Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa
File:                     2c0226e4-f832-3070-b782-0f1bac970efd.roa (raw, json)
Hash identifier:          wCD/AyNQQdNUFUtCa8a0bdgP6U/f8zQWmttJOUZ2V20=
Subject key identifier:   A0:6A:7C:87:22:B5:10:60:26:3A:C1:AD:FA:12:86:D4:8E:2E:23:D2
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F4328584EE38C9ACE34D3BE6B6341AB40
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     10490
IP address blocks:        149.149.34.0/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9a:ce:34:d3:be:6b:63:41:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=aba5d05f-db23-4858-a6b3-83c68f72f7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:fc:20:23:18:0f:fc:af:d2:d5:17:41:d9:
                    2c:b7:0e:c3:25:9b:91:81:0a:82:47:d0:f5:bb:77:
                    6a:b9:aa:3b:a8:a2:76:44:7d:9e:db:19:91:ab:33:
                    23:1e:95:f4:94:93:79:b1:8f:d8:b1:58:1d:31:29:
                    44:c8:0e:9b:b8:42:df:a5:3d:47:81:60:1d:1f:2c:
                    e7:b7:6f:48:4c:e2:9d:02:12:be:72:e8:bd:0b:c8:
                    2c:6a:60:bd:66:24:44:d3:c4:a6:a2:44:55:d8:73:
                    01:56:ea:11:b9:6e:2e:39:fa:8b:07:7a:17:88:d2:
                    9c:7b:47:a1:07:d0:c9:15:df:aa:88:5e:76:e3:3c:
                    95:04:c3:95:6d:14:fd:41:75:41:ec:e4:f4:ce:4b:
                    74:76:02:f3:e3:d2:39:72:6c:5c:67:43:86:c0:91:
                    77:a6:bf:e5:0f:01:6b:14:47:64:7b:f4:3b:7e:3c:
                    64:12:84:93:7c:e8:d9:60:45:f3:02:c8:fe:62:74:
                    fe:44:6f:a4:d9:38:3d:61:31:7f:b3:e1:11:6f:0d:
                    a7:cf:3e:12:fc:63:af:a3:63:d0:a4:9e:1d:c5:d3:
                    4f:d6:4f:0a:d5:a1:9e:f0:df:44:7a:ae:bc:fe:1c:
                    e1:f6:03:ab:c8:ca:ee:29:e4:03:24:94:e0:30:de:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6A:7C:87:22:B5:10:60:26:3A:C1:AD:FA:12:86:D4:8E:2E:23:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/2c0226e4-f832-3070-b782-0f1bac970efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.149.34.0/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ec:91:9b:3e:6c:7c:47:fa:bb:d6:ad:bf:07:e9:cb:88:05:
         02:90:b3:75:4e:72:3a:08:2c:ff:85:1e:cc:5d:2a:08:39:24:
         35:0d:36:94:1c:40:ce:68:f5:1c:b6:14:09:27:e4:1d:18:cc:
         44:e3:ec:b0:97:f0:bc:70:78:7c:3e:d9:8c:8d:e4:c5:29:75:
         54:8e:b2:32:52:47:ae:11:88:12:8f:7e:74:a3:2d:89:c4:45:
         fa:d7:5c:93:c3:ed:cd:b6:76:4d:d5:ad:39:d3:8a:73:68:93:
         a4:3c:65:ce:6e:6c:39:c8:f2:0a:82:ed:4d:51:8e:1e:2a:81:
         54:45:f5:14:a1:26:6b:38:f0:34:9a:d9:f4:f8:80:82:a8:21:
         2d:10:4d:d6:04:88:ca:b5:da:ca:91:84:b3:de:c9:fe:66:63:
         f5:a9:e5:93:1c:94:2e:fb:40:3d:e9:4b:17:3e:08:81:94:7f:
         7a:7a:81:58:10:f9:b0:fc:43:5c:29:b5:dc:83:ef:8d:a5:3d:
         09:23:1f:d3:39:5f:f5:9a:7a:f9:26:77:c3:7f:68:3e:95:6f:
         cf:0e:ca:3c:2c:83:d4:cb:24:6a:95:ea:80:3c:ec:85:ea:bf:
         9b:28:36:4a:c8:1a:06:d4:ee:bd:54:c9:b6:07:6c:e8:e9:ff:
         b2:d5:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:34:25 2026 by rpki-client