Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa
File:                     d29f17b0-7a5d-310a-83f6-37c093f206a3.roa (raw, json)
Hash identifier:          asFuiJfpy0lCJO9UE+IFfjREjI4hv0QriLGSxSnc41g=
Subject key identifier:   7F:3E:27:29:7A:A5:BE:87:B7:FA:A1:9C:3D:72:8F:33:53:EB:DE:4B
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584CAE5EB72FCB4A68D9DF3BE680
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        150.230.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:b7:2f:cb:4a:68:d9:df:3b:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=207820b1-4050-4cec-8618-1073b19a0d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:66:dd:fe:91:d8:f0:de:0e:b0:67:10:5a:
                    c1:50:e6:1a:6a:35:64:a7:9b:2d:33:7d:cf:84:8b:
                    fe:19:a0:78:3e:f0:44:74:23:b0:c5:a6:aa:f9:d1:
                    01:1b:e9:83:99:3d:ba:2a:28:e0:c1:bb:df:83:58:
                    dc:2a:8b:aa:e6:c7:f6:73:1a:d8:98:39:51:de:40:
                    7f:b8:6c:6b:61:d6:b5:e4:52:04:16:c8:2f:74:2e:
                    2f:93:7e:65:f3:a7:0a:d3:e0:f0:1e:8f:fc:94:2e:
                    8a:bc:41:4e:87:00:e1:73:26:05:39:bb:df:63:a5:
                    5f:12:23:a5:d3:b9:63:d4:9f:cc:0d:da:4c:1a:2e:
                    89:93:f6:3c:20:d0:f6:a6:88:4b:f5:09:49:99:bb:
                    11:54:da:ab:41:62:f3:59:5e:01:d3:da:b0:33:fb:
                    58:88:51:3a:6c:d6:5d:f9:63:53:e7:6b:3e:1f:37:
                    bc:99:20:cc:5e:cc:52:fb:86:c8:b7:ed:37:bb:a0:
                    5c:ff:84:3a:01:58:3a:1c:e9:9d:df:7a:1a:62:72:
                    80:c6:c7:e8:60:77:a6:f2:f2:32:d2:05:90:e1:4e:
                    43:b9:85:bc:5c:af:50:ed:11:36:7e:1b:ea:90:7a:
                    6c:ee:4f:bf:91:b9:55:52:de:af:2b:10:42:c2:3b:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3E:27:29:7A:A5:BE:87:B7:FA:A1:9C:3D:72:8F:33:53:EB:DE:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:c1:83:76:5f:a1:06:20:22:04:5a:94:c9:d6:8f:2a:31:
         67:64:12:43:9a:b0:ba:b8:63:60:c0:3b:69:dd:43:f7:e4:47:
         a5:05:d0:5f:70:8b:d3:66:f6:30:9d:a8:f7:7d:3b:43:b7:d6:
         76:17:5f:e7:4d:3a:60:4b:83:df:70:21:b3:8a:f7:86:f7:4c:
         84:33:38:91:c5:45:37:3c:eb:48:12:99:83:57:b5:96:67:25:
         cc:cb:9d:ca:43:ed:c2:8b:30:57:cf:d3:eb:9b:d2:e9:9b:2e:
         3c:d0:ac:e1:b5:cd:4b:7c:d1:ff:7e:4b:71:74:0e:ed:a1:1a:
         3a:5f:2d:f3:13:29:91:80:1a:92:2a:33:1b:c1:2e:52:83:ae:
         c1:9a:cb:3a:35:86:99:b1:c2:23:aa:54:e2:78:ea:fd:ac:ef:
         88:3a:0f:fc:26:86:71:9c:2c:01:6c:41:97:0c:c7:e2:af:f8:
         76:99:c2:21:b5:bf:85:be:35:4c:d1:0b:b5:9f:86:39:d6:11:
         14:08:c6:e5:01:77:b3:51:ae:da:8f:27:1a:c5:96:cd:09:07:
         66:cd:1a:31:bc:a0:c4:3a:67:c6:10:62:f1:fe:bc:43:19:17:
         07:6b:5e:6d:da:45:54:a0:7b:e0:54:11:aa:ba:42:a0:e4:fe:
         26:d5:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:43 2026 by rpki-client