Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa
File:                     98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa (raw, json)
Hash identifier:          OZLEVu4AJP8YkMuWORaPX3EAqoEnuWhMiP92wXNziZk=
Subject key identifier:   CE:CD:93:28:64:43:E4:D6:9F:FE:B2:B0:AF:44:CB:76:E3:DE:50:C3
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF5527908C17247D9AECC80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        192.29.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:52:79:08:c1:72:47:d9:ae:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1ecbb25f-7eec-4979-aeb4-48a901ff9ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:b8:7c:fe:a9:31:8e:da:56:95:c0:e0:ba:
                    22:7d:78:ed:13:bb:77:77:2a:32:7b:69:90:8e:d3:
                    f7:09:79:96:ee:93:f2:8b:2d:a1:de:9e:ca:53:ad:
                    bf:5c:ee:de:c9:2f:28:22:e0:ea:1b:99:19:8b:e0:
                    63:40:94:03:dd:c2:d0:fe:e8:8b:91:37:23:8b:54:
                    b5:4b:47:f4:40:b8:76:d1:1b:7b:29:66:27:49:84:
                    e4:d9:c5:02:04:7e:73:34:de:63:82:42:53:df:32:
                    d8:49:db:2c:68:3f:d3:e0:99:ae:8e:6c:c1:e2:82:
                    a4:e2:de:7f:df:ad:98:a7:dc:b4:be:c8:52:26:a3:
                    76:b0:a2:18:a3:d9:25:8f:5b:b8:c4:32:59:01:3d:
                    f2:e0:e8:f0:8e:21:30:2a:b8:b0:5b:f5:67:cd:e2:
                    73:39:57:dd:6a:6a:19:c9:1c:e0:81:5a:5b:67:fc:
                    62:d3:2e:e3:ce:56:20:c5:9b:9f:8c:7b:13:c5:ed:
                    5d:a5:44:c7:a8:2a:09:ac:ba:e1:d3:3e:16:02:9f:
                    9e:53:f8:bf:37:5a:1d:8a:75:39:6b:b9:be:5c:3d:
                    83:2f:6f:f9:b3:48:c7:32:6b:52:8d:bd:1b:fb:d3:
                    f8:46:9a:b9:7a:8f:e2:34:5f:3b:fc:e1:10:85:6c:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:93:28:64:43:E4:D6:9F:FE:B2:B0:AF:44:CB:76:E3:DE:50:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98efd88e-3af2-3b23-a3ce-7ea94468e7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.29.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:13:75:59:e8:3c:a2:66:37:b6:61:ef:ca:f1:54:d7:cb:1e:
         ff:28:e7:96:41:ba:55:e9:48:ba:b4:d1:22:e4:1e:09:13:4e:
         c9:b2:ef:f1:60:87:82:a7:34:dc:97:8f:41:f2:84:9f:8a:a7:
         fa:0b:28:61:63:0d:51:f8:e3:e2:c6:c2:c9:fb:7b:9f:9b:e0:
         b7:a8:ca:47:6b:43:4b:f6:3b:b4:ae:91:d6:69:01:11:06:0d:
         eb:d4:31:f7:f0:91:df:f7:af:b6:bb:d6:0d:04:a0:a4:0f:e7:
         bb:6e:13:95:cf:07:ad:e3:ea:2a:1a:38:e2:26:2a:c7:83:35:
         4c:f3:db:23:7c:0a:cf:c4:d4:5f:cc:3c:14:b6:6a:e3:0a:9b:
         1d:7f:ac:11:fc:a5:2c:92:8c:f2:13:b3:2a:6c:21:21:3f:55:
         8d:2f:7f:f8:e9:4a:4d:4a:27:0e:9a:4a:1c:31:57:bf:fd:97:
         7d:4b:3b:64:72:af:f5:ed:fa:df:20:c0:2d:6c:ac:87:d0:a8:
         21:4a:d6:51:07:93:3c:40:da:2b:cd:73:74:fe:ca:da:2f:bb:
         70:64:5b:3b:9e:96:cb:73:e6:7c:19:3b:43:df:76:f6:20:6b:
         63:9d:ee:98:9c:cd:d9:a2:14:7d:a1:02:de:89:da:eb:bb:a0:
         ba:7e:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:39 2026 by rpki-client