Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa
File:                     19df955f-fc01-3bcc-800f-720f08ca391b.roa (raw, json)
Hash identifier:          WShIyEzkBMH1Igs45aMBIddvhqw7URSrgQ8HMzx89KM=
Subject key identifier:   29:5D:7C:91:53:FA:DA:0F:6B:99:01:FF:51:CD:4F:B8:AC:4F:A7:49
Certificate issuer:       /CN=960156d9-d41c-43da-b054-170189dcb5bc
Certificate serial:       010D0C9F4328584DC995BC4D04D704B2A0328000
Authority key identifier: F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     20162
IP address blocks:        129.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:bc:4d:04:d7:04:b2:a0:32:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960156d9-d41c-43da-b054-170189dcb5bc
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=d7dd92ae-75d5-40ad-8eb3-070531467a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:3d:22:0f:9c:d7:33:2d:fd:c1:d1:e5:1d:
                    a1:49:9e:c3:65:9f:3c:b1:59:9f:2e:87:73:5e:01:
                    44:f3:1e:a6:f7:ad:66:6e:a1:85:60:9f:b6:08:68:
                    30:2d:05:aa:ef:89:46:55:e4:f7:6d:c7:85:1c:79:
                    e2:9b:43:7f:18:82:96:d3:61:db:58:f7:45:dd:e5:
                    45:d4:09:cf:5c:92:88:35:2b:5f:9e:ea:81:3b:62:
                    4a:82:72:7a:dc:84:4d:28:f4:66:31:94:ce:30:42:
                    87:eb:5d:ab:0a:75:c8:99:ef:41:16:69:3e:70:09:
                    23:9e:9f:74:a4:0c:d3:3d:0f:09:06:f0:a2:e7:7a:
                    0d:bf:4c:97:d4:c1:b0:64:57:43:12:3d:1f:06:4f:
                    76:af:df:b2:71:4a:88:f9:57:7b:44:c7:cc:1c:09:
                    6f:f4:e6:66:2c:f3:ca:53:49:fa:2e:e8:05:de:06:
                    c6:36:08:9b:30:9b:ce:2f:dd:6a:5f:b0:e8:fb:bc:
                    34:9a:b7:58:3e:4f:ba:40:e5:95:5e:bf:08:8b:6d:
                    50:9a:2f:3b:cd:b1:b2:a3:e7:ee:94:a3:2f:b4:ac:
                    9a:f0:f7:e5:90:45:5b:17:fc:96:65:d5:69:c1:77:
                    84:a3:5d:e5:4d:9f:6c:84:86:27:c8:92:84:1e:79:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:7C:91:53:FA:DA:0F:6B:99:01:FF:51:CD:4F:B8:AC:4F:A7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/19df955f-fc01-3bcc-800f-720f08ca391b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc/960156d9-d41c-43da-b054-170189dcb5bc.crl

            X509v3 Authority Key Identifier:
                keyid:F9:5A:4C:23:A1:6E:1E:8A:03:3E:0D:12:E3:59:7C:D8:57:86:CE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/960156d9-d41c-43da-b054-170189dcb5bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e2:ea:33:33:e3:a5:42:10:3f:42:c0:69:91:75:0b:f3:56:
         f5:9e:ac:43:1f:74:a4:df:36:28:98:bd:38:48:fb:ce:05:6d:
         04:74:10:52:ec:32:fd:eb:b6:98:08:fe:63:f0:c1:c4:cf:f3:
         69:c9:77:3c:3a:b0:ed:88:c1:50:af:c0:01:f7:41:fa:67:76:
         7e:01:8c:a9:14:88:b4:97:41:a7:f2:21:f3:bb:6c:90:3a:4f:
         65:64:5a:28:04:db:86:2a:ca:30:17:9b:30:22:43:5e:99:9e:
         d6:f6:b4:ea:92:65:26:df:a9:06:4c:dd:5d:6f:d6:ce:22:63:
         4d:67:79:58:0e:51:65:f5:cd:18:3a:64:42:16:a3:67:6d:be:
         91:fc:e2:aa:40:6d:1d:67:31:4a:26:6e:0a:c7:df:30:10:70:
         60:63:9e:eb:b3:c2:b4:6a:f2:db:13:a4:ea:2e:68:ed:8b:1d:
         67:af:b3:d3:67:34:16:6f:d5:66:6a:50:a4:76:e5:70:cb:25:
         b1:03:a5:91:2f:1d:13:b9:0a:7b:16:86:13:17:35:a4:51:9c:
         b1:07:36:fc:1d:a6:63:f7:e4:89:dd:da:47:ad:3a:69:ce:92:
         ad:ce:4d:28:df:13:9e:73:c9:d4:16:8d:0f:5e:31:52:79:31:
         47:03:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:36 2026 by rpki-client