Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81ceaa79-0d25-30dd-949c-9bd28198a4ce.roa
File:                     81ceaa79-0d25-30dd-949c-9bd28198a4ce.roa (raw, json)
Hash identifier:          byfN5AqgTBzmGtfhlNc126NjGg2jGbJVF2n5WbzTWZA=
Subject key identifier:   18:72:30:53:8C:C3:67:92:04:D9:B0:0D:FE:27:ED:E5:F9:88:5C:B9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF56EC155FB122ECB280F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81ceaa79-0d25-30dd-949c-9bd28198a4ce.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        168.129.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:6e:c1:55:fb:12:2e:cb:28:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=eb949c87-d387-4825-b3bc-2c1cd6f4fd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:a0:8e:8f:c1:c6:b7:7f:c4:83:cb:41:30:
                    c6:be:07:01:db:98:5c:43:47:05:1d:9c:c1:01:1f:
                    e6:fc:4b:0d:d4:98:e2:4b:44:61:98:29:e8:7d:32:
                    2c:91:db:d3:9e:55:91:df:4e:cd:ad:23:32:4e:1e:
                    48:f8:46:e6:f7:a2:75:8d:34:81:eb:92:3e:5d:6a:
                    d1:64:15:fd:59:4e:e5:e2:92:ad:10:df:5b:de:f0:
                    7f:c6:5e:59:5f:68:d3:00:a9:08:98:09:04:c7:c1:
                    65:e1:de:2d:51:00:61:78:2f:47:86:71:e9:df:da:
                    9a:0c:56:8d:c3:89:07:02:19:4d:9d:df:f4:4d:06:
                    bd:b2:6e:80:8d:a1:95:63:47:c4:e7:1e:fe:9d:db:
                    74:f9:ab:e2:4e:be:1a:73:26:a7:09:1b:7d:aa:3e:
                    fa:51:36:6a:c5:6d:08:2f:07:5c:d1:c8:6c:f4:46:
                    a8:db:72:2b:9b:a9:82:95:2b:55:13:e7:5f:0e:37:
                    be:52:f6:3f:c5:e5:92:cc:25:67:f3:cb:10:2f:bb:
                    cd:f4:2a:8c:9e:4e:76:29:5c:82:3d:c5:b8:17:46:
                    2d:69:4d:32:09:29:e2:e9:c1:ff:45:62:e4:fd:da:
                    fd:ef:77:63:79:7c:70:f9:da:f5:ad:6e:b0:ef:f7:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:72:30:53:8C:C3:67:92:04:D9:B0:0D:FE:27:ED:E5:F9:88:5C:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/81ceaa79-0d25-30dd-949c-9bd28198a4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.129.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:3d:7f:14:5e:b8:76:0b:55:0d:84:da:2b:66:4d:c0:8b:76:
         d1:06:d1:d0:93:fa:cc:3b:95:2c:10:45:da:5d:ee:ac:7a:36:
         16:8f:00:c5:ba:de:e8:b2:bf:1f:64:1e:5f:2f:43:2c:b1:e1:
         6a:0c:37:37:2b:69:5e:ea:d5:74:79:72:8d:09:63:51:ac:c4:
         77:d4:91:c7:74:f7:16:3c:fd:bb:2f:f1:14:b6:d9:ca:1d:b7:
         20:ef:c3:f4:0b:1d:1a:ae:42:64:ce:40:b5:4d:dc:a4:fc:a8:
         f9:90:32:53:05:02:13:74:c2:db:78:29:24:bb:9b:01:9f:2e:
         20:6f:3f:2f:09:b4:f3:4e:f5:7e:ca:34:89:5c:07:4d:6f:ce:
         3b:74:6c:82:7a:2f:40:a7:61:76:ce:1a:e3:7d:ad:69:2a:a0:
         6a:36:a6:c3:ee:e1:7e:c4:a5:43:89:7f:d0:d0:74:43:95:d3:
         76:5c:a1:8d:e1:75:63:3e:5c:7e:de:fb:7e:29:88:06:02:cf:
         e5:7e:d5:75:d3:c0:42:3a:f4:f0:a2:df:13:64:05:67:40:24:
         cc:57:5b:f4:eb:5a:6c:bd:fc:6e:dc:16:5d:ca:51:6d:da:1a:
         21:7c:2f:d5:fe:f8:80:42:3b:e0:d9:00:37:c7:c5:ec:0d:32:
         32:fe:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:45 2026 by rpki-client