Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa
File:                     1c6d454f-eff3-36c5-a242-1155de42889c.roa (raw, json)
Hash identifier:          REpkJdu+xShkOaqRFXKV2+VgbunRVXRabiyMD1UnCe0=
Subject key identifier:   DB:42:13:1E:01:2F:AD:2C:87:30:8A:B2:CC:83:B4:C6:0A:18:40:05
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E2AD45E3891B716AA224E4F60
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        129.41.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5e:38:91:b7:16:aa:22:4e:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=a83664a2-ded1-45d8-9cee-092a4bab4b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:8a:84:42:db:f6:e8:2f:77:60:e7:df:6a:
                    2b:62:59:2e:96:d8:3e:5c:84:b9:a5:18:09:ba:09:
                    da:0e:d0:40:ce:44:29:a9:c9:52:e5:1a:b3:f8:5e:
                    44:b7:4e:4a:21:f6:ea:68:6a:71:da:93:46:ae:67:
                    41:78:86:52:59:40:f6:2e:08:7d:6a:c9:98:a9:7d:
                    e1:0c:7d:db:0f:ab:63:3e:b3:00:00:c0:9f:ac:89:
                    b6:af:16:05:b9:1e:5f:c7:c0:74:c0:d9:92:e9:8b:
                    a6:69:80:30:68:fd:c7:a9:27:66:5a:91:d4:8c:19:
                    78:c1:f8:7f:3c:06:81:f7:f6:e8:94:7c:e8:48:0f:
                    9a:ec:4c:ac:ef:e9:f8:71:2a:1e:66:63:b2:0f:a3:
                    47:ab:f1:3b:3b:83:29:da:a0:f8:0b:16:7e:2e:5a:
                    70:3b:6d:eb:11:5f:d4:91:84:a0:6c:69:47:00:89:
                    c3:fb:22:fa:1e:55:92:99:3a:b4:03:57:0d:c7:90:
                    58:6d:d5:45:fe:25:19:cb:19:20:b7:c3:62:54:47:
                    6e:6d:b6:b5:84:33:57:60:6a:14:84:f0:1c:07:2a:
                    30:f7:67:4a:e7:22:cb:6a:c0:ba:42:39:d0:de:7e:
                    36:69:45:4a:98:05:74:2f:5e:23:0b:7b:f7:b9:a2:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:42:13:1E:01:2F:AD:2C:87:30:8A:B2:CC:83:B4:C6:0A:18:40:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fd:93:48:84:dd:cb:b4:da:2a:9a:ee:55:e7:d2:79:42:2e:
         10:34:57:df:1c:57:8e:f1:07:ad:03:5f:2d:5f:a4:2d:22:d1:
         fc:c3:5f:17:89:eb:0a:95:e5:9f:f1:3f:8d:68:e3:1f:b1:35:
         a0:a7:83:83:34:8d:e6:1e:00:06:87:09:7e:82:e4:e1:8b:0b:
         4e:e1:9d:a0:15:21:a4:34:23:3c:60:3d:eb:a1:89:b5:1d:bc:
         15:5e:a0:22:a2:61:5b:bf:60:97:b3:8b:f5:73:ec:53:51:f2:
         43:e7:e8:77:67:1b:52:0c:fd:43:7a:b0:1f:94:6c:20:8a:4c:
         88:3d:c7:f8:71:ef:83:df:4c:11:11:2f:9f:9f:11:cd:a4:85:
         b5:66:4a:60:94:90:b0:05:7d:02:a6:c5:4f:ef:d5:1c:6c:2d:
         e4:d4:e9:7e:8e:a0:54:44:a2:c7:80:f2:ab:23:36:27:81:ac:
         28:07:5b:c3:e2:fc:3b:08:23:e7:4d:e4:21:37:c8:7e:b4:1a:
         f5:12:a3:24:8c:79:64:bb:6e:7b:46:5b:cd:b1:03:87:04:f1:
         6c:cb:a6:4b:d9:85:86:d9:a0:02:4a:4c:09:35:85:83:5b:ba:
         96:33:a8:e8:a9:01:eb:0c:b8:f0:c3:25:8b:da:2f:5e:f2:00:
         c4:d5:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:37:49 2026 by rpki-client