Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa
File:                     9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa (raw, json)
Hash identifier:          jJ6K8XSJsvzAUel9erIXl2STNsR2zCz61hZTgmK5LYQ=
Subject key identifier:   51:2D:D0:16:2D:01:13:D4:DF:02:BB:5B:08:21:FD:24:8E:31:51:AE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF9978B1A34BF1A9150E800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        159.112.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:97:8b:1a:34:bf:1a:91:50:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=1e5f2d96-f1b9-44d5-b9a1-32daf26b2c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:b6:5c:ec:5c:23:a1:66:ed:df:a8:a4:2b:
                    9a:3b:a1:aa:a3:e9:84:2f:f0:23:68:c2:d9:4a:96:
                    02:7a:ca:c4:e3:31:42:39:84:0b:5e:69:28:1c:e6:
                    59:d2:f8:2e:45:6a:06:02:43:a7:04:e8:1a:38:37:
                    fe:48:3b:f9:da:e4:5a:ca:15:f0:bd:69:fc:11:c5:
                    9c:5c:48:e8:de:0e:40:ff:be:9c:05:a1:36:cd:a8:
                    bd:cd:47:e4:29:b4:01:63:06:ab:ac:5a:dc:ec:e6:
                    1c:46:ca:4f:52:4b:f4:85:07:74:64:be:b3:8b:0a:
                    46:38:e6:ab:4f:06:fa:f7:a8:41:22:42:b1:54:ae:
                    83:d9:3a:db:39:7c:1b:15:b4:06:bc:ca:7f:f8:0e:
                    41:ee:da:20:b5:f6:14:9b:4a:3a:19:a8:c7:25:df:
                    dd:a6:48:df:0e:03:ed:78:9c:0e:be:09:5a:a2:27:
                    bc:dd:9f:eb:95:fe:97:a7:cb:59:68:c3:7e:e2:8e:
                    e6:36:88:30:69:66:5f:65:b1:59:5b:72:7a:9c:46:
                    15:27:48:6a:63:57:e4:02:65:6a:7c:cf:51:0d:76:
                    ba:c1:42:7f:98:59:38:95:0c:a2:71:5d:2d:f0:6b:
                    95:27:f0:85:c9:40:64:70:fb:00:6a:66:b0:bc:c9:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:D0:16:2D:01:13:D4:DF:02:BB:5B:08:21:FD:24:8E:31:51:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d2c255b-afa5-33e5-a18d-ce37611a6fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:10:10:3c:45:d2:5b:b8:1c:41:5f:05:53:ee:cb:c1:4c:61:
         23:52:39:20:4a:ec:91:b0:f5:c4:47:aa:6f:70:e1:2a:5f:ec:
         93:b3:bd:9f:77:2e:98:81:55:1c:9a:56:17:76:bb:b3:d4:23:
         ef:08:4a:0f:a8:38:d0:e9:39:d7:a0:b1:5f:ec:57:bc:f7:bd:
         40:1e:0a:b7:f6:93:e1:80:e8:9d:42:87:8f:95:22:a9:59:1a:
         f8:dc:ea:44:7c:9e:b5:20:4b:8b:8e:7f:b7:4b:19:5b:89:1d:
         4d:0b:2c:a2:10:10:49:5b:52:95:12:c2:34:14:93:ce:d5:85:
         62:9b:97:07:ff:5f:59:c8:72:d2:7e:0c:d1:53:93:87:d8:a5:
         e2:47:2c:6f:3e:81:aa:3f:52:9b:1b:98:d2:97:fb:f4:38:99:
         bb:0c:ec:0b:fc:af:12:7b:1f:0c:50:49:55:87:48:40:10:29:
         27:05:5c:d4:a8:0b:e4:fd:11:39:09:5b:18:9c:60:1c:f5:50:
         f1:7b:21:d8:b7:1b:48:09:6d:e2:e2:c3:6e:37:19:e2:7b:13:
         e0:dd:4a:f3:63:2e:39:9c:87:56:36:da:bc:8c:39:8d:6b:aa:
         f6:4b:06:fe:c0:68:90:74:3d:17:6d:9c:d5:61:ba:ba:10:5a:
         b3:32:9b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:22 2026 by rpki-client