Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c79b8866-260e-3927-bb66-7857e0a46fe2.roa
File:                     c79b8866-260e-3927-bb66-7857e0a46fe2.roa (raw, json)
Hash identifier:          /tyeOsYNLqjUoPhmeEXyLXuP61BV9F+g8dmm/EsC0Tg=
Subject key identifier:   FF:22:4A:9E:D6:D4:7C:F3:6D:5D:A7:88:A6:13:A9:B4:4A:3C:7A:97
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF1822D4C0D1326D358847C80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c79b8866-260e-3927-bb66-7857e0a46fe2.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        129.213.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:2d:4c:0d:13:26:d3:58:84:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=a377dcd2-eaca-47a0-ba24-79c4e73550ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:84:08:03:8d:25:f5:6c:f2:e3:22:07:e3:
                    82:65:b3:75:46:7f:1a:c7:ba:a4:d1:b2:61:d7:a5:
                    8d:76:de:05:96:cb:58:80:ce:a5:2c:06:0b:4b:a9:
                    66:c9:b7:8c:2a:d8:48:92:00:a2:2a:69:01:a6:3f:
                    b7:a8:5e:d0:90:36:87:21:27:f6:8d:85:60:22:85:
                    ab:9d:cc:89:a9:c2:43:43:2b:2a:3a:ec:1a:87:a9:
                    2e:37:aa:72:fd:c7:26:34:00:8e:76:65:21:bf:ae:
                    f0:5b:47:d7:7a:84:ae:62:a6:1e:48:cb:0d:e2:a6:
                    70:d2:6e:51:2e:02:13:d9:df:a7:d4:85:99:cb:6c:
                    54:00:f6:bf:c8:ac:2d:8a:9d:21:e3:f4:b4:35:4b:
                    24:59:3b:40:52:05:34:40:4f:29:d3:31:a9:9c:2e:
                    b1:3a:e6:a7:91:fa:79:ee:2a:e5:cf:e0:e2:56:b2:
                    50:f7:a1:f3:9a:10:10:ee:cb:e4:14:e8:96:66:12:
                    cf:38:e9:cc:67:7d:df:0f:fd:5a:3b:cc:64:72:c5:
                    7e:c1:18:82:76:70:f4:38:fe:eb:96:be:a3:bf:14:
                    5a:09:20:f8:ee:85:f0:a6:33:4a:15:97:eb:3c:b1:
                    3d:5b:36:f3:65:cc:91:ac:68:9b:b4:b1:1e:d5:4c:
                    d4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:22:4A:9E:D6:D4:7C:F3:6D:5D:A7:88:A6:13:A9:B4:4A:3C:7A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c79b8866-260e-3927-bb66-7857e0a46fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.213.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:47:c2:2f:06:36:5e:d9:01:ef:02:69:23:32:9c:c3:6c:
         49:aa:1f:cf:49:01:18:10:30:dc:83:3a:4f:3b:e4:52:e4:18:
         cc:09:5a:92:ae:be:25:0b:64:22:3d:a1:f0:83:9d:40:13:ea:
         db:9a:a6:91:6a:ef:32:e6:6c:68:a7:c2:60:5c:49:87:09:9e:
         85:c3:2b:8a:28:4d:6a:63:97:bd:28:09:e8:54:00:e0:9a:b4:
         75:d6:27:e2:e4:e7:be:59:0a:16:b5:1f:ac:5e:2d:99:83:ab:
         83:60:10:10:ec:29:60:e8:5e:ed:8b:ca:b0:1c:a2:5b:1b:05:
         2f:5d:03:35:8e:a5:16:7a:d1:aa:80:2f:2f:a0:16:fb:33:13:
         39:02:f4:fb:da:e9:75:fa:17:7d:8e:23:12:08:fb:39:fe:03:
         da:c2:f1:32:16:ec:8f:2b:58:2d:ca:dc:41:78:1f:bf:5d:39:
         23:ee:60:62:38:91:2d:09:c1:04:37:e1:85:ff:24:0c:a5:ce:
         f1:98:00:76:4d:19:0b:71:4d:f4:ef:49:9e:15:10:7d:9b:0a:
         0b:ed:91:58:a0:39:c3:48:dd:f9:23:92:94:b7:74:c7:a8:5a:
         a2:d4:99:0a:b6:04:a0:e0:72:85:74:d8:cc:66:86:a7:42:a0:
         77:0a:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:19:06 2026 by rpki-client