Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa
File:                     24b20201-385a-38c8-90b4-64fc391327a2.roa (raw, json)
Hash identifier:          eE+I39FExUrJbQrWCtvAD/CoWEO6ivzozwJarhBSGRo=
Subject key identifier:   36:7C:16:7E:51:1E:60:E2:E9:34:7B:6C:17:71:DC:13:D9:94:D0:95
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAFBC791CD8279305C91B5C80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     31898
IP address blocks:        129.153.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:79:1c:d8:27:93:05:c9:1b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=54fd811b-7f82-4566-8fb3-9eca4933fe79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:e5:3e:4e:2f:d6:e1:0f:c5:db:32:9f:8e:
                    a0:83:81:32:d2:6d:49:49:b4:29:a6:a3:24:19:b1:
                    87:88:b0:e4:1d:32:e3:2c:1f:b8:72:c7:63:8e:d9:
                    fc:0e:11:15:cb:f5:b3:82:99:d2:12:e4:cb:25:8f:
                    f3:5b:3c:bd:a5:c6:cb:5c:41:23:2f:f5:c4:ad:40:
                    d1:e9:5e:fd:08:cd:08:61:e5:58:fa:38:35:d0:20:
                    7f:47:bb:a5:3a:54:43:1b:f4:86:e3:59:b0:21:d8:
                    39:ad:a3:53:af:61:41:d6:bb:e8:53:85:45:1b:5b:
                    b7:b4:34:bc:b6:d2:89:10:58:94:f0:79:58:83:6f:
                    69:58:02:1a:17:ce:b3:bf:da:e5:c5:1a:60:81:44:
                    22:50:d2:de:bf:38:81:c0:af:d9:b7:56:43:28:f3:
                    82:7e:93:f2:29:b7:24:e2:d5:92:0a:b3:b0:06:74:
                    f3:fa:3b:ee:d0:dc:fc:fd:f1:e1:f3:f0:b8:0f:64:
                    36:ca:ba:37:89:f4:c3:84:9f:6d:52:6c:c9:5d:8b:
                    93:d7:ab:dc:46:6e:d5:b5:55:88:7a:d7:53:a5:4e:
                    79:1d:08:ce:64:8c:5f:3a:0f:49:83:42:6a:9a:4f:
                    6b:cf:04:8a:f4:dc:f5:e7:a3:c1:17:68:a8:98:26:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:16:7E:51:1E:60:E2:E9:34:7B:6C:17:71:DC:13:D9:94:D0:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.153.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:6c:36:2b:de:73:b7:50:67:d6:6a:08:a9:fc:50:22:25:
         a7:8b:0a:b8:da:e5:f7:c5:3e:b7:f5:98:f2:83:d2:e0:86:e2:
         c7:d5:50:45:f3:83:73:aa:e2:4f:10:8e:18:37:79:41:21:6e:
         6a:1b:1a:39:b1:5b:2c:34:2d:b3:cf:68:3f:73:58:d0:f9:c6:
         01:c4:af:6c:41:bf:ea:49:30:89:75:8c:77:76:98:92:1d:3d:
         00:33:ad:c4:ea:99:06:6b:f8:ce:d3:b0:8f:9e:1b:6f:b0:54:
         27:3e:84:14:d2:66:f8:ee:28:fc:79:19:fd:fd:ee:57:32:64:
         27:f0:5f:6a:8d:55:e4:7e:cd:3f:17:8f:e2:59:9e:b3:59:2e:
         5b:78:bb:e5:63:6c:44:8b:5f:bb:bf:c6:86:df:6d:08:62:0c:
         40:f4:c5:d0:a9:71:cb:16:bf:d6:e1:69:83:49:88:1b:52:3b:
         27:2e:8f:58:22:97:ff:94:75:99:08:fb:2f:21:20:3c:f6:ec:
         50:42:a6:e8:41:2e:09:c0:c8:d4:99:9d:21:fa:4f:64:06:08:
         24:13:24:03:62:49:07:1c:93:07:ce:4f:7c:85:d8:10:b4:c5:
         4b:de:97:98:6a:7a:1e:08:c2:57:21:e6:5f:b6:ef:9e:bd:e8:
         a5:5b:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:31 2026 by rpki-client