Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083e7113-2cd4-30a1-a0f9-3ef03cae405b.roa
File:                     083e7113-2cd4-30a1-a0f9-3ef03cae405b.roa (raw, json)
Hash identifier:          m2b0Jo+zMspj0EDuujToGR8thkAS4MDPpgelbFHGwL4=
Subject key identifier:   64:78:B6:A1:3C:54:32:C5:05:20:2D:9F:26:CD:1B:D2:F8:A7:88:FF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFF768B361A1FCD5995500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083e7113-2cd4-30a1-a0f9-3ef03cae405b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        172.242.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:f7:68:b3:61:a1:fc:d5:99:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5a9e2560-4831-40c7-be19-1dea08d3f04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:32:d9:63:01:93:25:74:45:10:7d:65:1a:
                    20:a5:b8:57:a9:56:ae:89:31:9e:6b:da:f4:92:dd:
                    f7:23:08:37:40:16:85:2f:b7:42:e3:cd:e2:cc:b4:
                    a6:d7:37:c1:3a:e7:e3:c4:5b:8c:cf:56:55:85:3d:
                    76:e3:39:10:fb:71:27:88:f8:c7:23:31:c2:91:28:
                    7a:31:9d:5e:5b:53:dd:3d:23:a8:6a:c5:a1:4e:c1:
                    ee:8f:0a:dc:04:91:b3:c5:a6:0e:a6:04:3b:96:15:
                    30:28:46:d1:21:c8:ec:8f:9a:81:d0:a1:fd:b7:71:
                    62:3b:75:aa:1a:82:87:49:d2:63:c2:fc:ab:cd:bc:
                    f3:13:2a:3a:65:18:53:43:6b:8a:13:00:ce:41:6c:
                    ad:b1:92:33:4a:04:4d:80:2c:22:19:b1:09:3e:6a:
                    56:03:78:b6:64:ef:61:f7:ae:7a:cc:0e:bd:e6:25:
                    bd:46:a9:50:8b:0e:84:2f:5b:13:47:fd:56:c3:86:
                    b2:76:2b:f7:5a:c0:0c:10:ea:fb:a7:ab:f2:33:4e:
                    e4:62:b3:d3:1b:7a:4d:92:37:c8:fb:9a:61:0f:cd:
                    05:df:b7:9f:09:a9:ae:fb:e7:08:68:a7:57:96:b9:
                    b7:ac:36:d7:6b:f6:c5:f6:98:87:11:e3:1d:6e:6a:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:B6:A1:3C:54:32:C5:05:20:2D:9F:26:CD:1B:D2:F8:A7:88:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083e7113-2cd4-30a1-a0f9-3ef03cae405b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:69:6b:69:49:77:3f:9b:49:6b:f0:0f:e9:f6:dc:fc:ab:
         46:6e:31:0d:c5:40:95:53:36:f2:18:04:fc:a3:1a:41:2d:52:
         57:8d:51:58:c1:99:bb:f0:6c:91:a3:18:5f:e0:f9:f8:0a:f8:
         d3:0a:55:6e:de:c0:e3:fe:0a:fb:c5:2d:07:1a:78:a8:3a:28:
         84:19:52:b1:3d:e4:3d:97:20:7e:06:21:0b:3e:91:27:9b:5a:
         d7:a5:17:08:6b:9e:65:ad:f7:2d:0f:0e:ad:d7:e3:de:bf:c3:
         5e:de:d7:6f:51:3f:79:3a:83:52:80:68:b9:27:b6:67:10:fe:
         49:c7:aa:f8:af:6c:5c:bf:8a:52:f6:9a:48:23:cd:a7:61:bf:
         8f:0a:37:b3:f3:be:fe:75:1d:0a:72:af:55:b5:76:50:13:82:
         a8:46:ec:aa:e8:2e:94:73:4e:b8:2f:b6:32:3b:e9:ef:21:89:
         38:b8:3a:6b:e8:03:e9:ab:2e:41:1e:61:49:2d:4d:89:b4:24:
         82:b9:21:01:51:cb:ad:99:2c:32:1b:67:b9:4c:5e:08:7a:a6:
         67:13:1a:57:96:c3:1f:62:fb:af:d6:9b:8d:8c:52:3b:5f:74:
         f0:a7:54:df:63:09:13:81:4f:b3:d2:7e:b9:a2:20:3e:b5:6e:
         58:54:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:19 2026 by rpki-client