Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa
File:                     2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa (raw, json)
Hash identifier:          uAL57H+9+oBstvtW59Io2kS975GuzZEkGdvoD4zT7Z8=
Subject key identifier:   5B:14:B1:35:10:5C:8E:E0:29:8D:55:59:7D:BD:E7:A0:11:22:3F:BC
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584DBD05E2C27302457A85913000
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     11808
IP address blocks:        129.101.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:e2:c2:73:02:45:7a:85:91:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=11d07d3c-a7c9-4587-a42c-5038b4e94e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:e1:ac:a2:a7:e7:62:b6:c3:ee:13:9f:32:
                    1c:79:3b:ac:1f:cd:dd:f2:66:bd:bc:e9:ef:23:47:
                    a7:5b:74:f2:4b:72:81:a0:3d:d9:e1:e1:24:ab:5d:
                    4d:8c:13:f2:87:57:23:2e:b5:ae:40:21:68:ce:6e:
                    16:56:b7:cf:99:3d:97:14:02:ff:a3:e0:d3:cc:ff:
                    f5:9d:40:31:53:04:3b:81:e1:a5:03:87:1e:01:e7:
                    3b:dd:e3:bf:0a:18:4d:41:0f:f1:95:c2:2e:d2:94:
                    54:47:3c:c2:29:49:f3:5c:34:48:98:55:24:30:c8:
                    7a:93:1d:fd:cf:da:b5:d4:96:e7:97:1a:44:2c:23:
                    29:82:35:37:7d:f5:c8:88:d9:5c:8d:cd:03:91:fd:
                    91:60:51:3d:95:5c:9c:64:af:e0:26:7c:a7:d9:58:
                    95:e5:d0:e7:33:af:51:f6:28:74:88:15:8f:ec:e8:
                    e6:57:d0:2c:3c:4b:9d:72:26:ae:5a:b1:c4:39:ad:
                    c2:18:e4:22:d1:ac:fb:81:76:bd:0b:1a:10:9f:74:
                    7c:1f:ad:44:44:0c:3d:bf:7e:d9:5b:15:e3:90:56:
                    5e:94:15:9e:b1:d0:d7:c4:e9:d9:6c:92:69:c0:81:
                    df:ed:83:f3:a5:af:a1:88:90:6e:04:6e:ac:8a:4d:
                    da:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:14:B1:35:10:5C:8E:E0:29:8D:55:59:7D:BD:E7:A0:11:22:3F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2654f5ce-ef2b-3abc-837d-fc5b32056e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:6d:c2:fd:36:e2:62:4c:20:3b:7b:8d:55:e5:51:1c:77:
         21:b9:2d:41:b0:3d:46:78:b5:26:2a:92:5d:05:78:1c:2e:fa:
         1b:a4:b8:b5:1b:f9:c2:38:01:0b:7e:c4:1d:7f:77:c5:c6:6c:
         7a:d4:d8:a3:26:01:0e:f0:37:10:91:f8:c6:23:8c:a6:c5:5c:
         9b:a9:4b:87:77:5f:c3:79:07:24:2b:11:bc:33:dc:90:7d:12:
         67:37:93:3c:12:a6:65:30:df:4c:51:ad:e4:4b:98:52:db:85:
         fa:8a:ed:5c:12:9a:a0:74:52:4a:2e:eb:79:f7:d3:a3:ed:2e:
         19:78:2c:65:25:31:6a:83:72:ef:82:95:bd:2d:10:bb:24:a5:
         53:a7:93:32:94:50:7e:8c:0e:22:8f:ec:65:d1:5b:7e:b0:54:
         2c:2b:e0:3e:d3:2b:a6:a4:63:ba:41:d3:d5:d3:04:86:43:be:
         fe:69:bf:b1:6b:e4:bb:dc:45:33:e8:a5:39:fa:2f:e6:ac:db:
         48:21:36:2f:28:0a:7a:d8:4f:80:6e:5d:29:40:4e:b8:de:e2:
         c6:fb:49:04:90:2a:79:90:90:25:9b:63:ab:0c:48:98:e3:da:
         31:a2:52:e2:3b:0a:39:a7:d1:df:d1:26:08:a0:ee:87:42:b0:
         8c:5b:49:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:46:36 2026 by rpki-client