Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0bc90d09-c374-3ab8-86c0-329828733487.roa
File:                     0bc90d09-c374-3ab8-86c0-329828733487.roa (raw, json)
Hash identifier:          Eozzxi9xpdB5c638FCGq7fYMBEiDyT4Sk+viDkN+Zto=
Subject key identifier:   9F:5A:C6:8A:9E:76:48:AB:C4:A5:72:F2:1A:41:6A:13:D3:4F:2D:AF
Certificate issuer:       /CN=0eb0be5e-7cff-4077-992b-f867365a59c5
Certificate serial:       010D0C9F4328584D0EA7A93B7D94FF7827A37800
Authority key identifier: 29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0bc90d09-c374-3ab8-86c0-329828733487.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     2535
IP address blocks:        129.230.224.0/23 maxlen: 24
                          129.230.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:a9:3b:7d:94:ff:78:27:a3:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb0be5e-7cff-4077-992b-f867365a59c5
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=63f20e20-a7b2-4bc4-a2c6-b7057442a83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:27:9a:8d:db:79:79:ca:02:3f:82:52:89:
                    19:3b:fb:48:41:99:ca:45:56:a4:2a:48:f3:6d:d2:
                    49:74:d0:f7:fa:ed:64:4a:f9:4c:6a:2b:87:83:d5:
                    65:4a:27:11:80:71:d2:d4:41:5c:08:f9:56:f6:2a:
                    a5:f9:7f:32:b8:cf:4f:cf:56:4a:41:90:b6:7d:f0:
                    c5:68:39:ec:42:eb:c9:9e:53:86:58:9e:df:0f:b4:
                    a0:33:5b:a0:bb:74:52:63:b0:43:c5:df:e6:71:b2:
                    82:fb:68:29:1e:01:6a:fc:79:7d:43:2f:96:f9:d3:
                    60:90:39:09:3b:b4:d2:c3:ff:d1:f4:3c:18:67:3c:
                    59:f4:8d:67:29:58:bc:f7:61:23:5e:8e:05:f8:a0:
                    90:0c:48:c6:02:6f:51:b8:89:83:f8:a4:a8:49:bc:
                    ec:72:7f:ca:fc:c3:3b:00:24:76:b6:84:7e:c2:8b:
                    25:2e:42:07:cc:c0:54:0a:98:47:dd:a3:d6:7d:6b:
                    39:0a:f3:8b:58:bf:20:d8:d1:5b:04:b7:52:f7:65:
                    73:71:77:1b:a1:5e:e3:94:93:bc:b1:b2:7a:82:72:
                    75:1e:35:75:a3:2f:a5:9e:c7:74:ad:d5:19:68:67:
                    a9:c6:14:c9:15:f0:c5:1a:e0:d5:f0:d1:31:67:ae:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:C6:8A:9E:76:48:AB:C4:A5:72:F2:1A:41:6A:13:D3:4F:2D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0bc90d09-c374-3ab8-86c0-329828733487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.230.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:49:83:54:53:c5:a3:81:08:29:31:5a:0d:a2:a7:cb:94:
         4d:b2:fc:10:ff:27:8a:fb:da:e4:f1:50:d2:48:9b:31:5c:51:
         12:3d:f1:c8:ec:85:b7:07:15:67:05:09:ce:d2:e6:7c:5c:1d:
         21:c9:bc:47:21:5b:24:13:73:c9:9b:84:1b:e9:7e:37:80:89:
         0d:a0:b0:ca:90:27:c8:e9:9f:76:7a:90:fe:27:cb:d8:fe:2a:
         c6:f3:fa:c3:70:70:a2:28:3b:80:08:63:94:3d:e7:21:d7:06:
         fd:73:8f:d7:d5:c1:85:6d:a1:dc:65:ac:db:78:41:fc:54:e0:
         eb:33:52:db:4e:13:55:75:c1:d3:55:95:1a:f4:80:5c:de:a7:
         41:21:07:84:f0:ff:af:f6:2a:1e:7a:27:f1:d6:43:80:9e:4a:
         28:29:81:62:66:7f:00:21:44:0f:64:b4:a0:8d:b9:16:a1:f2:
         b3:cb:54:6a:95:3e:79:77:7c:8a:a9:cb:ee:ae:76:29:92:96:
         12:18:dc:a3:55:53:66:a6:15:63:fc:17:0c:44:a9:3e:51:97:
         05:ee:91:16:e0:3a:4b:4d:49:5b:3d:0b:b8:45:92:e8:f4:34:
         f6:e3:6f:a1:6c:cd:39:76:1b:63:e6:96:fa:5f:4b:6c:4c:a5:
         d0:d2:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 08:37:25 2026 by rpki-client