Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de464167-5d6e-3995-aea5-822de96d40c5.roa
File:                     de464167-5d6e-3995-aea5-822de96d40c5.roa (raw, json)
Hash identifier:          PEuXatsxrZtGyL5wYN3uEWKtvqJkoC3SsXp6nsZJ/co=
Subject key identifier:   60:78:AE:7D:2F:5B:0D:62:C0:87:56:45:47:FE:1F:65:A4:19:82:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BD803CA0C63D051DDBA40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de464167-5d6e-3995-aea5-822de96d40c5.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     40311
IP address blocks:        198.45.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:d8:03:ca:0c:63:d0:51:dd:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=570817c6-662c-4325-b01b-39b88a98070d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:8f:8c:58:60:a7:c0:fb:4a:f8:b1:3a:03:
                    92:d7:81:01:71:99:2b:43:e6:76:dd:55:1a:18:75:
                    1f:59:5e:44:77:00:3e:b0:23:9a:7a:fb:91:b0:8f:
                    00:76:49:bb:bd:9c:1b:24:47:9f:2e:f3:94:09:37:
                    56:67:71:b9:68:f1:75:ef:f2:1e:e0:1d:de:4b:26:
                    3b:f7:85:5c:5e:bd:6b:80:cc:43:a4:40:ce:cc:2d:
                    4d:90:0f:85:73:78:15:09:8c:69:4f:3d:18:46:03:
                    05:0a:a9:65:82:7a:f1:4a:ec:de:a4:a9:a0:95:c2:
                    fc:5f:0a:79:a8:19:ae:a5:fa:6d:b4:a3:83:d0:e1:
                    e9:83:3f:7e:85:de:2b:40:dc:d4:46:b3:85:7c:d8:
                    44:ea:3b:b3:34:94:f0:b8:f3:58:16:c1:14:f9:5f:
                    40:36:1e:e9:07:e4:dd:02:9d:1c:5c:e4:6d:85:24:
                    b4:cb:0b:50:df:2a:cc:df:9a:fb:c9:90:65:60:05:
                    ec:fc:b6:a7:ec:6c:01:d2:39:74:ee:0f:29:13:80:
                    03:df:e8:97:31:02:7a:55:78:2b:92:b6:d5:11:c4:
                    00:58:44:52:ff:94:3f:b6:dd:93:c6:35:9d:e0:00:
                    21:9f:f8:14:86:d8:4b:00:e9:04:60:19:fa:0c:02:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:AE:7D:2F:5B:0D:62:C0:87:56:45:47:FE:1F:65:A4:19:82:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de464167-5d6e-3995-aea5-822de96d40c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:59:3f:fe:be:3b:ad:4b:2c:c4:a9:13:e6:05:cf:3c:15:c1:
         06:dc:aa:bf:34:1a:8c:80:ac:80:38:0b:48:f7:bb:31:46:6e:
         ea:bf:a0:71:6c:b1:d8:ab:05:db:85:c3:bb:82:8c:c4:bd:37:
         ce:64:6f:0d:f1:f6:aa:7d:4d:61:b8:e8:fd:2f:c7:2b:b0:2b:
         3e:4e:72:4e:5c:af:20:5e:0b:70:6f:ad:a1:9c:79:5a:ce:3f:
         11:d7:18:52:61:42:50:5a:5f:72:c7:c8:70:4e:e9:15:ff:7c:
         89:cb:bf:29:41:cd:13:30:38:91:fa:2e:00:ee:ec:10:6d:69:
         2b:97:3c:2e:57:1b:7b:13:97:f3:d3:4e:fb:95:58:d1:a7:c9:
         0d:3d:29:9f:44:7d:44:1e:e6:2b:75:44:8e:8e:b4:b7:15:73:
         4e:29:a9:d0:7d:3f:6e:ed:28:50:00:d3:97:23:82:bf:55:31:
         2d:a2:43:7c:24:97:8a:ff:8e:a7:9f:e2:fb:8c:d5:04:94:42:
         09:e3:aa:34:f0:77:ac:50:ae:56:1d:f8:88:73:be:0f:42:3b:
         65:28:62:a3:7f:42:a5:78:eb:26:30:e2:d8:ce:3a:c1:fe:74:
         96:bb:a0:29:97:f3:76:73:b5:24:2c:9b:6d:6b:2e:a8:3b:75:
         65:6c:36:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:11:19 2026 by rpki-client