Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
File:                     196c177a-e3f1-3adb-b77a-c204c94c485f.roa (raw, json)
Hash identifier:          NHrIJk2SLw4j043uhyna2G/6j/fkSCLZW7N+axMEpls=
Subject key identifier:   77:96:F3:DE:96:EF:5A:C5:D3:35:74:4E:06:90:EA:F1:AD:B8:29:DD
Certificate issuer:       /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial:       010D0C9F4328584F8F3DC499AD36ACF6E6BEAC00
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     6461
IP address blocks:        129.35.160.0/20 maxlen: 24
                          170.225.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c4:99:ad:36:ac:f6:e6:be:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=83c98a4e-bd8c-4229-8e84-2a0eb8351987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:47:8f:92:51:37:ba:d5:9b:b9:b8:67:28:
                    bb:ba:30:77:ad:38:b5:9c:ec:95:fc:29:1e:25:03:
                    3e:dc:a4:24:76:fc:c7:86:d3:5b:f0:3c:dc:61:f6:
                    08:d1:ab:5b:8b:c0:81:2d:4c:d7:c8:79:e2:f4:bd:
                    8f:2d:b2:43:72:a9:41:f4:66:46:dd:b7:fb:13:1f:
                    cf:5d:6a:48:5c:47:de:ad:af:c9:38:33:b6:65:71:
                    ef:a8:d8:c3:db:56:22:46:95:60:75:50:4c:ea:f7:
                    38:1e:bd:d2:85:df:54:54:33:16:e5:00:e3:43:f5:
                    cf:05:b6:b9:54:d6:02:7d:75:fd:6b:65:8f:b5:0e:
                    bd:da:40:60:1c:f0:62:2b:8f:24:62:df:80:2b:30:
                    ae:f8:2f:1d:e5:2b:5d:50:0d:75:ae:00:33:e1:b4:
                    74:a2:98:f8:a5:3c:63:a9:d8:e0:68:10:13:91:e6:
                    ce:fe:6f:b3:e7:4f:aa:ef:38:61:78:fc:09:95:73:
                    d3:50:e9:17:48:dd:9f:3a:21:df:8d:c8:7f:65:2c:
                    7d:72:01:26:04:5e:27:96:e4:38:42:7b:98:8d:6f:
                    39:77:ab:a9:e9:2e:a1:e8:63:3e:9c:9f:0b:ae:21:
                    1e:77:d1:d3:be:52:26:29:49:1d:7a:3f:fa:c1:c3:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:96:F3:DE:96:EF:5A:C5:D3:35:74:4E:06:90:EA:F1:AD:B8:29:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/196c177a-e3f1-3adb-b77a-c204c94c485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl

            X509v3 Authority Key Identifier:
                keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.35.160.0/20
                  170.225.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:43:3d:6e:d9:1c:92:7b:42:7c:8c:bb:f8:9b:dd:dc:c7:a6:
         c4:9d:fe:c6:69:5a:10:82:4a:a8:ac:3f:bd:13:2a:0b:2f:7c:
         ea:72:60:ea:31:f6:d5:86:3a:e0:54:c1:17:0f:69:4a:21:ab:
         18:f6:54:2e:75:3d:9a:91:55:0e:65:85:cd:5b:e8:d5:4d:08:
         e9:99:37:4a:67:6a:24:71:02:04:da:60:74:fc:3a:68:22:eb:
         34:58:b7:7a:e3:ac:7a:2a:4a:93:e6:cd:44:3e:86:e2:fc:d2:
         13:ed:77:64:2b:29:23:c2:91:89:0c:49:86:3a:73:bb:5f:a4:
         55:3f:0c:bb:55:57:77:93:d8:9e:45:17:84:de:f1:17:96:a8:
         d6:fd:66:50:ac:ba:a0:e2:3b:19:9a:38:c9:38:63:58:04:de:
         07:d6:04:21:03:a6:f3:9e:94:2d:44:56:1c:9c:67:2b:b7:82:
         cc:54:61:aa:ee:86:77:2f:23:64:31:c7:a7:b8:d8:11:da:7e:
         ef:4d:ad:19:05:68:04:a0:f5:ff:35:70:89:60:e4:3a:d9:8d:
         13:93:fc:d0:28:73:ec:83:d0:6d:1f:93:a5:cb:98:fd:51:6e:
         2c:7c:13:e5:62:2c:fc:c2:a6:4f:da:91:0c:17:06:c8:21:85:
         4e:fd:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:26:38 2026 by rpki-client