Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b13dc1ce-6d10-3721-8315-e0820f022eda.roa
File:                     b13dc1ce-6d10-3721-8315-e0820f022eda.roa (raw, json)
Hash identifier:          NVjrCzolBYWhu5FDHb8p9YtRFG4OEDUqKvVK5hXL7jM=
Subject key identifier:   A7:23:8A:CD:F7:EA:03:99:74:7E:D9:48:DF:9A:36:48:50:ED:6F:72
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584DC6CB0380A8B1C9FDFA8B5C40
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b13dc1ce-6d10-3721-8315-e0820f022eda.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     19605
IP address blocks:        142.79.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:03:80:a8:b1:c9:fd:fa:8b:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=4a6461c0-90fe-4bb7-9242-479d692dfb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:72:b1:de:36:d1:b3:42:ec:09:ed:59:2c:
                    6c:40:68:bd:22:52:26:e0:51:4a:b7:a3:94:e6:92:
                    f0:05:9f:02:c4:6c:71:82:b2:0f:11:5a:a8:c9:ec:
                    11:9d:7c:08:ad:d2:28:3f:64:be:3f:53:00:f9:91:
                    7c:c8:2c:59:04:fb:13:fb:7d:08:6b:73:6a:02:03:
                    7f:e9:37:ae:e6:5d:f2:a0:16:53:03:6a:81:ea:e2:
                    35:81:17:44:10:4f:b3:20:39:7f:35:24:55:1d:89:
                    86:e0:f3:83:71:fe:a4:fb:6f:fd:36:d7:b8:81:db:
                    b0:02:36:5f:6c:21:57:bb:a7:20:59:22:12:84:7c:
                    b6:eb:f4:36:a8:85:35:a9:25:b9:78:69:c9:f4:84:
                    d3:43:11:97:f2:08:12:29:e7:eb:3c:4e:f7:be:4c:
                    44:7a:f0:f4:07:22:a5:61:83:4a:92:10:8b:f0:7c:
                    8c:24:8b:d6:78:30:c4:12:b1:5f:6a:59:ac:8d:c4:
                    af:c0:61:26:7a:25:b3:5c:e0:57:c5:e0:21:5e:2e:
                    e4:19:00:84:a9:3b:76:98:ea:96:fc:30:d8:c0:e3:
                    c0:0e:db:41:45:ad:98:54:eb:cb:32:1a:69:4b:75:
                    77:4f:82:3e:f3:c1:79:7c:11:21:ee:20:d2:36:c0:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:23:8A:CD:F7:EA:03:99:74:7E:D9:48:DF:9A:36:48:50:ED:6F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b13dc1ce-6d10-3721-8315-e0820f022eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:6e:13:0c:77:bc:1d:2d:e6:89:cd:5e:ce:ab:0f:ee:70:8a:
         60:cc:62:dc:d5:8e:28:1d:d3:e5:b7:50:ee:1a:0c:32:a9:6f:
         18:2b:98:50:1b:e9:b8:49:74:a2:b2:e1:6a:12:f3:c6:b7:ac:
         5e:bb:7f:45:85:73:7c:bd:0c:06:12:ac:64:47:27:40:d1:47:
         33:86:5e:30:e6:98:80:37:d4:31:a4:43:da:5f:c0:98:40:1e:
         c9:27:aa:a2:cc:d8:ab:62:79:db:da:1f:0e:f3:ba:61:1c:c4:
         8e:8f:6f:8d:b2:69:e5:67:26:a3:12:09:28:57:e8:38:fa:81:
         18:2c:f5:70:65:8d:0f:33:54:71:1a:ad:57:8d:f9:d3:ba:79:
         6c:48:72:73:1c:46:93:3c:78:e5:df:1d:5e:f7:9a:c0:5a:2c:
         95:e9:b3:e9:d7:6b:fb:b4:a4:51:1f:96:9f:d7:9d:0d:70:ef:
         6c:f9:61:96:88:4d:bb:b1:fc:9b:a8:a4:52:bd:0b:40:8a:af:
         19:a2:1c:12:a6:1d:dc:f2:34:f8:0b:47:9e:aa:f8:48:c9:2b:
         f2:28:6f:3d:04:d2:03:0d:c1:4a:b0:53:f3:98:ca:3d:9d:83:
         27:47:95:0f:5d:30:e3:16:39:2e:3b:56:2a:fa:b5:2e:b4:8c:
         ae:76:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:08:33 2026 by rpki-client