Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b694c74a-c011-372d-afbd-76410c909a24.roa
File:                     b694c74a-c011-372d-afbd-76410c909a24.roa (raw, json)
Hash identifier:          Nx22rpf0bzZomdYFiTzkHLsgb53sl5o5Qwns6SsyuWw=
Subject key identifier:   32:EB:32:47:1A:0D:DD:70:4B:C7:0B:7D:1B:E8:CA:B7:4F:55:AE:B3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EE2273D3BBBC7454F27DA4500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b694c74a-c011-372d-afbd-76410c909a24.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     46558
IP address blocks:        129.213.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:3d:3b:bb:c7:45:4f:27:da:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=f37e9639-e58b-4530-a108-ec20de3d5e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:5b:e5:46:83:4c:f1:ba:32:e5:80:62:06:
                    13:a3:ce:53:62:87:9a:63:58:cd:04:ca:33:0b:41:
                    55:ce:47:9a:f0:1f:b6:d1:ca:38:a1:f6:b4:09:c6:
                    bb:4f:b8:ae:a1:9e:31:81:bd:d1:cc:ee:3b:91:7c:
                    da:14:92:39:fe:41:23:c3:5e:07:f3:cc:4a:f7:8d:
                    85:df:5c:2f:cd:41:0e:25:06:40:a6:49:8d:83:6d:
                    eb:9e:d4:d9:e0:4d:bb:f4:f6:e7:af:78:a5:48:4a:
                    61:42:b7:3d:5d:e8:b9:d8:b6:46:7e:48:c2:a8:36:
                    f0:90:9d:66:21:24:13:21:9b:92:c4:85:11:1d:75:
                    4d:a9:da:93:aa:7f:72:0c:71:a1:49:aa:59:34:a9:
                    10:1a:16:24:04:f3:2f:23:a0:d9:0b:44:9b:44:4d:
                    db:a4:04:2a:ab:10:c6:ce:e9:10:04:9c:bf:3b:06:
                    9a:35:92:d6:d2:f2:fc:a6:bd:5f:e5:86:74:4f:a8:
                    21:f4:13:18:3f:0a:1b:11:02:f4:3c:80:d0:dc:63:
                    57:fe:fd:ee:68:73:e7:e8:c5:39:58:49:07:56:94:
                    39:64:0e:be:12:d7:3e:7d:84:ba:46:99:27:fa:9e:
                    9d:5d:86:a3:96:a7:08:b2:26:02:0d:87:4f:12:3d:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EB:32:47:1A:0D:DD:70:4B:C7:0B:7D:1B:E8:CA:B7:4F:55:AE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b694c74a-c011-372d-afbd-76410c909a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:d8:db:66:29:1f:22:67:de:87:2a:0e:fb:46:b1:8e:f6:
         73:c1:12:2c:19:02:05:45:e8:4d:56:aa:54:fa:d4:f9:9e:1c:
         9f:48:31:87:71:6a:97:17:89:a8:a7:43:ad:e9:23:59:dc:2c:
         fa:d6:98:d7:4c:93:bc:05:af:7c:1b:f1:b1:04:04:87:82:e3:
         95:c5:12:39:82:a1:bd:e6:64:d0:80:d9:79:8c:1b:17:24:88:
         55:21:64:f8:5b:f0:0f:34:dc:4e:07:6a:ef:b9:10:63:e1:80:
         fd:a5:91:ef:f5:9f:d9:03:a6:18:9d:11:e2:00:b4:e9:aa:d4:
         85:e4:dc:87:f6:0a:87:d5:28:7c:c7:ee:15:f7:0f:2a:63:e1:
         55:2a:bf:97:d9:b5:4b:a9:70:ba:99:61:34:f6:30:22:e1:88:
         bb:f6:e3:96:c3:24:e6:ad:0c:2c:1a:87:16:90:5d:1c:91:e1:
         d6:02:60:20:6f:d7:16:1d:b2:bd:64:b1:4d:77:40:3c:b2:9d:
         f7:71:f8:8e:99:86:f6:9b:ec:cf:7e:61:f4:2a:c7:41:42:ed:
         fa:76:27:13:ac:eb:25:58:62:f9:d8:f8:8d:4f:af:96:75:e5:
         ff:09:95:23:ff:c3:5c:b0:29:cd:ee:c0:44:47:99:26:98:ee:
         8d:68:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:50 2026 by rpki-client