Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa
File:                     2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa (raw, json)
Hash identifier:          diBwlRc86vX7ZCeiHcZQQac1xxZDPveNJZGWtRh1p/A=
Subject key identifier:   85:3A:30:16:40:AF:BA:18:9D:84:E6:0F:D5:E6:98:2B:5F:AE:5F:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E13352C66A409994B28FF3040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa
Signing time:             Fri 05 Jun 2026 21:56:01 +0000
ROA not before:           Fri 05 Jun 2026 21:56:01 +0000
ROA not after:            Thu 03 Sep 2026 21:56:01 +0000
asID:                     44559
IP address blocks:        172.121.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:35:2c:66:a4:09:99:4b:28:ff:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  5 21:56:01 2026 GMT
            Not After : Sep  3 21:56:01 2026 GMT
        Subject: CN=958f345e-f49d-4ed1-9425-0ba37d01227b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:58:52:a5:68:d0:c2:11:29:66:ae:e8:b0:
                    64:8e:ea:47:13:b4:66:c9:73:54:09:6c:12:19:87:
                    04:b0:0a:72:1a:40:08:df:f2:79:2b:26:5c:b5:d2:
                    87:65:98:e2:74:58:c9:ab:0e:73:8c:5c:32:06:2f:
                    1d:ec:ac:25:f8:d8:c6:60:cb:ce:0c:c0:a6:bd:e6:
                    09:b6:6f:3f:d1:f1:2f:d4:12:95:61:6b:47:66:77:
                    9c:b3:2e:4f:df:64:83:c3:3c:3a:43:59:fd:0f:6f:
                    6b:a0:3b:3d:a8:52:a6:e5:42:ab:bf:6d:1c:53:a2:
                    bc:3c:3d:34:16:f8:ef:51:90:a8:48:05:4d:60:e0:
                    f2:69:3d:4d:c8:4b:6c:3c:6d:de:b6:4c:1e:e2:65:
                    01:28:e2:c1:17:e5:b0:60:f1:cb:b3:f9:58:5c:71:
                    e3:d0:ff:fc:a5:2a:01:35:e0:f0:b4:86:13:73:46:
                    c0:6b:9b:99:25:29:b0:4c:5a:73:55:ff:98:99:22:
                    ce:ae:a5:7e:8c:2d:9b:e4:7e:85:89:ee:b5:12:52:
                    06:28:90:30:a4:53:76:3d:33:f0:2b:28:4a:d4:b6:
                    e9:3f:03:de:8a:ff:c6:2e:91:e4:10:0e:d8:19:93:
                    f4:bd:fa:83:b3:88:34:9b:fe:75:7a:c0:5f:14:a0:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:30:16:40:AF:BA:18:9D:84:E6:0F:D5:E6:98:2B:5F:AE:5F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f51c6d7-104b-30d8-a0e9-cb8e7d2cd193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:9e:27:a6:a3:bc:52:b7:26:e5:d3:94:ae:7f:c4:e8:c1:
         ac:ed:22:18:aa:93:29:1d:fe:76:be:3d:8a:04:b1:05:99:15:
         42:6a:5e:59:24:ca:3e:70:a1:4f:28:f9:45:4c:7f:71:66:14:
         b7:36:f8:d0:b4:d4:f5:dd:0b:bf:e9:13:04:c2:10:fd:bd:03:
         49:8b:d0:74:3a:44:fd:e8:e1:46:85:89:47:20:b5:41:d0:34:
         7b:f2:0a:84:e0:23:9c:b0:5b:d9:93:20:9a:58:38:c9:5d:32:
         4b:98:58:bd:12:44:9d:2b:1d:e2:b6:d0:26:a1:88:bd:0b:b8:
         25:e6:b8:00:e3:ac:64:f3:d7:27:7a:05:3d:66:dd:d9:e0:f1:
         3e:f2:f9:73:76:dc:db:81:a4:b7:47:ab:ae:66:b2:66:e3:97:
         63:22:a5:0d:cf:62:52:f3:9b:4e:07:2e:ec:0d:8e:52:cc:d6:
         18:87:36:93:11:7e:a8:4c:47:29:d2:7e:a8:92:f3:32:77:8e:
         93:ea:cc:49:0b:cf:f1:19:6a:12:d5:80:35:b2:1b:59:9a:bf:
         21:fb:9f:20:fc:09:ce:3b:f8:b7:f1:cd:96:1d:65:87:08:ed:
         9b:1e:9c:b5:7c:62:fc:a6:da:6f:5a:77:86:59:f4:df:d5:6a:
         55:1e:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:32:56 2026 by rpki-client