:cc:39:bb:3b:
         e5:ec:67:d1:78:e9:2f:d1:c5:f4:02:af:b3:e1:e5:d2:ad:78:
         72:79:b0:13:b2:28:4a:56:2a:28:37:9a:76:bf:3a:c1:23:62:
         06:e4:d0:7a:e9:9d:04:66:39:55:9f:88:99:fb:a3:7c:fb:12:
         b9:ae:6e:38:a7:c4:f2:e7:ba:0f:f6:04:ef:0e:41:79:20:d8:
         9e:ea:58:08:2c:99:21:da:97:8a:a8:2c:90:41:ee:f8:df:ec:
         cd:1e:61:71:70:2e:a6:2c:1e:fe:d2:a4:9e:c9:80:39:19:bd:
         0f:07:bc:33:29:47:72:ea:34:39:02:9c:a8:58:a6:7f:40:a3:
         59:de:27:a2:30:91:9d:ee:29:c7:f6:df:13:35:6c:c5:a2:28:
         f2:79:10:14:89:d4:ea:0e:41:d8:12:2b:73:3b:01:9f:55:72:
         a6:9d:5e:19:19:c3:49:f7:f5:56:9a:af:9f:14:99:7b:e0:83:
         21:95:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:05:41 2026 by rpki-client