Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
File:                     2ef408ad-35f8-33e4-b29d-64037f1ae171.roa (raw, json)
Hash identifier:          a+hAcGM/iPhLpEemFydd+X8LKejYcVOsI0U8/K2QfUY=
Subject key identifier:   91:0B:C2:D1:B5:E1:89:4C:56:99:55:D4:B2:CC:BC:FD:1D:37:6D:32
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F4328584DBE6B24B5C59039A480527E00
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     2055
IP address blocks:        173.253.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:24:b5:c5:90:39:a4:80:52:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=a8f37d06-e030-4ea1-b116-71d4048666e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:0c:5f:a9:42:8b:2d:45:c8:b9:b6:4f:da:
                    15:a7:df:c5:6d:7a:f7:3a:b9:9a:b4:06:a9:c6:63:
                    3a:b4:f9:2c:19:fe:20:1f:75:3f:6e:30:11:26:0f:
                    f1:54:93:a2:2a:03:cc:6d:9c:a9:1c:00:83:61:8e:
                    1c:74:6b:43:e2:a4:b5:ef:07:d0:30:ae:d1:ea:8d:
                    64:9f:ad:39:b7:89:81:64:a9:ab:2f:67:b8:81:b0:
                    6b:e3:9b:f5:7b:3d:d6:5f:f1:f3:6f:4e:e5:d4:30:
                    80:59:95:12:90:fd:51:49:15:5b:c0:7a:ad:79:0d:
                    f6:6e:ac:25:38:9e:0a:ee:e0:21:41:98:42:92:6a:
                    b4:1d:c4:f0:fd:ca:3d:dc:50:6e:f2:4b:9e:36:3a:
                    dd:45:9e:b5:43:30:74:ed:d8:91:aa:94:1e:8b:a8:
                    1e:6b:3c:e5:50:2a:08:fd:b8:d7:6d:4a:92:b6:6f:
                    ef:2a:02:7e:7c:aa:9c:cc:9e:3b:42:d3:0e:ac:27:
                    bb:df:fb:64:ea:8c:65:1e:bd:d0:f3:cc:8a:87:ab:
                    75:e7:34:70:78:36:77:5b:61:ba:fd:82:44:89:13:
                    f3:b3:f4:dd:17:a4:d2:4c:05:37:5d:5c:63:08:98:
                    d9:71:0f:c5:11:71:22:cc:34:b0:a3:1a:b1:91:e6:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0B:C2:D1:B5:E1:89:4C:56:99:55:D4:B2:CC:BC:FD:1D:37:6D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/2ef408ad-35f8-33e4-b29d-64037f1ae171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.253.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:2f:6e:50:06:87:8e:9a:91:f0:a6:4c:9e:7e:e1:aa:6b:
         31:1e:9b:40:55:01:cf:ce:fc:30:ae:44:df:e8:a2:45:4a:c3:
         2e:3d:90:76:9d:0a:1a:08:e6:63:42:94:be:6c:2e:65:63:d5:
         25:31:bb:bf:4a:97:3a:3f:8b:c4:82:cd:9d:a2:54:88:04:aa:
         24:c3:ad:84:18:79:cf:9e:01:15:81:de:37:ed:54:09:fe:e5:
         89:ff:6e:f4:14:1a:80:2b:12:8a:4f:23:31:6a:0b:77:58:cc:
         9b:08:a5:11:1c:d5:63:b4:0e:af:5a:44:72:fc:ea:72:3a:e2:
         8f:7a:0e:e3:36:2f:26:11:e2:78:bc:cf:8a:9c:ce:a4:7f:2e:
         fa:45:02:25:97:ee:a8:1b:c4:cd:11:ef:7a:bc:5c:28:d6:eb:
         b8:fd:3c:8e:4d:38:4b:ba:88:17:90:18:c7:76:e9:46:6b:e5:
         76:45:d3:5e:b9:25:45:9a:f9:d4:13:d6:20:7a:9d:62:12:2a:
         0c:79:58:ba:4a:2c:67:0c:1a:51:86:f6:fb:9f:a4:4e:68:a2:
         39:ef:e9:d9:c6:39:ca:04:3a:99:9a:c5:21:21:47:ee:b5:f1:
         2a:22:d5:17:32:35:a7:70:58:52:08:c3:d0:27:82:46:49:d4:
         cf:1b:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:18 2026 by rpki-client