Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4798278b-f9d8-39fe-bf3e-48e74429fa5a.roa
File:                     4798278b-f9d8-39fe-bf3e-48e74429fa5a.roa (raw, json)
Hash identifier:          9eCNsnvNgch9kG85AzXMUcBm7vr+7sbMugUrFHr/1HE=
Subject key identifier:   7C:62:2C:70:80:9C:D7:EE:FB:E6:B6:6C:46:CA:6B:15:C4:07:A1:9A
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EE227543C0A64434730A6ED80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4798278b-f9d8-39fe-bf3e-48e74429fa5a.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     46558
IP address blocks:        129.213.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:54:3c:0a:64:43:47:30:a6:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=d89e6123-e42b-431e-99d5-0bceeaf88978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:39:d0:27:4e:71:4e:05:3e:a3:63:41:12:
                    58:dd:6a:ae:d6:22:74:ba:f6:96:27:bd:83:89:79:
                    9e:9b:87:e0:04:e4:79:6a:e9:f8:c2:6c:61:53:4a:
                    80:3a:6b:ba:7b:af:a2:a3:77:36:38:66:6e:66:32:
                    d7:50:43:90:c3:5d:24:2c:72:69:03:1f:eb:9c:4d:
                    e6:08:0f:aa:9d:26:7a:6d:05:e8:24:2c:1b:02:98:
                    cf:e9:50:80:6a:96:b6:44:85:fd:8c:38:1f:aa:b0:
                    9b:9b:aa:88:88:24:16:1b:8d:f3:d7:8c:fb:e2:b9:
                    15:8a:18:06:a7:97:ba:ff:24:a8:47:63:00:89:89:
                    e6:e3:63:ba:35:cd:79:2f:96:37:d8:35:1f:88:ac:
                    bb:ef:05:90:5a:6b:79:25:ec:01:e6:c7:79:6a:d4:
                    ce:39:d6:c5:75:69:ea:7e:27:ab:31:4a:9f:25:e1:
                    55:8b:f2:5e:6b:cf:d0:75:7b:14:c2:93:d3:69:67:
                    aa:5f:37:71:b8:96:b9:95:9f:92:3e:d7:c6:ba:39:
                    85:84:06:3a:91:05:94:8d:7f:2f:da:47:df:95:32:
                    c8:d5:f8:ec:55:07:ff:b2:a6:97:53:61:dc:f8:4d:
                    78:7d:55:bc:cd:02:d1:da:3a:f6:72:e8:91:a6:83:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:2C:70:80:9C:D7:EE:FB:E6:B6:6C:46:CA:6B:15:C4:07:A1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4798278b-f9d8-39fe-bf3e-48e74429fa5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:68:07:66:f0:74:e3:cf:43:0e:ff:7e:13:63:d5:6a:dc:
         7a:f3:4c:a6:fc:c1:6d:cd:69:e2:24:c0:92:05:02:c4:9e:c4:
         6a:51:49:2f:a5:0f:8a:87:57:7f:ed:d3:48:8a:e6:1c:ee:16:
         cb:8a:ec:00:b0:c2:cb:13:00:db:0a:e0:d0:6c:61:8a:95:c5:
         03:d6:eb:e3:59:cc:ee:4b:54:6f:52:77:e4:d0:26:72:59:ef:
         63:8f:b4:d0:f7:8b:5d:24:d6:a8:e8:a6:1a:cd:68:2f:cd:6f:
         56:35:c2:95:59:ff:3c:3e:53:e1:e5:48:32:e5:0d:ee:46:dd:
         d4:2e:44:63:0e:b3:85:2d:c8:60:4c:8e:98:46:e3:2a:cc:29:
         05:35:11:79:e3:4c:27:fc:7f:5f:8d:db:bc:b5:2e:29:f4:12:
         1f:16:ec:de:ca:8d:ac:72:1b:f9:1b:44:2d:7e:bf:76:12:47:
         fc:10:1a:e1:23:92:5f:07:d9:5f:cd:bb:cd:d5:9c:8a:e0:15:
         9e:d1:bc:04:1e:6b:62:b0:08:56:3e:db:0f:8d:29:49:25:00:
         fd:39:8f:dd:2e:4d:77:7b:47:03:7e:08:f3:0e:34:05:e3:a0:
         06:ce:3b:ba:2e:20:5b:7c:74:d1:42:a0:96:e2:ab:fd:96:84:
         71:2d:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:38 2026 by rpki-client