Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/f864c2ef-2fc6-304b-b3a0-5cec22327721.roa
File:                     f864c2ef-2fc6-304b-b3a0-5cec22327721.roa (raw, json)
Hash identifier:          aauyCVlGoOEwwLfru80nnzGT5E1me9QZZTHq4gG3j48=
Subject key identifier:   8C:DC:58:A6:33:0C:32:41:F8:66:7B:5B:15:E5:B4:94:14:08:78:96
Certificate issuer:       /CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
Certificate serial:       010D0C9F4328584F4973D434955C88F36B5B9FE0
Authority key identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/f864c2ef-2fc6-304b-b3a0-5cec22327721.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19871
IP address blocks:        129.121.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d4:34:95:5c:88:f3:6b:5b:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d2746613-d675-451c-a19f-6869b031d474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:99:f0:52:f9:1e:c2:a1:00:8f:d7:81:b5:
                    92:94:54:fb:d7:79:99:ce:8f:e1:a8:57:56:08:79:
                    27:2d:1c:18:d4:d3:77:d5:1f:cb:4c:0f:6b:b2:5f:
                    17:2c:7c:ff:77:10:02:4b:e4:8d:c6:a1:00:81:85:
                    50:28:6d:45:de:78:66:be:21:be:1c:24:eb:0f:2e:
                    24:7a:d2:7c:cc:27:4b:29:d3:90:cf:f9:f1:31:10:
                    b0:1c:73:bf:7f:e8:c7:db:56:79:e8:6a:8e:a0:ba:
                    55:2c:cb:12:90:da:a3:df:ed:a4:25:d2:a8:88:99:
                    4d:52:64:b4:07:c4:d4:08:a8:56:ce:dc:16:e4:e6:
                    4a:b9:2b:22:4c:aa:54:a3:bf:d6:bd:15:5c:a3:90:
                    23:63:e5:dd:f2:73:f8:67:6a:0c:22:aa:a2:2b:ee:
                    16:e8:81:21:3b:53:56:f3:fc:5d:b0:5b:83:fa:50:
                    e4:b0:a7:47:a0:31:97:9b:fa:49:fa:cf:82:55:2a:
                    d0:16:69:a1:32:2a:ea:c2:b4:59:77:36:fd:05:d6:
                    1c:2d:a5:ac:b3:d2:30:d3:b6:d3:82:6f:51:7c:bb:
                    be:d4:d7:07:57:08:bd:2a:a6:e0:3e:a1:d0:29:40:
                    e8:80:b4:37:04:fe:d8:53:bd:5b:9a:f8:6c:26:cc:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:58:A6:33:0C:32:41:F8:66:7B:5B:15:E5:B4:94:14:08:78:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/f864c2ef-2fc6-304b-b3a0-5cec22327721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl

            X509v3 Authority Key Identifier:
                keyid:E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:40:c6:94:33:28:84:50:73:6e:7c:c1:a0:cb:6e:0e:a5:3c:
         d2:3b:99:99:e8:df:55:78:f8:11:12:eb:f8:c9:c1:cf:0c:ec:
         4d:57:8c:03:fb:26:e1:33:0d:86:d0:e3:8f:7e:19:37:58:40:
         3f:49:ad:e8:9c:16:7a:4c:c1:1d:f9:25:18:ff:c1:04:85:ee:
         76:86:e3:05:ae:46:c6:b7:18:2d:5d:86:c5:9e:30:57:6c:0c:
         00:07:85:ea:8c:02:db:fe:58:9d:4f:ba:6c:e9:1b:45:69:58:
         48:50:2f:36:74:df:bb:dc:53:82:7f:0e:ce:b5:1b:3b:d6:f8:
         1c:89:10:9a:ba:e8:b9:5a:ea:b5:51:b2:c6:e6:25:a4:9d:29:
         1c:84:3f:e5:0f:40:e0:91:59:b4:6f:8a:1e:a8:ff:d8:d4:64:
         e0:7d:90:d8:fe:72:8a:5a:39:7c:0f:ea:01:e7:78:6f:d9:d2:
         33:1a:86:7c:36:6e:01:68:cf:22:05:35:21:21:e1:f1:4e:d8:
         96:63:c6:61:45:27:bb:d0:9d:b0:3c:df:9f:d0:cc:cd:df:f8:
         b3:8d:71:8f:a4:47:fc:d1:f4:67:5c:1f:e4:a9:4b:f5:24:58:
         68:54:a1:10:46:3c:cd:9f:99:1f:44:6d:2c:dc:2a:dd:0e:15:
         16:5a:b1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:41:12 2026 by rpki-client