Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa
File:                     5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa (raw, json)
Hash identifier:          nGvxZs/lusoCkLQyXFtoN5knpBoX8svEGLmdlUoSbx8=
Subject key identifier:   6E:AC:7F:20:FD:7C:E5:A8:CB:31:40:B3:5C:2C:62:20:2C:86:1F:B7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584DB77030E1C1399C6E89C92500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     7155
IP address blocks:        172.242.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:30:e1:c1:39:9c:6e:89:c9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=13cab2dc-a9d5-4a06-bfeb-850cebb2e612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:1f:d5:e4:e2:10:74:ed:57:1a:f2:4f:6f:
                    ff:62:03:35:d3:03:00:8e:c9:92:a4:8c:0a:58:b9:
                    61:5a:cf:78:6a:41:85:31:76:b6:5c:92:55:d3:b8:
                    b8:56:e7:f0:a9:e7:db:06:90:34:3b:7b:72:8d:dc:
                    7e:d9:0f:ff:fd:1c:bf:47:46:fc:19:c5:62:c8:57:
                    93:4a:08:6e:db:df:a1:ac:fe:b3:62:4c:4a:94:ab:
                    8c:a1:28:46:7e:99:ff:16:02:b8:91:ae:85:13:60:
                    6d:cb:e2:c8:1e:13:d9:90:b5:e5:cd:50:db:e2:3a:
                    3e:83:05:81:93:82:cd:e0:ef:9b:4c:89:64:c3:3e:
                    25:1a:7e:f2:6c:73:fb:65:f6:f6:6d:7e:7f:a7:9a:
                    57:6e:00:58:6e:31:a2:8e:57:33:69:bd:1c:c0:8a:
                    87:07:35:7a:68:ec:c2:ff:92:8a:44:10:ad:5d:f8:
                    32:0d:29:0f:cc:50:d9:8c:6d:83:8b:9c:2d:7e:34:
                    80:c8:c7:f9:9b:d6:bd:4c:18:cb:96:d3:b8:cf:d6:
                    4d:ef:35:44:c4:8c:9d:3c:37:28:c6:dc:ba:58:b6:
                    8b:80:ae:d9:1b:98:0c:b0:7b:c1:0b:fa:f8:45:50:
                    4c:7a:14:23:5a:28:10:f9:68:6d:b6:27:aa:b8:52:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:7F:20:FD:7C:E5:A8:CB:31:40:B3:5C:2C:62:20:2C:86:1F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:f4:7a:1e:86:a7:b2:12:23:34:f2:ad:9d:97:0b:ef:f3:
         29:8e:e2:75:52:93:cf:30:cd:2e:a0:f0:c2:04:df:48:40:cf:
         af:6f:31:3e:37:8f:2e:ba:f0:dc:1d:41:cc:79:f9:43:8d:b5:
         e1:78:89:c2:56:f5:82:b9:7f:51:9d:42:a8:08:74:17:11:a3:
         9e:75:a7:a2:73:bb:06:63:fd:2f:4c:db:58:2b:67:60:c2:85:
         bd:9f:5f:1d:19:23:e5:f7:84:eb:35:ba:e1:4c:d1:16:58:1e:
         25:84:18:99:6b:3b:b2:45:0b:85:db:c1:d6:7c:b1:c4:90:ee:
         3a:9a:ff:1a:c0:91:80:bc:e3:42:e8:16:b1:2b:ea:e0:f4:ab:
         32:24:f0:05:42:b0:fb:17:e9:2e:62:6c:2c:b9:dd:d2:4c:9e:
         2a:61:a5:67:11:b1:76:29:8d:92:4f:fd:7e:a8:0b:27:39:03:
         8f:c6:52:7d:39:41:e1:35:e7:32:08:cc:94:43:9b:26:0e:68:
         41:04:04:e5:ca:3e:fa:f6:82:d9:4e:8d:97:f5:31:96:35:60:
         11:d1:0a:85:16:ee:b0:35:80:f0:f9:b5:1b:a4:b4:47:4f:0c:
         3d:8f:6b:e3:66:e9:d1:41:93:4a:34:ff:45:1b:d3:60:81:ee:
         91:6e:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:02 2026 by rpki-client