Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/af1434cf-ba5b-377e-b946-10dc6360ec10.roa
File:                     af1434cf-ba5b-377e-b946-10dc6360ec10.roa (raw, json)
Hash identifier:          zpiCOtwZioo+lnY0NEAqnJoa6Jh+2dlFFBiWgZy88pc=
Subject key identifier:   12:B2:B9:6E:2F:ED:01:55:E4:E5:C5:B9:E4:CA:70:CB:39:1A:6A:4B
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584E4559DAAF2627415A4277F100
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/af1434cf-ba5b-377e-b946-10dc6360ec10.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     7018
IP address blocks:        161.129.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:da:af:26:27:41:5a:42:77:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=18e73a89-6a05-41b2-a960-b8b2751031b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:35:88:10:75:35:69:13:0b:61:a0:88:05:
                    d5:61:c9:5b:ca:10:62:2b:7a:bf:4e:a7:82:63:6f:
                    88:a9:5c:1a:4f:0d:9d:24:c5:51:69:73:bb:d7:81:
                    86:c7:29:6f:78:da:29:07:70:ef:12:06:49:58:65:
                    8a:07:b7:94:3b:17:23:80:bc:c8:a9:03:bf:6d:98:
                    ff:19:b7:7e:aa:7e:e4:e3:bd:90:a7:8b:a2:20:3d:
                    e1:8e:54:f4:d7:3f:d2:50:63:82:44:0a:3d:87:09:
                    0b:d6:63:fd:f4:b7:27:5e:d8:58:e5:9f:23:f4:53:
                    2c:6e:19:40:d2:9d:90:be:19:26:a1:93:38:df:8d:
                    1b:51:c4:8b:ad:19:40:95:5a:71:a7:c8:68:58:b9:
                    16:aa:6e:16:d4:4f:5a:86:de:f9:9c:6d:d8:e7:b4:
                    40:45:69:32:60:ad:1d:aa:8d:37:1f:89:bf:eb:dd:
                    f8:d8:7d:87:76:f4:13:46:45:a1:72:06:03:89:e1:
                    f0:f3:35:c4:01:5e:77:23:d9:72:ac:8e:95:ff:de:
                    78:b0:8b:78:b5:0f:f2:ff:a6:9f:c6:b8:ce:32:90:
                    64:ff:ba:c8:c6:b9:5b:b7:7c:a4:78:e0:4d:32:55:
                    24:51:35:5b:63:23:e7:db:f9:40:02:80:b7:da:1a:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:B9:6E:2F:ED:01:55:E4:E5:C5:B9:E4:CA:70:CB:39:1A:6A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/af1434cf-ba5b-377e-b946-10dc6360ec10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b9:0f:f7:ef:9c:6a:a8:03:e4:ae:df:bb:a2:0c:09:0e:06:
         f7:35:f5:1f:99:11:11:58:fb:d7:bd:4b:f7:4e:c4:cf:bc:a9:
         0c:ab:4f:bf:73:ee:52:c3:73:fe:91:d3:3c:a1:0b:c5:81:53:
         4f:6f:37:df:67:d7:11:21:a6:d6:36:7c:a4:9c:2c:f2:5a:b4:
         5f:d3:9d:58:bb:da:0c:86:aa:92:b3:b4:81:21:ef:ac:8b:c2:
         d2:dd:14:de:a0:0e:5d:27:2c:17:f6:61:0c:89:98:96:20:ea:
         76:ad:31:26:da:5d:cb:62:c9:ac:42:13:e5:b4:0e:4e:1e:42:
         92:4e:92:3b:d7:55:17:d9:4e:97:ce:61:12:06:96:89:e5:11:
         9f:4f:ec:8c:b3:dc:3e:91:24:29:de:d4:d6:50:16:5c:35:8e:
         45:b9:b6:97:33:01:bc:45:59:4d:f9:05:4f:7d:6b:4a:77:27:
         83:ab:ad:47:5e:9c:fa:46:95:c9:95:f7:12:f3:2f:0c:4e:53:
         9f:11:db:5b:ea:de:5c:5f:a9:2b:0d:03:f1:56:6d:a4:dd:fc:
         9b:74:bd:d9:32:e9:05:fb:c0:9d:00:cc:3d:5d:1c:38:a0:30:
         95:f9:95:43:41:3b:31:3a:68:96:82:73:91:05:fd:d2:39:0b:
         9b:36:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:16 2026 by rpki-client