Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa
File:                     d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa (raw, json)
Hash identifier:          9ixtyP4RHA5vpP5R7l0kyh7soBKJzeWGjP3NsZyxYjk=
Subject key identifier:   79:1F:48:1C:89:D2:3C:58:E4:88:89:BE:E9:01:14:40:3A:4C:AF:7A
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E3E5F415EB57FDDFE1EE71000
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        147.129.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:41:5e:b5:7f:dd:fe:1e:e7:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=cd791277-b52d-4e79-bdbe-11727e6322c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:fc:db:5a:7d:9e:c6:0c:cd:55:86:19:18:
                    f9:61:7b:1a:a6:9e:dd:1c:a8:1c:bb:69:05:2f:68:
                    7c:f0:c1:87:e6:83:3d:d2:ce:4b:89:59:cd:b5:12:
                    dd:7a:26:61:4a:78:8c:29:bf:bb:0b:e1:c2:5e:87:
                    65:0c:35:ea:2d:1d:1d:18:24:0b:5b:7e:92:b7:37:
                    11:05:e8:57:b4:7e:a8:c3:90:0f:a3:98:18:f9:82:
                    66:05:a7:79:8e:44:20:cd:d5:ce:54:c5:80:1e:9a:
                    14:3d:f5:a0:3b:6e:60:10:1d:66:55:f8:75:a4:30:
                    8b:24:05:a6:cb:c9:aa:71:94:49:0a:ad:47:10:7e:
                    e3:00:54:71:ac:5d:61:54:af:a9:96:48:af:4e:3e:
                    c3:64:e4:23:1e:d3:d1:03:74:07:68:9f:07:64:cc:
                    f4:17:ab:0b:9d:c9:c6:ed:03:d5:62:aa:87:d0:bc:
                    4d:f2:74:e8:cd:4e:9c:37:32:dd:c5:43:2c:c2:62:
                    8e:bc:7a:90:3b:3b:1c:b8:f4:b9:09:a1:45:ac:b1:
                    b0:a2:3c:e2:7b:1a:f7:11:0b:fb:98:a4:35:19:9f:
                    e9:e5:e2:6e:bc:6a:73:c2:18:a7:a1:94:9d:76:40:
                    c7:95:c5:68:3e:33:28:cc:b9:67:5f:2d:5a:03:97:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1F:48:1C:89:D2:3C:58:E4:88:89:BE:E9:01:14:40:3A:4C:AF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d7f30c8d-3830-379c-9b4a-35358c8b46c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.129.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b0:19:ee:1b:63:44:b9:f8:5d:89:8b:dc:db:68:20:51:f2:
         11:4c:4a:c2:b8:3d:c9:48:a1:fc:0e:0c:7f:38:f3:c1:68:67:
         28:18:dd:e8:03:8e:bd:41:84:4a:d6:55:2b:d6:be:c1:41:7c:
         9d:24:c3:25:d6:00:d2:d8:8f:46:49:b7:45:5f:92:5c:2a:ce:
         4a:c1:5e:ff:f5:ac:a0:d0:47:ba:7c:5a:4a:be:d4:60:36:d8:
         fe:3f:ff:3c:d7:c8:4d:06:8a:cb:57:98:78:23:50:ea:60:3a:
         59:ff:a1:5b:6a:65:20:cb:35:ab:e2:36:c9:29:63:ff:1a:59:
         de:fb:72:c5:7c:07:15:62:31:95:71:8f:77:17:12:90:64:a3:
         5f:4c:87:9c:e1:31:c1:20:e7:c3:3b:e4:00:04:fa:04:cb:08:
         f4:ee:ec:b5:ff:c4:53:06:d2:c3:66:e4:f2:e5:ff:48:60:33:
         24:92:de:c6:01:a3:b0:c8:5f:78:c0:e2:5c:1b:9e:fe:ef:5c:
         e9:56:19:20:8c:6d:fa:b4:08:b1:e8:80:58:98:ee:9a:8e:c5:
         60:01:5b:80:5f:0a:94:da:88:83:e8:45:60:10:3c:9c:f6:d2:
         27:24:f4:a5:f7:61:11:98:51:6d:89:f6:c9:2c:f2:5d:77:8a:
         87:6b:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:37 2026 by rpki-client