Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa
File:                     3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa (raw, json)
Hash identifier:          EkwvbfKGATZ4lO5bLM8kaVk3ZQ2W+datULAzkRLPK7U=
Subject key identifier:   3A:69:E1:45:F6:39:BE:6C:FD:60:CA:E3:41:98:6C:BC:0E:CD:A6:1C
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF18203AD962BDEB7E06D0F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        129.213.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:03:ad:96:2b:de:b7:e0:6d:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=329cdcc0-7e6a-4caf-8134-7b227b1a7d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:e4:2e:d0:5a:cd:1d:ac:50:33:27:e9:bb:
                    cf:4c:43:e8:f5:dd:df:4b:77:38:ce:97:72:ab:8e:
                    79:8b:4c:6f:9e:56:c3:9e:e5:17:c6:bc:00:33:0f:
                    9d:10:36:a2:a9:e8:78:dd:59:a7:a0:4a:d8:b5:9b:
                    0c:43:96:93:a3:1a:e9:cd:1d:47:97:a9:f8:63:f7:
                    19:4e:65:db:53:ed:3d:c2:6a:24:d6:1e:2b:af:77:
                    77:26:36:e2:ab:ac:e9:01:6a:de:a0:9e:21:3d:8e:
                    90:3f:0b:2e:18:ab:43:c3:9a:b5:ea:34:d1:0b:ec:
                    ee:66:9c:29:ef:64:7e:62:51:56:8b:df:c1:6d:cc:
                    c9:2c:7b:0c:ef:eb:f2:a8:6e:ba:11:79:6c:dd:70:
                    01:14:8d:11:ae:cb:1c:2c:37:2b:3d:2f:25:a9:6b:
                    dd:4e:86:30:18:ce:30:9a:61:c4:9f:0c:14:70:33:
                    8e:e9:7a:93:a8:94:94:8d:31:09:9b:c7:61:1c:b0:
                    16:7c:7e:5e:c0:8a:e2:4c:48:5d:6c:a9:c7:5f:4f:
                    28:79:fb:d3:72:a8:97:60:71:13:c5:58:cb:08:ca:
                    96:09:c7:f4:dc:31:6d:39:e0:ee:f6:93:36:4c:a6:
                    2a:72:83:0d:b3:3f:9e:bc:65:c9:a9:25:c0:96:a9:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:E1:45:F6:39:BE:6C:FD:60:CA:E3:41:98:6C:BC:0E:CD:A6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e91cdfd-3765-3f62-b5e9-0095f59d5459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:20:8c:f0:d3:b3:78:5e:5c:3f:fa:64:8d:6f:0d:4a:fa:
         e5:4d:82:e2:3a:53:d8:47:0e:20:43:a1:a7:4e:5d:b8:79:6c:
         00:ff:78:8e:37:3c:ed:7a:ed:90:56:0a:8f:a5:a8:d8:88:6a:
         a2:61:f8:6b:ed:4e:e7:81:74:53:47:9e:17:6b:a0:70:14:8b:
         2e:1f:ba:2c:2e:9b:ed:7a:52:10:c6:1b:14:de:67:aa:c7:31:
         a8:32:fc:8d:fe:73:9a:ae:c1:e9:32:4f:4f:68:48:96:ec:6c:
         ee:30:b8:fd:37:cb:d1:1e:aa:2f:6a:1e:10:4e:b1:e6:51:11:
         8d:b5:c3:88:6a:5f:d2:71:37:6b:04:62:b2:e3:8d:f9:0e:5f:
         1e:6c:90:f1:37:6f:ac:34:ed:f0:75:13:9f:fc:97:ef:83:d7:
         1b:a3:d9:39:ac:d5:35:e7:d3:7f:db:ed:6b:e5:ec:bb:bb:45:
         72:2e:5d:ac:63:9a:54:6a:32:42:bb:6f:63:61:50:0a:fd:3b:
         dc:42:51:8d:84:d2:90:98:a0:b2:66:ff:4a:c6:cd:da:e8:4c:
         39:72:76:7f:84:dd:b1:f5:10:e3:14:9a:fc:0e:5c:46:7b:d9:
         89:45:66:c5:22:ac:5d:78:3c:9d:db:bb:05:e9:7a:96:f2:d6:
         05:9b:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:16:54 2026 by rpki-client