Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa
File:                     2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa (raw, json)
Hash identifier:          Ya9sHzRHId6jrtRDhxqN3mRCYwCYnHdUTh9UXuhsP1M=
Subject key identifier:   EC:E7:97:DE:3F:10:8C:61:5D:68:43:97:67:E9:10:FA:BB:36:F4:B4
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584E9D4A6FAEF260A82A0E185240
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     11808
IP address blocks:        129.101.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:6f:ae:f2:60:a8:2a:0e:18:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=338cc4fa-98e6-4b0e-84b1-ec4eacad4bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:28:86:ae:4d:f0:fa:b5:50:b5:c4:f3:70:
                    9f:2c:26:e2:07:66:58:2d:8a:67:3b:81:f5:6f:c7:
                    71:62:63:ab:bf:64:fe:be:6d:80:4b:4f:c5:5a:7a:
                    37:31:49:9a:8a:9c:b9:0b:32:c9:cc:7c:be:68:00:
                    ba:6f:ce:03:b1:b5:6c:ee:28:45:ec:fb:29:5e:c1:
                    4b:11:48:58:d9:c8:03:63:ee:bb:af:f9:5d:ad:31:
                    d3:a1:c3:90:5c:77:1a:f5:f2:0b:9b:85:70:5c:15:
                    d8:cd:45:f9:95:c1:e7:39:08:fe:0f:5c:57:d6:d2:
                    78:22:76:e1:91:53:3f:09:b9:5f:47:df:af:e2:80:
                    d8:fd:1e:fd:9a:8d:02:de:ff:68:a7:69:45:2a:90:
                    c1:6a:12:7a:9d:2d:45:3d:76:98:4f:4b:4c:41:77:
                    50:86:f8:b9:d2:85:be:46:e4:2d:44:5b:ad:d6:7d:
                    d6:ad:d8:da:70:34:01:e3:a6:df:29:17:78:81:92:
                    5b:8b:1b:2e:80:2e:b1:52:0b:33:98:6e:c3:6b:6f:
                    b5:66:b7:c5:94:0e:17:90:99:35:05:fc:2c:94:ee:
                    d7:c7:7a:8a:76:56:d5:38:68:7b:dc:17:0e:eb:c1:
                    a1:0b:23:11:14:6e:c1:65:b6:36:a1:80:e4:fd:e9:
                    16:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E7:97:DE:3F:10:8C:61:5D:68:43:97:67:E9:10:FA:BB:36:F4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:cd:38:b6:6d:2c:6a:12:39:7f:d4:c7:a7:e0:ae:9a:e5:
         e2:56:23:4c:3d:76:20:fe:b7:ad:9b:de:ca:b9:c7:53:ff:43:
         6a:be:2f:d4:84:27:96:ce:8e:24:b4:b5:3e:7e:4c:4d:48:fa:
         c4:d9:6b:29:59:f7:15:df:11:bb:f7:73:6d:6c:1c:e4:b3:f6:
         eb:36:71:02:3f:fa:3b:c1:49:5b:68:dd:d1:be:78:56:4a:8d:
         73:5c:ff:fa:59:30:43:36:93:a1:79:2c:70:5f:6c:eb:f8:08:
         82:15:3f:6a:98:8f:81:c9:f9:21:28:fd:fa:d0:2d:18:b3:9b:
         21:31:1c:f6:73:48:89:74:40:0a:e6:bd:8d:c0:b4:1e:aa:b3:
         c2:9d:ae:d9:d7:71:58:8e:9c:dd:14:19:3b:a7:af:1a:63:91:
         ad:1b:18:7c:2a:e8:7f:a6:41:de:5d:ab:69:4b:33:e7:b6:18:
         be:c3:27:73:2b:89:b0:b1:9b:c4:7f:4f:b3:66:1b:88:a4:1f:
         14:47:fc:f8:5b:8f:65:25:a7:b9:22:d7:81:1d:de:98:75:17:
         6f:ab:ee:bd:2b:1d:b3:8a:39:dc:b3:3a:7e:f0:dc:e2:56:91:
         f4:1b:7e:a9:d6:1b:d2:d0:78:a1:4a:19:99:de:7b:21:a9:84:
         03:17:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:16:59 2026 by rpki-client