Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/194b14fc-c234-3539-b7d7-aed47b6088e6.roa
File:                     194b14fc-c234-3539-b7d7-aed47b6088e6.roa (raw, json)
Hash identifier:          gT0ZiRIfogKQn6yT7WKNlfpIFWZnYTDc8iUWtJdBJSU=
Subject key identifier:   BB:DC:0E:82:10:97:2D:00:56:14:6F:4B:6C:E5:24:80:0F:03:D5:08
Certificate issuer:       /CN=8bd1b35c-fcc3-47f0-a438-7db79649daba
Certificate serial:       010D0C9F4328584F49870ED986FC22E858BCB880
Authority key identifier: 7C:F2:44:81:D5:49:B7:54:AE:55:81:A0:34:A4:3E:0E:A7:36:9C:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/194b14fc-c234-3539-b7d7-aed47b6088e6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18515
IP address blocks:        129.107.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/8bd1b35c-fcc3-47f0-a438-7db79649daba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/8bd1b35c-fcc3-47f0-a438-7db79649daba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:0e:d9:86:fc:22:e8:58:bc:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd1b35c-fcc3-47f0-a438-7db79649daba
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=08a4e753-fa9e-489e-9a09-076b40014e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:a7:d3:9d:37:64:6a:9a:f4:1d:57:be:14:
                    ca:58:0b:00:29:f6:a7:be:3e:23:06:24:a0:d1:6a:
                    99:a5:aa:4d:d3:0c:07:7d:d6:43:39:59:53:b4:95:
                    df:54:5d:95:6a:71:09:33:16:bb:c8:6c:7b:e8:ff:
                    75:e1:59:3b:75:8a:b8:43:7f:7e:e1:cc:75:f1:d4:
                    a9:c0:1d:8c:0b:1b:33:32:64:fc:71:24:ec:b8:0e:
                    a9:e1:72:94:fb:26:0a:ff:dd:a8:04:4c:fb:43:5a:
                    72:dc:21:ff:92:96:a6:0c:d8:46:60:8a:4e:56:79:
                    7d:62:b1:65:2c:5c:1b:4c:aa:65:10:ae:b2:a4:b9:
                    0a:01:c8:51:3f:0b:4c:e5:04:7e:3f:89:53:73:e5:
                    ce:80:99:a1:97:67:6b:f1:4a:f0:86:df:05:73:e9:
                    1b:69:2b:c4:9d:bd:86:c3:1b:b6:b8:7e:ac:49:75:
                    2b:f9:e3:70:7e:24:0c:25:7d:ff:0f:96:9f:ef:e4:
                    79:f7:77:cb:4b:45:13:46:b1:24:ca:fa:83:ea:7d:
                    66:29:e2:09:55:1f:a6:a2:d4:6a:c5:97:a0:0b:33:
                    73:39:cb:8d:ab:79:e2:45:15:36:bb:39:54:71:9a:
                    80:98:01:d1:5e:41:3a:0f:00:27:31:6e:f0:52:80:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:0E:82:10:97:2D:00:56:14:6F:4B:6C:E5:24:80:0F:03:D5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/194b14fc-c234-3539-b7d7-aed47b6088e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba/8bd1b35c-fcc3-47f0-a438-7db79649daba.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F2:44:81:D5:49:B7:54:AE:55:81:A0:34:A4:3E:0E:A7:36:9C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8bd1b35c-fcc3-47f0-a438-7db79649daba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.107.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:11:6c:6b:45:8f:d0:82:dc:cb:b4:34:ab:04:0f:d5:d0:a8:
         9a:fd:a2:b8:db:fb:93:c9:3d:8e:8a:a2:b8:6d:08:94:a7:53:
         4c:e6:29:be:1b:f8:1d:ac:2b:4d:76:0b:6a:a0:ba:bb:d1:3c:
         72:ae:3f:3a:20:1e:a8:f1:76:57:6a:6a:be:ea:2a:65:2e:20:
         e2:68:30:ef:a0:8f:f6:7c:a2:59:dd:82:71:d6:d3:fe:ea:22:
         3b:7c:5b:23:09:17:aa:08:44:bb:a2:83:64:25:63:e9:6b:3e:
         3c:81:17:e6:79:b9:32:87:b2:a3:a6:6a:e6:82:a3:5a:11:a1:
         48:ab:83:9a:50:97:f2:fa:fb:fc:e0:0b:70:ff:a5:dc:37:4e:
         27:72:3a:c8:96:3e:8c:0a:9e:09:72:70:07:f8:1f:06:ae:aa:
         50:15:36:49:16:90:5b:5d:2c:39:20:b9:4e:5e:1f:7b:f6:4b:
         2b:f0:29:d5:b0:ab:23:7e:07:69:fe:82:e0:9e:2c:33:44:04:
         8f:9c:3a:1d:8c:d3:35:60:f1:a3:b0:f5:8e:8a:77:e3:90:24:
         ab:17:8c:94:c2:59:05:bc:cb:00:e5:a0:10:99:a6:cf:ac:1f:
         74:64:b8:5c:27:63:c3:91:46:22:9b:08:c0:bf:7b:e3:13:95:
         1c:45:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:15:13 2026 by rpki-client