Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa
File:                     0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa (raw, json)
Hash identifier:          d216rN5aR3oYjkRteGFm5Fr9NMVRvvtvKqgXlsjFmNE=
Subject key identifier:   E1:A7:59:66:C9:79:0C:2F:AC:2D:FB:EF:3A:82:61:71:4D:FF:90:47
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E6B0A0AE2904ABBE8F0412820
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        192.29.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0a:e2:90:4a:bb:e8:f0:41:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=d842eb63-c5cf-41bd-83b3-e0f9ebbe5959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:df:14:9d:1d:02:03:99:34:9a:4e:da:dc:
                    bd:82:be:25:af:07:da:95:a8:31:87:7a:85:12:a3:
                    8a:43:ad:70:57:98:2a:34:cd:6a:13:a4:fc:8f:f0:
                    94:7c:1b:d9:0c:2d:f5:6d:04:f2:53:a2:28:d9:ec:
                    17:af:dd:c4:b3:c5:c0:59:1e:55:95:f9:cb:72:d1:
                    22:99:4d:a8:06:53:ea:b5:13:d4:7a:6b:89:15:35:
                    97:01:35:d7:22:01:d0:0d:9d:52:95:4c:51:ce:e3:
                    59:6b:96:e4:a8:55:9e:a7:08:82:02:48:cb:ce:48:
                    5c:76:03:31:ff:11:e9:cb:40:71:00:8a:29:1c:06:
                    86:e9:0b:71:32:59:cc:44:61:ad:a6:df:79:59:8b:
                    b2:f0:6f:7f:42:d0:2a:1f:91:26:7f:69:d3:6e:50:
                    46:56:01:4c:7e:94:57:ff:84:01:8b:b9:43:c6:8c:
                    8c:59:f5:66:0d:16:89:d2:39:a8:91:04:65:5d:3f:
                    d9:a5:56:a5:88:ea:4d:71:be:7c:22:a5:7a:37:e2:
                    17:d9:22:0e:4a:41:ef:00:83:b3:72:fe:8e:15:cc:
                    24:c9:bf:82:d2:06:6d:ef:b6:1d:66:4e:18:b3:16:
                    84:42:3e:2f:db:55:b2:be:f0:d8:18:4b:a6:49:7f:
                    05:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A7:59:66:C9:79:0C:2F:AC:2D:FB:EF:3A:82:61:71:4D:FF:90:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0016433d-8f1c-341a-a5ec-9efd5c6aefbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.29.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5b:ca:2a:1a:a2:14:79:72:a2:cc:05:1b:05:5a:ef:48:69:
         9e:55:d0:88:7c:54:8f:5c:4a:f5:4f:20:ce:fa:6e:29:46:aa:
         74:66:69:db:17:c1:70:38:51:ca:7f:dd:6d:ed:56:c1:37:5b:
         47:51:9d:c0:21:a2:00:5c:8d:2a:61:68:d7:c4:da:2e:3f:03:
         58:9e:66:2b:c7:3d:26:9c:91:40:f0:0a:03:11:33:43:c6:70:
         bb:5f:d8:50:fa:86:ff:68:e8:7c:92:16:9f:1e:31:fe:a4:d5:
         ef:d4:03:92:dd:a4:84:55:d3:e4:4a:be:59:3a:d7:6e:32:4b:
         d5:8c:ad:27:d2:8e:05:55:36:e4:b8:5d:38:0b:e0:0f:33:e8:
         50:62:59:a2:40:3e:c0:ad:91:76:f9:30:85:c2:40:eb:78:cd:
         8b:74:34:c6:04:fe:94:66:f0:12:0a:6a:48:57:64:4b:56:40:
         5c:60:11:ad:cd:90:0c:9b:70:08:da:c9:8a:fb:90:16:bb:32:
         ac:e4:da:bf:90:49:63:6c:29:41:a9:92:5a:91:33:ed:f4:8f:
         ed:1d:f8:38:62:2a:da:4d:bd:5a:96:70:9e:b1:03:8d:9f:b0:
         31:dc:1a:7f:46:ec:cc:cc:5d:93:ae:cd:cb:95:6e:34:f6:a8:
         d4:16:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:47:42 2026 by rpki-client