Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/b29846fc-d670-3709-8650-da5aaedea589.roa
File:                     b29846fc-d670-3709-8650-da5aaedea589.roa (raw, json)
Hash identifier:          UjPpqgj/5Idw3rEJG9RRHcrhHAmxubagMcB5YOIF3Q8=
Subject key identifier:   2F:0F:3F:15:EB:BF:62:98:42:DC:BC:69:85:EB:90:56:53:BB:AB:89
Certificate issuer:       /CN=945a37c8-263b-40f2-aa6c-b88157a5e45d
Certificate serial:       010D0C9F4328584E4989D4ED436426D256E0B380
Authority key identifier: 48:75:6A:81:42:05:20:00:37:7C:04:3B:CD:3B:BF:A7:E4:49:F8:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/b29846fc-d670-3709-8650-da5aaedea589.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     14108
IP address blocks:        168.151.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/945a37c8-263b-40f2-aa6c-b88157a5e45d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/945a37c8-263b-40f2-aa6c-b88157a5e45d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d4:ed:43:64:26:d2:56:e0:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945a37c8-263b-40f2-aa6c-b88157a5e45d
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=16678126-0a94-4851-8af6-44de4f6146cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:b0:75:2c:95:dd:c8:1b:fd:db:2e:5e:1f:
                    9d:c6:a8:9f:be:e1:30:0a:5d:fc:78:26:0c:83:49:
                    ea:d2:17:bc:18:f7:43:78:12:94:78:1d:1b:ff:1b:
                    9a:08:8a:80:90:72:5e:ce:e2:39:0f:8a:0a:71:91:
                    1f:6a:05:cc:8f:b4:78:1f:36:cc:8e:f6:9f:bd:f4:
                    29:8c:13:01:37:37:7e:bf:18:3e:e7:ce:b8:49:82:
                    d0:66:5d:39:d5:f3:31:9e:bb:8f:1a:37:20:b1:ed:
                    3a:09:0c:01:bc:2f:d7:7d:3c:5f:9b:e3:87:1f:05:
                    07:92:3d:ba:7a:47:f5:ed:a9:1b:b0:92:09:64:49:
                    a1:76:f4:70:e1:98:eb:80:f2:35:e2:72:d9:46:c7:
                    1c:8c:d3:59:66:39:5d:17:8d:03:7c:5a:ff:3c:9d:
                    79:d6:71:ad:7a:cb:22:08:ec:27:d5:38:29:db:93:
                    14:80:30:33:49:65:58:05:82:62:c7:0f:f9:6d:5a:
                    71:bf:30:c2:d6:40:2f:91:60:09:50:ce:00:fd:55:
                    dd:28:49:4b:36:05:0d:f3:78:0c:c6:35:6a:88:ab:
                    59:74:d1:36:8f:92:d5:50:2d:ab:02:77:c7:1a:42:
                    0e:02:77:19:a5:fe:4b:a2:e1:70:ba:78:e8:bb:5f:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:3F:15:EB:BF:62:98:42:DC:BC:69:85:EB:90:56:53:BB:AB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/b29846fc-d670-3709-8650-da5aaedea589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d/945a37c8-263b-40f2-aa6c-b88157a5e45d.crl

            X509v3 Authority Key Identifier:
                keyid:48:75:6A:81:42:05:20:00:37:7C:04:3B:CD:3B:BF:A7:E4:49:F8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/945a37c8-263b-40f2-aa6c-b88157a5e45d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:53:b7:a9:3e:b3:13:11:a4:2f:bf:c1:57:54:e2:39:8f:29:
         5e:c8:18:45:b9:2f:e0:7b:f2:0d:2e:b0:d3:6c:a4:ca:cd:e7:
         03:d4:34:a2:c6:b5:05:c4:03:0c:70:82:cb:47:da:c4:84:92:
         15:c3:5f:9d:4f:64:2f:71:4a:79:83:9b:73:9c:ad:8a:67:14:
         ee:22:eb:84:25:0c:b2:83:64:59:ef:0f:28:dd:9d:41:2b:96:
         d5:45:8f:dc:ac:03:a0:f7:19:3a:21:05:40:4a:cb:c4:17:0f:
         f9:6a:97:c3:47:96:0f:90:b9:38:e7:94:c3:2f:97:8c:b4:16:
         84:23:82:b9:5e:d8:ed:47:ca:7b:13:5a:2b:ba:81:bf:0c:6e:
         c4:64:15:30:a8:5f:bd:2c:5f:e2:bd:e1:c0:c4:bb:be:e7:6d:
         3b:33:05:22:e0:ec:24:8c:5b:2f:1f:bd:b5:22:b9:18:ef:05:
         15:30:52:8a:78:bf:73:9a:2c:d7:d6:07:49:e5:51:c7:bc:b9:
         11:2b:cf:a5:15:b1:39:73:64:f3:4e:d5:c2:82:aa:32:12:4c:
         d3:40:e9:6a:15:61:6b:e7:3b:fb:89:a8:56:ab:52:33:48:0f:
         8f:46:4b:c2:ca:e7:2a:65:29:1b:81:4c:f8:3c:57:c7:47:99:
         51:45:f4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:48 2026 by rpki-client