Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
File:                     d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa (raw, json)
Hash identifier:          QF00ypjI44U7J0xGlme1Pzu2WsVpz2lNlyRkic92eUA=
Subject key identifier:   B0:9C:23:EA:51:02:64:2D:96:29:3D:AB:75:D1:1D:53:64:A5:A9:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C174575F8FC3D53B49700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:17:45:75:f8:fc:3d:53:b4:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=48a9ec96-6474-4119-a427-41b2e1707778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:57:ae:51:e8:38:07:4f:7c:c8:9e:df:45:
                    0a:f5:ed:63:8c:fc:4b:81:1f:ce:3f:1d:13:73:65:
                    6b:7c:3f:71:b9:ed:81:ff:70:3c:b2:e8:99:48:10:
                    a4:4b:92:91:d4:d9:77:b9:ee:70:51:b1:fb:61:55:
                    e2:fc:76:18:df:ba:14:98:9a:b6:97:e7:ae:66:f9:
                    b6:8f:77:27:2e:bc:8f:51:a5:43:b0:24:9e:ee:09:
                    53:7c:9b:39:21:3c:5c:44:ab:1b:d8:cf:d3:4d:51:
                    5b:6b:60:36:02:dd:70:1a:7a:9f:55:59:38:79:e4:
                    a0:7f:91:6a:db:24:7a:89:0a:d1:01:f4:f0:47:6b:
                    c4:64:1b:ab:48:91:69:d3:59:c2:d3:e0:4b:4f:f3:
                    e6:5a:a4:aa:2c:de:0c:9e:46:cf:d0:cf:a6:38:9a:
                    c7:00:cc:68:a1:72:ea:31:99:88:34:fa:67:d1:37:
                    c3:88:88:00:28:38:8a:b9:0d:f7:4c:29:67:6f:c5:
                    85:1d:15:66:62:00:54:41:60:1f:84:ac:fa:e6:b4:
                    9f:61:72:71:6f:17:be:af:b1:80:40:9a:51:aa:e2:
                    f9:a3:64:b9:11:8f:d3:c8:3e:21:e2:88:5d:cd:b8:
                    42:34:c5:75:2a:45:b8:07:3a:94:81:4a:1b:65:dc:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9C:23:EA:51:02:64:2D:96:29:3D:AB:75:D1:1D:53:64:A5:A9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5c1194a-1d8a-31c9-9fa9-875062b6c6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:06:95:9c:11:c6:f9:e6:40:ba:e5:ac:36:5e:0e:54:ee:84:
         66:fe:7a:1e:0a:56:32:e7:a4:5b:99:7a:e3:ac:cc:2c:ac:e3:
         39:00:0a:c7:df:f4:94:1c:52:37:7f:84:c7:84:3d:d2:6e:ed:
         4d:5c:d4:92:40:58:e7:3b:8e:bf:cb:e5:36:77:ea:ca:43:6e:
         18:35:96:9f:3b:7e:fe:ba:57:7e:df:41:27:42:ef:15:96:1d:
         89:47:8d:86:9f:72:29:ab:00:9f:f9:7d:93:14:5c:d7:19:76:
         f2:dd:c1:ef:fe:f2:65:5f:e2:68:6a:44:2a:3d:3f:0b:d7:75:
         bd:cd:49:18:e5:a7:5b:9f:0a:d4:5f:92:41:38:da:3b:59:b7:
         71:96:65:29:bf:8d:18:a7:21:a2:80:16:ec:33:d4:35:2b:4c:
         dd:bb:d6:fd:da:10:e6:ee:28:a6:17:0d:1f:03:de:e9:77:6e:
         7e:f8:4e:35:95:5d:39:d1:90:30:b0:13:ba:00:ca:5d:86:6b:
         fd:95:70:96:86:18:f7:8f:28:a7:4a:b7:13:2c:96:af:f4:36:
         1b:23:a8:20:cf:4c:11:6d:a5:86:f4:17:8c:9e:fc:29:ac:97:
         f0:09:bc:d7:8e:df:29:7a:6e:d9:2c:9e:fc:32:e6:5a:0f:d3:
         cf:d7:71:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:49 2026 by rpki-client