Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa
File:                     aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json)
Hash identifier:          Y94L5RYE5iQhBwtYFmchmCJTm3JChJoQlocHNWYpEYA=
Subject key identifier:   91:79:CD:A1:3D:11:90:EF:5E:99:DA:D5:F9:04:44:6B:69:01:DA:05
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E2AD457621DC6BB5CCEF2B8C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        129.41.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:57:62:1d:c6:bb:5c:ce:f2:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=4ec58861-9443-4c31-a073-9f37c5f853aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:0a:e3:55:9a:37:d0:e3:ff:cf:11:5f:ad:
                    e4:3f:07:38:31:5b:7b:e2:18:a9:20:45:e0:63:95:
                    e8:4a:27:cf:cf:ea:5c:56:93:3f:d9:91:3e:ab:0b:
                    84:0f:70:f2:ec:5f:23:50:16:4e:d0:5b:3f:ab:8a:
                    0c:52:38:e1:bf:d7:cd:78:69:1a:d1:06:d6:c1:30:
                    b9:08:b6:f7:17:89:85:1d:00:fe:c9:4c:16:49:4a:
                    cb:4a:d0:43:80:af:43:3b:6c:6a:c4:f0:28:3c:9e:
                    d9:64:5b:f6:28:41:41:52:96:6f:a4:f9:90:0e:fd:
                    31:5b:9f:cd:99:ee:28:5d:39:19:ec:a7:9f:39:d1:
                    00:67:69:f1:08:66:98:01:4c:75:79:57:b2:95:7e:
                    c2:f5:d9:94:89:be:54:0e:80:60:d7:6b:6b:7d:9a:
                    f4:21:9e:10:9f:ec:d0:93:7b:f6:93:31:25:3e:13:
                    b2:aa:4c:54:6a:74:82:cc:ec:94:19:91:61:13:58:
                    15:32:69:1f:94:cb:3f:4e:e1:81:44:46:48:2e:75:
                    c0:13:92:5a:77:75:e3:c0:17:a3:e1:ca:58:d0:c4:
                    8a:4d:1d:dd:0f:20:ba:f3:1c:6d:7a:50:28:95:3f:
                    ab:44:2f:b2:c7:ba:0d:eb:7a:cc:cb:82:98:4f:22:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:79:CD:A1:3D:11:90:EF:5E:99:DA:D5:F9:04:44:6B:69:01:DA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b0:d8:ec:6e:47:1e:07:ef:f8:99:3f:ac:50:a7:49:83:81:
         31:1c:ba:1b:21:67:3f:c1:1c:7f:8e:20:7d:bf:7d:ab:00:ef:
         0f:b2:67:9f:54:ca:db:98:42:e8:f5:2c:c7:bd:c7:29:43:46:
         b7:93:19:62:b9:97:d4:5e:10:41:3c:1a:4d:fa:51:be:86:fe:
         5f:52:7b:f9:a2:fa:34:c1:c2:2b:75:ce:9d:3a:05:ac:fc:d3:
         d6:31:53:ee:90:6f:a6:e9:15:4d:18:a9:88:6d:20:65:06:e7:
         0a:e2:72:e4:9c:d3:87:ae:15:5c:bf:74:3f:df:76:b2:76:29:
         40:cf:78:bc:0e:69:af:a4:8e:da:ce:7f:b8:f9:f4:d4:40:86:
         b8:97:57:06:83:27:c8:22:6f:dc:b5:23:93:ce:b0:f7:91:bb:
         a6:83:a2:1f:41:2b:0b:41:04:f6:71:2f:b2:01:92:fa:8b:53:
         5d:41:11:ef:3a:0c:d9:9e:04:6e:ae:f0:3a:b6:6c:f3:5f:fc:
         fd:ea:c1:57:6e:59:39:71:41:cb:88:bb:c3:18:7c:3a:30:0c:
         12:37:76:51:11:2e:16:70:21:c8:61:8f:bd:51:7b:08:0f:b7:
         9b:26:65:47:4a:71:03:4d:c9:ec:0c:b7:d4:7b:fe:5c:a1:e5:
         1d:72:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:33:15 2026 by rpki-client