Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c3587b0-ebbe-3366-ae1a-90f7ede25923.roa
File:                     6c3587b0-ebbe-3366-ae1a-90f7ede25923.roa (raw, json)
Hash identifier:          +WjVIdbzL/xDKn/7Q0cl4+Mf1oLU7Ojv849WQ2UzWh8=
Subject key identifier:   09:07:6A:5F:97:0D:D2:4B:E7:16:67:99:E0:0B:7E:C0:D8:D2:8D:FD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E0B9E2282118900466C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c3587b0-ebbe-3366-ae1a-90f7ede25923.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.242.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:0b:9e:22:82:11:89:00:46:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9cf5eea2-f360-41d2-9ff1-907835def677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:78:7e:ff:8c:74:00:62:bd:e2:38:52:00:f1:
                    ff:43:e4:01:2c:5d:0b:00:88:b5:93:a3:dc:f1:60:
                    c8:8d:0f:68:48:94:d8:aa:be:da:a3:30:37:e6:a3:
                    0d:95:50:30:25:91:11:59:6d:1b:2f:33:40:10:67:
                    e1:e2:dd:aa:89:6b:15:98:64:51:7c:b0:09:c7:22:
                    64:0f:08:f4:4e:9a:58:9b:e6:20:37:48:ef:82:e5:
                    04:ed:64:86:32:71:36:ff:d7:1f:b5:48:7c:dd:58:
                    5f:9b:90:1a:bd:a3:c3:cf:36:8b:30:71:73:88:bf:
                    3d:3c:91:71:e5:ec:dc:51:be:7b:3d:35:ac:84:48:
                    1d:23:14:ae:a2:d6:88:a1:20:55:bf:92:58:d9:be:
                    4b:fa:8f:d2:6e:10:af:15:88:10:2c:0b:00:e7:5b:
                    86:c4:24:75:27:f0:7a:0f:54:6b:bf:55:ee:18:a9:
                    eb:bb:12:06:6c:b9:f5:b5:0b:5d:ac:e8:5f:73:4d:
                    89:fd:65:f6:50:1b:ce:49:b2:46:09:59:cd:16:e7:
                    6f:58:e2:de:0a:10:de:65:8d:a3:b3:0c:5c:d7:fa:
                    af:20:a1:06:b0:4f:8a:3c:2e:a3:0a:54:60:13:5e:
                    8c:ea:fe:fc:a4:ab:7f:97:2d:6d:ee:65:2f:cb:21:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:07:6A:5F:97:0D:D2:4B:E7:16:67:99:E0:0B:7E:C0:D8:D2:8D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c3587b0-ebbe-3366-ae1a-90f7ede25923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5f:b8:2c:a3:7c:15:fa:da:88:89:0d:b2:1e:a2:c6:85:dc:
         ff:a8:b6:62:9a:a7:a5:30:01:97:71:58:18:ba:d0:c0:6c:f4:
         e5:73:6d:8e:8b:55:c3:17:36:e3:a8:49:3c:ae:d9:b8:f5:f2:
         f3:b1:aa:0c:0c:b8:0d:a9:da:4c:d1:6a:83:5e:ed:5f:42:74:
         ea:2b:3b:9e:f5:b3:e3:61:25:3e:1e:61:d3:a0:83:1f:6d:fd:
         51:29:83:4f:63:df:b1:2d:20:3f:25:01:70:f1:2d:73:1a:ec:
         4a:bb:12:6e:1a:91:a1:a6:a7:20:b9:17:99:82:e3:e9:16:8d:
         94:6a:1d:4b:70:78:a4:e9:f0:ea:50:27:e5:4a:cd:51:5e:57:
         a8:cf:f8:db:de:2a:4b:b7:9b:a2:42:aa:d5:5a:a5:af:3a:b5:
         ab:70:37:0a:09:0a:67:c7:1c:53:95:f7:27:9a:c2:26:c6:2f:
         62:03:c0:ad:a8:67:33:d8:df:5c:4a:c9:33:9e:55:57:00:71:
         68:4a:28:6b:c3:36:62:0b:2d:ef:04:54:52:3a:77:3b:d0:b4:
         5a:6e:d0:91:5e:46:13:35:aa:dc:48:fe:df:79:fa:44:e9:c3:
         2b:0a:19:9b:d7:c8:c4:bb:00:5d:20:60:bd:7b:51:11:40:fd:
         79:67:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:35:04 2026 by rpki-client