Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87751bb1-d00e-339e-9171-afe0a14b13c2.roa
File:                     87751bb1-d00e-339e-9171-afe0a14b13c2.roa (raw, json)
Hash identifier:          +eL3FHCSlP38aQA0q+Kub4u2HLQ41gU2NtGQ4eoCx7Y=
Subject key identifier:   19:34:24:6D:46:4B:53:DA:B4:CF:5B:F2:C2:BC:5A:3D:7B:FA:5E:BA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C1B68B7069DC0DF02FFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87751bb1-d00e-339e-9171-afe0a14b13c2.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.243.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:1b:68:b7:06:9d:c0:df:02:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=e47f0a0e-7ad6-4c65-b75b-5f0fd6c081fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:13:2e:64:59:43:bb:48:b1:48:76:5e:eb:
                    04:48:d6:19:d9:b1:85:ef:8b:76:be:b1:3a:27:92:
                    b5:be:a9:19:1c:6d:ad:30:06:11:12:10:12:44:4d:
                    b3:45:1e:53:5e:9d:cc:4c:ca:55:39:d4:32:26:95:
                    af:ec:75:6f:bf:30:ed:13:a8:17:3a:66:58:10:7c:
                    4f:df:57:82:2b:91:5a:28:b0:1b:5f:59:bf:4d:fc:
                    9c:7a:8a:cb:f6:84:0a:04:64:8a:71:4f:ad:9c:ab:
                    34:b2:c1:3c:e5:56:29:be:32:09:56:46:6f:d4:63:
                    38:8d:83:49:5a:e4:0c:4f:b6:93:20:46:fa:ba:b3:
                    b6:68:bd:73:81:11:bb:f4:1d:a2:e4:6e:56:a6:57:
                    a9:21:61:01:40:83:e5:7d:f6:9a:93:86:1c:32:cb:
                    2b:13:10:66:2f:33:0f:c9:49:c6:a1:f6:0a:fe:ca:
                    e7:a7:ef:8b:d8:c2:22:39:c2:d3:48:b0:24:78:88:
                    40:22:91:f8:b1:d7:9c:d1:bc:b9:a2:9f:c0:c2:29:
                    c5:e9:57:f5:56:af:56:b2:ac:45:36:8f:e9:64:78:
                    d1:2e:62:43:f5:d4:39:ae:e5:e3:05:b2:b7:b8:e2:
                    d1:14:15:a3:b3:67:38:0e:a6:83:43:e1:0f:db:92:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:34:24:6D:46:4B:53:DA:B4:CF:5B:F2:C2:BC:5A:3D:7B:FA:5E:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87751bb1-d00e-339e-9171-afe0a14b13c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e6:ec:4f:3e:65:57:de:b3:86:12:e2:22:1e:61:22:75:c6:
         4c:b4:4a:d8:8e:9c:fb:af:28:f7:f7:2c:61:f0:07:78:06:56:
         06:75:4d:ee:45:c4:cc:5d:33:14:d0:7a:6e:bb:83:c8:1d:f9:
         84:51:43:28:09:f9:22:ed:03:42:8e:03:24:07:d0:17:77:d8:
         11:4d:29:dd:f3:3d:67:8d:e6:ac:2d:d8:dd:d5:91:51:e5:25:
         4e:1b:c3:2e:c4:de:a2:9d:b8:16:e3:ff:60:b0:06:4b:f4:9c:
         8b:4e:96:9c:d1:da:e5:ef:4f:df:8e:5f:a2:65:2b:9c:48:2f:
         64:16:cf:56:8c:34:32:dc:a0:a1:37:20:95:4e:75:ec:6a:5d:
         c1:f9:37:8c:c3:d8:05:04:a1:ea:54:01:70:4c:ea:5f:77:70:
         6b:ee:6d:12:f6:9d:0d:59:6b:45:06:9e:05:7c:fa:9d:c3:71:
         b0:c6:fe:8c:29:3b:87:d1:af:3f:5f:19:9d:6c:07:9d:e1:a0:
         2e:ef:11:a4:d9:69:cf:a6:b6:67:4e:f7:ea:3c:66:d9:7b:0e:
         e1:65:e7:6e:aa:40:a6:7f:5d:4c:db:c3:0a:aa:5c:82:f8:66:
         16:70:c2:8d:f8:c5:f2:07:a5:cc:4f:ff:26:97:8c:bc:59:f9:
         d5:11:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:55 2026 by rpki-client