Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa
File:                     5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa (raw, json)
Hash identifier:          m4ZP4/cTJ3KYDdrhYddKrJXLNsXDQT8/tm1DJqdsmy4=
Subject key identifier:   AF:BD:61:CD:B6:91:B2:C7:85:60:A9:06:CF:2F:2A:9A:E4:6C:1C:4F
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584E9A7FCF17587A59946EF87670
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     27198
IP address blocks:        149.160.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cf:17:58:7a:59:94:6e:f8:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b604895c-4e90-4063-9abd-eb29c8405267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:ca:db:c3:4a:6a:42:c3:40:3b:19:6f:fb:
                    e1:1b:c5:c4:42:de:52:98:b3:5a:3d:01:54:bf:b2:
                    4c:75:2f:50:83:28:38:0e:bd:d2:54:f6:bc:df:01:
                    cc:e7:0f:e2:09:70:84:06:a5:41:95:83:03:8c:ca:
                    a8:25:93:37:f5:b9:25:c0:d2:3d:b0:50:b3:1c:9e:
                    1b:ff:77:52:58:76:77:29:c0:32:39:6f:b2:8a:2c:
                    05:c2:52:8a:83:f3:d2:de:fb:33:33:6a:01:d1:0f:
                    4c:28:ce:73:e4:7c:32:5c:a1:98:df:95:ee:9a:47:
                    56:04:2d:7b:ff:f3:7b:00:01:b6:b2:a7:ce:73:54:
                    2b:94:22:b2:99:0a:c1:41:88:85:0a:df:e1:0b:47:
                    fe:81:ec:88:5b:16:a0:6f:15:80:31:b7:57:64:d7:
                    5b:88:ae:76:25:f3:16:e1:1a:d7:15:e2:25:36:9d:
                    ba:aa:eb:1f:d8:1e:a0:87:d4:06:df:1a:60:fd:fe:
                    0d:a6:f9:af:55:1b:a9:f8:4d:4b:90:39:b1:07:94:
                    91:ea:4e:50:2b:7f:ef:a5:12:60:b5:ad:b1:a6:77:
                    2e:b8:27:5a:cb:c4:08:11:a9:90:26:79:36:c7:57:
                    df:f6:77:98:fd:c2:18:d4:7d:dc:55:cc:9c:61:a1:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BD:61:CD:B6:91:B2:C7:85:60:A9:06:CF:2F:2A:9A:E4:6C:1C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/5b90cccf-f05e-332c-8dfa-94a9e7ea373f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.160.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:97:1d:f5:14:32:38:cb:d5:6d:ab:d6:76:79:0f:4e:c9:
         67:cd:0c:db:97:53:39:c0:eb:4a:c2:b9:0b:3b:88:40:3c:b4:
         10:c8:42:26:b6:cd:0f:4d:26:59:6f:4c:a7:6f:3d:d2:af:8e:
         a4:92:1b:5e:38:dd:6b:b5:86:f2:28:74:f0:2c:3a:c3:c0:a6:
         e0:70:bd:98:1a:5a:31:fc:bf:67:98:08:2b:3c:aa:cf:f2:c6:
         9e:b9:f3:77:0b:95:52:d3:7b:64:be:46:ba:c1:f6:bf:24:3f:
         c8:8d:37:43:d4:38:25:2d:98:65:e6:58:f7:7c:a7:19:41:21:
         73:57:66:bd:67:cb:04:f5:01:00:04:21:d5:50:5a:7d:a2:eb:
         ed:57:dc:e7:e8:a7:81:45:77:45:0e:98:bc:80:45:52:0d:43:
         6f:d2:92:46:47:f2:76:59:ea:fa:1b:d8:f1:4e:58:39:04:59:
         ea:44:b0:c9:95:f3:ea:dc:ee:2f:52:74:27:57:8b:f6:29:1b:
         cb:c7:91:08:9b:6f:61:f2:24:f9:7b:de:ea:80:72:15:60:c4:
         38:c9:a8:c3:36:9f:3f:94:56:8b:e3:87:51:18:0b:83:83:27:
         02:fa:b0:88:69:14:19:3e:ee:f8:53:54:59:88:c1:a1:8e:69:
         d8:d6:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:32 2026 by rpki-client