Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/2b79ce8e-0233-3716-b904-4b68384681fb.roa
File:                     2b79ce8e-0233-3716-b904-4b68384681fb.roa (raw, json)
Hash identifier:          XxooA0KDYlxCBHgowTPnn9/aV66dY5dq9Z98UetUrFU=
Subject key identifier:   14:9A:E5:22:45:A2:E9:3B:92:AC:5E:C9:17:80:A6:C2:99:38:88:04
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584F05A0ACBF63DB26E8B9A11230
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/2b79ce8e-0233-3716-b904-4b68384681fb.roa
Signing time:             Mon 31 Aug 2026 17:58:14 +0000
ROA not before:           Mon 31 Aug 2026 17:58:14 +0000
ROA not after:            Sun 29 Nov 2026 18:58:14 +0000
asID:                     21949
IP address blocks:        172.85.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:a0:ac:bf:63:db:26:e8:b9:a1:12:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Aug 31 17:58:14 2026 GMT
            Not After : Nov 29 18:58:14 2026 GMT
        Subject: CN=1ccc6d82-9090-4897-89ce-a31bb23918d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:a5:a5:36:09:c9:82:22:86:18:2c:bc:16:
                    9a:ca:58:f5:23:0f:96:21:82:ec:ed:af:30:eb:f8:
                    f1:8b:65:9c:05:d3:61:39:91:7d:ea:4a:a9:b4:7f:
                    f4:d1:83:0b:09:61:ae:78:4f:cf:36:fc:6a:44:af:
                    92:92:ee:e4:de:59:a8:88:90:a4:ff:f6:67:8d:45:
                    7b:0f:04:3c:91:49:fb:1e:9d:e7:e9:9b:c0:0b:9e:
                    30:94:d5:e4:49:30:61:17:d2:eb:9d:05:f1:63:db:
                    60:6c:5a:14:be:fe:fa:08:61:45:b9:43:78:c9:21:
                    16:db:57:12:ba:2b:f2:86:b3:0b:4a:ed:8f:0b:b0:
                    90:d9:cd:77:21:48:2e:1b:0f:d5:c3:23:4a:87:ef:
                    54:2a:4c:67:95:aa:26:75:82:d7:c9:f7:4b:c9:5f:
                    90:39:0c:fe:20:d0:1e:77:bb:a9:a6:13:3a:ec:88:
                    4e:7d:aa:09:d3:04:42:f6:1b:99:da:54:f1:98:b4:
                    20:3f:10:9d:ec:5b:7d:d0:9b:b0:e8:e4:8d:b0:09:
                    41:ac:b7:03:82:d8:eb:91:35:af:ff:0a:ba:52:76:
                    00:f2:96:c8:05:99:22:e0:f4:28:4b:d2:4c:a1:b0:
                    61:8b:26:d4:14:41:9c:78:59:82:2e:f2:23:54:af:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:E5:22:45:A2:E9:3B:92:AC:5E:C9:17:80:A6:C2:99:38:88:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/2b79ce8e-0233-3716-b904-4b68384681fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:7a:90:24:35:98:59:78:5e:3f:bf:82:75:2f:20:ad:3a:
         11:0a:fc:ab:a0:87:9a:a0:8c:42:fb:1b:24:72:57:7e:b4:e7:
         6e:dd:78:9e:f6:5d:91:11:e7:ae:94:e6:1f:30:d7:71:75:b2:
         60:ed:b8:e9:e3:d4:aa:bf:96:1d:e7:16:24:2a:6a:01:73:bc:
         00:b8:55:38:5c:c3:ae:95:53:17:c3:c0:87:e0:66:55:9f:7a:
         4f:1a:11:ff:8c:7b:0b:30:d8:44:89:ac:a1:db:3a:2d:23:1c:
         11:f8:f9:2b:dd:cf:5d:d0:97:1c:32:d3:26:da:a4:58:2f:ee:
         1f:a5:34:8e:bc:bc:b8:1b:40:4a:0b:d6:47:6b:13:dd:e2:ea:
         1e:4e:f0:c4:dc:2a:18:01:11:f5:89:38:de:49:7a:be:0b:86:
         a2:5e:40:60:ce:65:cb:71:93:6d:aa:d1:88:93:53:5a:b3:4b:
         d2:f3:8e:0a:70:55:5c:c0:18:0a:b2:e3:31:c9:61:3d:1f:03:
         fb:d4:47:ec:3c:e1:2e:9f:a2:fd:d3:f1:05:85:0c:8d:25:74:
         09:74:eb:95:45:83:f3:d7:d3:5d:6a:55:1c:11:86:ae:fb:3f:
         fc:ed:e9:fc:81:6f:25:e7:b0:de:db:ee:0b:ad:b4:91:7f:e4:
         34:6e:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:09:32 2026 by rpki-client