Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa
File:                     463eb926-1d00-3196-b72a-aa5e42a7152f.roa (raw, json)
Hash identifier:          /kMwle1V0CodbXaS8F28lXO4XLrEe64yBtHd+jDRWn4=
Subject key identifier:   96:5A:A0:82:48:36:EB:4D:63:63:2B:FC:C1:5C:D4:C7:64:97:C2:41
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584E709F71010EF95460B45B3220
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     31898
IP address blocks:        129.146.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:71:01:0e:f9:54:60:b4:5b:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=f0eb132a-a9e5-4bbc-9213-66141f2916f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:ef:54:de:29:2e:0a:e5:3a:41:c3:ea:85:
                    6b:15:f8:00:8b:a9:0a:16:00:fa:73:03:8a:75:ff:
                    cd:49:ae:e5:39:d1:76:91:e1:53:af:95:1c:30:76:
                    48:bc:b8:ca:8b:fa:ca:30:2a:19:f6:8f:9d:93:7c:
                    3f:99:b4:06:1e:7c:5c:a6:30:48:ad:f1:53:3e:bf:
                    e4:a6:98:ce:f7:e6:49:32:c0:ec:a2:cf:d7:3a:7b:
                    d1:25:5f:67:46:dc:39:c4:1d:3a:4f:1d:e9:f5:02:
                    7b:45:d6:cb:d0:b0:5e:be:60:6d:45:3d:78:a6:4c:
                    43:21:6a:7e:35:68:97:98:78:81:61:63:be:d0:fc:
                    26:f3:a1:34:4e:ed:f7:6b:e5:67:1a:e3:38:d1:bc:
                    88:bd:e9:f2:e5:15:8e:98:7c:d5:09:a6:d8:5b:7c:
                    3a:07:71:ce:93:90:a9:c5:98:06:f9:22:2d:46:32:
                    bb:50:98:01:1d:aa:9e:b1:82:db:ce:7a:fd:4d:e0:
                    38:67:7a:f0:bb:06:3a:bb:27:54:60:5e:90:4b:cd:
                    18:3b:f6:63:c6:9c:24:81:59:ce:f1:21:e1:f3:89:
                    cc:a5:b1:aa:79:69:20:ca:63:cb:2a:f3:c3:46:e5:
                    37:90:ae:28:c4:58:8e:85:27:81:e5:06:df:d7:ed:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:A0:82:48:36:EB:4D:63:63:2B:FC:C1:5C:D4:C7:64:97:C2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.146.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:34:d0:47:50:30:d6:37:75:3b:85:33:62:7a:2e:3a:1a:
         8b:90:91:20:ea:07:24:6c:6c:7a:62:fc:31:86:ae:06:8a:bc:
         18:80:dd:ce:89:3d:00:6f:25:da:0b:81:25:6c:d2:a5:5c:a5:
         3e:05:e4:4b:79:45:d2:4b:ed:72:0c:1e:06:25:b8:e4:74:d9:
         3e:44:47:a1:58:bc:43:84:92:e6:5c:b7:e1:3d:da:f5:50:e4:
         ab:0d:59:e8:2e:95:16:e8:cf:cf:73:a0:1b:79:af:a8:d6:61:
         cf:53:7a:21:83:9a:0a:b9:bd:97:5e:18:4f:f4:7c:fa:bc:01:
         b0:43:de:46:b5:17:7c:6c:16:a9:43:69:af:5e:f0:f6:df:06:
         b4:63:75:0a:69:f1:97:f8:9b:59:0c:3b:e0:8a:37:bb:dc:2f:
         da:9d:f6:c7:f5:19:5c:3f:1b:e0:c5:9f:73:df:64:e5:69:3f:
         b6:a9:15:40:43:3e:b5:3b:8c:7e:28:84:2c:92:1d:3f:1c:24:
         d3:4a:f7:83:ff:08:8c:c1:27:ce:36:46:87:b2:7c:57:10:fd:
         41:69:5c:4d:b7:5a:60:8e:e8:99:b7:98:0e:63:cb:54:c6:18:
         df:20:c6:5c:bf:bd:7e:de:77:a6:8c:49:d0:52:1b:71:70:45:
         f9:88:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:05 2026 by rpki-client