Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09140583-0a8f-3383-9e67-fb1e7511dae2.roa
File:                     09140583-0a8f-3383-9e67-fb1e7511dae2.roa (raw, json)
Hash identifier:          mHkXdIXhGDdPU8mY9NpKiL3vBu1AQGG0yMpfIe8zrlU=
Subject key identifier:   60:55:3F:DC:4B:B0:1F:AF:74:83:EC:0E:06:9C:07:4A:07:88:6D:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFF880F098DD4FD7CF1B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09140583-0a8f-3383-9e67-fb1e7511dae2.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        172.242.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:f8:80:f0:98:dd:4f:d7:cf:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5761d7e0-e178-475d-a10b-f4931edd4401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:40:4f:22:3c:38:d1:28:95:1b:1d:42:88:
                    2b:b7:d9:99:07:e8:b8:6c:26:60:35:9e:9e:71:79:
                    e8:53:90:45:63:ae:36:ba:09:40:e9:8a:25:c1:c1:
                    95:f3:d2:7e:1d:c5:85:c8:b0:e7:bb:27:a4:6a:2b:
                    e9:d6:4b:30:89:c6:de:e5:43:20:0a:99:77:8a:1b:
                    21:b3:56:1f:3c:12:33:d0:73:d0:e3:c6:7b:c9:68:
                    d6:d5:50:af:47:92:09:26:5b:ac:3a:6d:f6:68:25:
                    f8:ab:1d:68:ea:8e:8a:83:a7:dc:eb:ea:74:48:3a:
                    c2:bc:46:73:b8:b1:82:4f:b2:55:e3:99:74:92:b1:
                    c3:5d:68:36:96:66:03:2f:3d:09:87:d8:8e:6a:d8:
                    de:42:0d:fe:5a:44:9d:b1:0b:5f:04:8c:17:7e:02:
                    63:5d:c0:50:f4:46:da:80:91:1e:8b:4b:cf:b8:d0:
                    11:e1:a1:d5:fe:ed:5e:d0:64:7a:22:d4:2b:85:fb:
                    f5:b4:f6:e2:07:58:33:6b:69:6d:5e:fe:72:1d:00:
                    5f:d7:c7:c3:bc:3a:a9:f6:45:47:91:eb:ee:56:da:
                    d2:c6:74:ac:f2:f2:0e:ba:d0:08:b7:f8:13:eb:30:
                    1a:46:68:6c:58:3b:a3:af:10:57:d2:54:8c:88:13:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:55:3F:DC:4B:B0:1F:AF:74:83:EC:0E:06:9C:07:4A:07:88:6D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09140583-0a8f-3383-9e67-fb1e7511dae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:24:01:80:99:68:b2:87:06:d6:80:b1:a3:ed:ad:53:83:8d:
         75:4c:90:eb:16:29:f2:54:e9:10:6c:17:8f:3c:e3:91:88:16:
         87:f3:e1:a3:51:c6:e4:29:ce:aa:d7:09:90:d7:8e:57:de:34:
         7b:77:77:d0:8a:72:7c:94:f3:07:ba:86:89:0b:e7:40:85:69:
         71:88:ad:a3:f6:f5:e8:9b:0a:c3:d3:ff:92:af:6c:b5:50:d0:
         93:13:c4:5c:63:1f:09:d7:ee:09:94:41:4c:f1:07:f6:e9:e0:
         a1:a0:3b:16:7f:4a:d8:5e:48:7f:e3:8a:85:ce:a3:26:59:65:
         0c:8d:6b:d7:f2:03:84:f4:ec:0c:cd:55:37:e1:fb:07:be:53:
         67:b0:69:33:3c:89:dc:71:d2:25:15:a6:e7:95:74:20:c1:8f:
         60:6f:7d:44:61:f2:29:2c:21:12:28:5e:53:3a:20:9c:bb:8b:
         5b:d5:e7:64:f6:ae:6e:86:71:69:1d:28:33:dd:4a:1c:8b:1f:
         2d:7d:1c:10:41:20:0d:c7:46:73:65:c8:e0:92:78:21:ec:e6:
         f3:dc:8b:ce:8a:af:16:03:66:da:84:26:94:e4:7b:e6:a9:d2:
         c3:b5:c2:fc:ed:75:d5:98:9e:fd:eb:aa:34:2d:d0:50:ff:72:
         69:f8:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:39 2026 by rpki-client