Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa
File:                     58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa (raw, json)
Hash identifier:          sV5nEYVjCFadHH31KRTfwev8RsDK0NMrBZGWPALAsJo=
Subject key identifier:   C3:A2:59:73:CD:95:AE:30:15:93:86:21:15:F2:29:76:91:74:CD:6D
Certificate issuer:       /CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85
Certificate serial:       010D0C9F4328584F7E7DC6C6A56B953C747224E0
Authority key identifier: 20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     8075
IP address blocks:        199.248.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c6:c6:a5:6b:95:3c:74:72:24:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=7bd703a9-08b5-42a7-8b6b-02a552951a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:ed:69:2d:62:71:c7:91:e9:ea:ac:d6:7f:
                    1f:ed:27:87:2a:64:70:79:92:c1:56:cf:40:1b:9c:
                    b9:16:95:6f:8a:7e:05:af:51:df:d6:a6:83:6c:e4:
                    b3:f7:88:da:3c:94:ba:fd:08:c9:d8:a8:12:41:70:
                    22:b0:3e:46:f3:32:b0:d2:8e:87:50:ed:86:60:38:
                    ef:fc:d8:84:87:cb:13:11:cd:25:12:f6:44:6d:81:
                    e0:75:3d:dd:2e:9e:40:6d:0d:2a:d4:e9:98:f8:32:
                    c4:ae:d8:89:80:e4:5a:d8:18:0d:5c:4f:97:26:26:
                    62:67:36:f2:81:30:94:a0:61:0e:dd:be:12:1c:4d:
                    d4:f7:e9:02:ef:b7:08:a4:ec:cc:64:d5:35:1c:4f:
                    23:ab:be:2a:da:8a:b9:8f:71:26:de:a0:a1:df:83:
                    3d:83:43:6e:6b:39:1a:f2:41:ac:b6:6c:cf:55:5c:
                    a4:a7:e4:7c:23:4a:e2:79:1b:e7:1b:af:cf:9b:f6:
                    7c:8c:56:b5:88:c4:bc:75:1e:5e:68:a8:78:39:04:
                    9b:97:b2:c7:29:4e:48:ab:4a:52:2c:f4:4a:7e:aa:
                    4f:35:0d:cb:d4:37:e2:0f:e1:3f:d4:22:25:65:d7:
                    8e:0d:12:b0:a3:d0:fd:e7:61:00:b9:48:0a:c0:c2:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A2:59:73:CD:95:AE:30:15:93:86:21:15:F2:29:76:91:74:CD:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl

            X509v3 Authority Key Identifier:
                keyid:20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:58:c7:96:0e:e2:cf:d9:46:11:db:25:dc:09:ea:83:f5:54:
         c5:5a:2f:31:96:fb:d9:5d:ab:92:12:14:59:0d:14:c5:d6:01:
         df:51:fd:48:24:31:01:94:e6:17:0d:90:f6:68:4d:5f:e4:a4:
         9d:c4:a2:4c:4f:95:af:34:5f:31:3b:a4:96:1d:7d:c3:82:a5:
         41:fe:e3:e5:72:73:0b:88:31:a5:22:b6:bf:0b:0f:d6:06:52:
         87:f7:69:11:c8:cd:f7:88:33:7b:89:e8:cc:55:2a:56:0d:d4:
         fe:d5:dc:4f:9b:50:27:1e:ea:72:b0:b2:4a:fb:2a:b6:5e:8a:
         43:2c:ec:b3:11:ed:92:36:c3:7f:49:04:e2:01:b5:e0:0a:97:
         14:0d:62:da:dc:8d:b2:39:28:39:4c:fd:7a:00:5d:d4:6c:3b:
         f1:d6:bc:50:fe:32:fc:6f:ca:e4:79:0d:c4:94:bf:71:05:1b:
         52:41:07:e0:8a:b4:0e:71:67:bc:38:16:7f:76:72:5e:ea:db:
         38:aa:69:5f:9d:60:33:57:cf:8b:12:9f:49:c7:7e:c4:e9:4b:
         48:8d:a9:af:eb:4f:76:e7:5f:1b:ea:36:69:70:2a:58:2f:ba:
         8d:23:15:b6:32:78:ef:b9:c3:d1:59:79:ef:2d:74:85:83:da:
         be:86:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:52:06 2026 by rpki-client