Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7d688b7e-7ab5-3ea2-95de-3039e60de945.roa
File:                     7d688b7e-7ab5-3ea2-95de-3039e60de945.roa (raw, json)
Hash identifier:          ObTGoDNDZxmvCxiChImb/v2VJto4aCxqPYpHZfCYUsg=
Subject key identifier:   CC:94:0A:15:60:BC:46:B5:DE:1E:79:DE:DA:26:97:5C:67:F1:3B:12
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E2AD4579378FDD611933A34C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7d688b7e-7ab5-3ea2-95de-3039e60de945.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        129.41.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:57:93:78:fd:d6:11:93:3a:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=66756107-c9d6-4c41-a62a-685905ff3430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:55:4d:8c:61:b8:81:73:af:89:e8:1a:5f:
                    ba:97:48:34:c0:d7:09:0b:f3:57:cd:67:60:70:e1:
                    95:33:ad:7c:ab:a2:08:53:91:3c:d0:c1:c1:88:69:
                    08:6d:fb:02:80:f2:86:d6:35:da:f3:3d:2f:88:44:
                    87:52:f8:fb:27:33:06:a2:59:82:5d:ff:51:3d:a6:
                    78:f3:e2:19:c9:98:2d:0c:81:e8:ed:50:03:b9:07:
                    37:7f:01:43:73:e3:70:26:1a:52:5f:88:d3:9a:e7:
                    ec:c2:1f:56:33:f4:dd:b9:f5:ed:9c:dc:99:a6:2d:
                    09:06:33:46:36:6c:69:31:9b:69:d8:87:e8:fd:08:
                    69:53:3c:9b:63:e2:1f:3d:07:05:7d:8d:b2:58:a4:
                    64:b4:d0:56:95:f2:60:26:c3:d3:50:6f:4c:4c:1a:
                    38:91:60:f5:8c:78:a7:fe:15:63:35:72:28:77:f6:
                    9f:a5:7c:f2:09:f4:da:63:59:80:f8:66:2e:9a:fc:
                    10:49:63:ad:cc:9e:46:aa:7b:db:c0:b1:6b:fe:e2:
                    7c:40:54:f9:10:93:71:d7:fa:43:f9:ef:9a:69:c1:
                    d4:4b:c6:d8:24:75:92:ce:5e:6c:3a:57:fc:8f:77:
                    3e:aa:ca:67:c4:27:09:89:84:73:e9:95:ab:2e:1f:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:94:0A:15:60:BC:46:B5:DE:1E:79:DE:DA:26:97:5C:67:F1:3B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7d688b7e-7ab5-3ea2-95de-3039e60de945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:7d:40:e3:2d:97:38:73:12:ad:0a:7a:26:4f:c2:b8:1b:
         6c:35:f1:8c:6b:1d:a8:d4:be:61:2e:5f:d1:1b:fe:63:12:6a:
         9d:2e:ac:a6:8b:e7:92:67:dc:f7:4f:fc:cd:3c:12:ac:fd:f8:
         8e:cb:fe:63:8e:4d:0b:a8:6b:f0:4f:fe:7a:16:b9:fe:50:f4:
         d1:fc:81:79:08:e8:50:bc:25:da:a9:3e:d9:1c:d3:19:11:3e:
         62:f3:99:c3:0c:06:da:f3:44:b0:b1:43:16:7a:44:78:4a:45:
         a6:c8:70:d8:21:6a:55:86:a2:3b:1a:60:27:79:a5:5a:d9:0c:
         0d:e5:49:89:95:89:85:ae:5c:75:c5:9f:e1:df:85:74:0d:38:
         a1:bc:dd:37:43:e5:e0:00:af:29:dc:b1:39:4c:9b:a6:ce:51:
         29:70:e2:df:c8:0e:f3:d0:bf:e6:42:31:3a:bf:7f:d4:bd:12:
         a5:78:ca:74:d1:82:2b:b5:72:5c:72:b2:e5:b0:a5:f3:51:7e:
         24:29:20:d2:96:55:f4:e4:7c:69:e6:f8:b2:ae:62:b5:fb:60:
         8b:3f:ac:39:37:80:3c:ed:33:7a:ba:ed:87:16:d6:c0:ea:01:
         ba:95:5f:ca:73:29:80:26:07:04:90:7a:8d:e0:1e:76:af:2d:
         65:ef:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:34:30 2026 by rpki-client