Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa
File:                     4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa (raw, json)
Hash identifier:          wnj3jA1Tmsk3inSgNdtmSC860uhmsnZQ7Lba22/OUu8=
Subject key identifier:   D7:BF:A2:FE:37:F2:9A:B1:89:5F:40:97:1F:63:F8:04:C2:50:B9:C1
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E66DA07686074551FCD14B500
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14061
IP address blocks:        137.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:07:68:60:74:55:1f:cd:14:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=3f3d37c9-b177-4879-8da6-ff7bda355924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:12:82:95:1d:82:fb:f7:17:73:fe:69:6e:
                    32:59:71:0d:20:5d:48:15:92:0a:08:0b:e8:cd:46:
                    2b:ba:48:11:f8:81:52:25:07:3c:89:60:0d:69:70:
                    6b:17:00:b2:c6:f2:41:7d:c3:06:1f:c9:0e:62:b1:
                    95:84:37:9f:0b:5e:81:7d:57:e3:23:6f:bb:b5:35:
                    fe:0a:ed:0e:8f:9e:e7:f9:6a:e1:0a:93:a7:7b:1b:
                    fc:ef:68:04:42:b3:56:ba:5f:47:f1:aa:69:8d:f4:
                    69:49:cb:2e:0f:05:c0:8a:77:51:ac:1d:f7:c4:1a:
                    57:fd:85:61:37:95:7c:1c:bc:d0:97:d7:3d:bb:bd:
                    eb:1b:fc:5c:73:79:61:59:94:33:9a:6d:6b:99:f8:
                    e6:33:b4:e2:b2:52:c7:f5:e9:f9:99:1e:33:e7:4e:
                    0f:24:cb:04:4e:e2:5d:4f:04:8c:40:e3:dd:6e:63:
                    2f:26:a9:be:52:53:59:ac:fa:ec:ce:18:5f:4a:c5:
                    22:2f:e0:67:c3:02:df:f2:21:bc:d9:16:ea:be:0d:
                    5a:24:3a:8a:02:67:62:10:e9:cc:3e:e2:d5:54:f0:
                    b3:0b:bf:11:07:b5:4c:74:1e:b9:4d:32:d0:fc:b3:
                    a8:35:fa:2e:0f:ae:5b:80:fb:09:9f:b9:78:f7:98:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:A2:FE:37:F2:9A:B1:89:5F:40:97:1F:63:F8:04:C2:50:B9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/4075efd6-f5a5-3fd7-9106-d3e12533ff6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e9:47:ff:b1:89:d0:4e:7b:1d:39:6a:a4:15:f8:71:cc:62:
         cb:5f:c5:65:87:e3:8d:84:d2:d9:83:b9:30:2e:4d:d9:48:8b:
         da:35:27:66:cf:c3:df:3d:8c:4a:51:4b:db:3e:a4:e2:24:d4:
         92:60:4e:45:bb:28:58:ec:51:6b:bb:73:7a:46:90:33:90:d8:
         cf:6e:09:6a:f4:50:3a:33:aa:02:b4:6a:45:99:87:04:bc:b7:
         62:d0:4d:e8:9e:41:13:55:d3:26:bd:8e:11:e2:d2:3a:5a:24:
         8e:6b:3c:84:94:18:98:3e:68:31:50:dd:bc:d3:bb:c4:fe:ec:
         76:d1:ba:6d:c2:e7:7e:f8:41:d1:95:ee:fb:00:21:51:87:f8:
         5c:f2:11:af:30:76:b3:e9:77:ce:4a:66:92:b5:b6:a8:91:9a:
         2e:92:d4:cb:38:7e:34:d6:62:16:42:f0:6c:73:62:3e:b6:45:
         9d:36:19:62:3a:01:83:61:a9:68:fe:6c:1c:2a:16:79:9e:ad:
         a1:fa:c4:c0:2f:46:58:bb:a7:90:30:0e:af:ef:6a:f9:c8:ab:
         76:de:f8:bb:7f:03:43:3d:06:26:95:7c:fb:d0:7b:5c:9b:7b:
         85:ca:6a:86:80:5d:b6:e2:55:0e:50:c6:ed:a9:3a:45:f3:19:
         ca:14:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:17:57 2026 by rpki-client