Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c45f543-a8e2-3422-a291-03f52edcd913.roa
File:                     2c45f543-a8e2-3422-a291-03f52edcd913.roa (raw, json)
Hash identifier:          JevRrihzWthJrfb1mezO0PZAAsNYNuxX/5dqkJiJihc=
Subject key identifier:   28:ED:9D:13:D2:5A:C7:41:CA:02:0E:95:72:2E:23:E6:CC:E6:2C:53
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC995A9486C30C318E65B4200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c45f543-a8e2-3422-a291-03f52edcd913.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        184.179.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a9:48:6c:30:c3:18:e6:5b:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=d53c60af-4060-4042-b69f-c3d46ce1c9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:b0:5b:2e:cf:6a:6f:3b:0f:89:7a:06:f0:
                    90:87:ae:c1:1e:fa:ff:b7:ab:64:20:12:ee:d0:87:
                    d6:75:c8:61:b9:a2:f1:1e:4f:ca:7e:4a:c3:e6:99:
                    66:0d:58:29:53:17:f1:63:d4:84:c2:cf:ed:76:32:
                    65:06:2e:38:8a:13:c3:a6:30:21:09:98:01:ec:1e:
                    6e:e3:ae:0f:dc:6c:76:12:6d:e5:c4:50:53:1e:26:
                    62:e0:ff:22:a8:62:f2:6a:cc:97:5d:49:4c:5b:c9:
                    d7:a0:3c:f6:23:b0:1f:af:8f:62:87:f0:32:d0:75:
                    2f:14:34:17:7c:42:9a:5f:95:e1:4b:82:5c:80:b7:
                    5c:06:56:d4:60:87:3a:0a:65:9a:30:3d:c8:da:d4:
                    8e:f2:3b:c5:f5:46:01:a4:06:a3:66:04:66:80:9f:
                    e1:d2:37:95:3c:ae:50:6e:fa:23:78:54:e7:21:b2:
                    ee:29:7e:54:0d:13:f3:a7:97:d2:d6:73:5e:ac:90:
                    2a:77:48:10:60:f0:b5:e1:04:b9:58:f2:3b:7a:53:
                    9a:71:18:a9:f6:67:e3:75:af:aa:a0:b5:95:82:4d:
                    91:ee:f1:eb:61:76:d5:40:08:8a:be:c8:7c:7a:d8:
                    0d:96:96:8b:9b:e0:ad:96:db:11:99:7a:ae:a8:1e:
                    d2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:ED:9D:13:D2:5A:C7:41:CA:02:0E:95:72:2E:23:E6:CC:E6:2C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c45f543-a8e2-3422-a291-03f52edcd913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.179.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:f4:19:11:7f:6f:7e:4c:f4:22:b5:f8:8f:3b:96:fa:a6:
         2b:70:1b:5d:22:fc:4d:85:45:ee:8c:fc:e2:2d:00:57:84:1b:
         fb:9c:0b:f3:af:45:9d:5c:a5:d0:79:0d:f4:9a:66:87:29:46:
         d1:d1:27:c4:80:92:34:8b:3c:a3:63:ee:4c:0b:90:b5:53:d2:
         f7:f5:67:2a:c9:23:e5:45:4c:7a:c0:a5:dd:20:f2:1b:b7:e4:
         e7:f8:04:20:f6:13:d5:e3:cf:7d:f0:4a:98:bd:88:5c:09:41:
         da:a4:76:8e:79:d4:8e:ae:b1:8d:80:78:c2:16:a0:f3:b4:ec:
         d6:a8:27:17:7d:e6:37:4f:ac:b9:79:86:05:a0:94:7c:0a:63:
         ab:05:8b:49:48:eb:2b:a8:7e:87:a1:c4:5e:34:02:33:8f:af:
         79:dc:a2:e5:fb:2e:b2:51:71:b9:8d:f6:74:bd:77:ff:78:4e:
         5c:bd:b2:a6:41:81:b6:6d:a2:e8:9a:b7:37:3a:62:2b:12:50:
         d0:f4:e7:b6:10:e6:4d:2b:c4:ff:c0:86:de:ad:7d:c8:90:ed:
         49:c6:3f:14:02:d0:fa:5c:e3:dc:65:72:10:aa:f4:0c:f6:01:
         ad:1f:92:65:3c:04:6b:ac:4e:3f:f7:21:18:b9:9c:85:ba:c8:
         50:c4:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:49 2026 by rpki-client