Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa
File:                     88861554-d029-3df4-bb93-b6245c989af7.roa (raw, json)
Hash identifier:          dZ50qj6Z2OKVhnD73cUg27XVzhKmXrHPgTnPSLRdHb0=
Subject key identifier:   4B:E2:33:67:A3:A2:5F:71:CD:48:87:26:12:E2:72:42:49:89:E6:16
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C19DAD59D6F618129BB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:19:da:d5:9d:6f:61:81:29:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ff5b521b-2668-44f9-84fa-7a9576835dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:b9:8f:cd:95:85:da:65:68:a8:cd:e2:3f:
                    96:0d:5b:72:45:2c:8c:0e:c8:49:62:98:42:0c:fe:
                    86:b9:4f:73:bf:84:d8:6b:3c:64:8b:25:b7:f5:b8:
                    c4:6c:7e:62:d3:2c:06:71:cc:6a:cb:f4:0c:34:f8:
                    fd:4b:90:cb:a1:7b:47:65:4c:1c:86:4f:f4:bd:fc:
                    f8:74:ed:f3:c0:7c:b7:54:75:95:4e:d2:21:72:f0:
                    03:6f:0a:06:c5:ac:b7:7e:f7:70:39:4f:50:71:9b:
                    b8:1f:92:f5:ac:1e:88:06:86:22:03:14:c4:68:31:
                    ef:12:3f:ff:e7:45:07:88:8f:38:48:b2:d6:97:ec:
                    c7:9d:52:98:be:2f:72:b1:2d:46:77:01:5d:7b:1b:
                    9f:b7:23:0f:ca:2b:a6:1e:1f:de:83:1d:7c:2d:ae:
                    14:ec:a3:e1:a1:9b:44:7f:24:44:47:af:e1:5c:6c:
                    31:53:f1:7f:f9:5c:f4:86:e2:85:4f:43:db:5d:bc:
                    bc:4a:a1:3b:e0:2f:1a:25:15:5a:e3:6d:2f:83:d5:
                    da:e5:c3:ff:fb:b7:17:c7:9c:a1:13:70:5e:c7:ce:
                    e9:75:6e:04:70:72:41:29:23:20:0b:5d:4d:a0:29:
                    66:fc:ec:ae:a6:9c:a8:3d:f1:29:c6:5b:7a:d7:fb:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:33:67:A3:A2:5F:71:CD:48:87:26:12:E2:72:42:49:89:E6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:90:2d:c9:12:ee:73:43:0d:d0:1a:75:7d:8e:ff:1a:fb:
         46:d1:48:23:c6:b3:3a:5e:47:5a:07:21:44:73:67:79:33:0f:
         06:be:f1:65:22:a3:3e:1b:e3:96:b3:14:45:2f:2e:de:3d:f3:
         df:e6:55:f2:a1:de:ed:89:dc:d5:f4:64:6f:3b:90:d2:96:8d:
         0e:fc:3a:63:1a:ed:06:7b:49:2e:eb:9b:a4:03:86:91:dc:de:
         50:b6:c2:bc:a7:46:36:1b:4f:da:62:6f:c9:50:cb:47:67:8c:
         ff:e7:54:69:74:9b:0c:0a:82:f7:52:8a:53:f0:39:1e:ef:4d:
         77:fb:3a:41:21:ad:11:e2:6c:b8:0b:0e:b4:7b:b2:03:96:86:
         06:f1:3d:0e:22:ec:3a:04:45:04:52:51:06:21:6a:6d:dc:96:
         91:ac:5c:23:7e:2e:85:f3:4c:15:59:fb:04:5c:8b:64:ed:e4:
         cb:02:03:7b:79:2c:0c:67:09:38:b9:96:fb:c9:91:26:44:5b:
         7d:fe:ad:c8:f5:35:0d:32:c2:8f:bf:2e:d3:fc:08:df:19:c3:
         36:32:d2:da:12:9f:3f:71:6d:bf:98:ff:7d:e5:27:4c:ec:71:
         cc:2b:45:60:68:02:6b:e0:00:2a:bd:22:5a:9d:5d:a6:cf:9e:
         9e:cc:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:18 2026 by rpki-client