Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fc14c82-8d55-33a5-826b-062562439ac8.roa
File:                     2fc14c82-8d55-33a5-826b-062562439ac8.roa (raw, json)
Hash identifier:          RdQ2Jo95xWaQ6zP5YKJr6Ebjh7qoWP3syaERtDGFZmU=
Subject key identifier:   DE:D6:B3:39:8F:9E:D9:93:65:A6:6A:49:97:23:28:32:45:23:9B:E9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E5E79F505B62FFE861A15AB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fc14c82-8d55-33a5-826b-062562439ac8.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     395973
IP address blocks:        136.126.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f5:05:b6:2f:fe:86:1a:15:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=bde21c72-e347-499b-900d-43176f0e7b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bf:d3:49:22:04:a0:eb:5f:00:41:73:d2:9b:
                    c8:86:55:e5:c5:46:0e:8a:af:a8:aa:a7:86:b0:ae:
                    35:0c:27:7c:27:4d:ad:85:8b:bc:1b:79:50:2f:ae:
                    76:ab:6a:6b:8b:81:6b:c6:13:eb:0d:6c:50:09:a5:
                    33:9b:f9:39:fb:19:0b:f3:1e:d8:15:38:d3:e8:64:
                    89:8e:b8:16:cd:80:39:fb:e1:92:5b:b8:3e:69:78:
                    98:7e:5c:2f:bc:72:cf:79:14:20:5a:9d:5b:54:55:
                    08:54:b4:3b:e9:10:75:3e:18:fe:5f:d5:2b:95:40:
                    3e:f6:1a:63:dc:99:ad:b1:67:87:dd:44:6f:89:89:
                    e0:42:29:96:a0:48:db:53:ef:43:79:08:e2:94:37:
                    42:3b:b3:9b:04:18:ff:49:d3:69:73:c5:bc:a5:fb:
                    43:e4:76:59:a9:cc:3f:9b:39:51:ee:0c:f9:87:61:
                    73:31:d1:1c:0e:b9:1a:78:6f:65:1c:1a:78:1d:14:
                    26:6d:50:d8:c9:1b:90:12:92:e9:09:9a:cc:c9:3b:
                    c8:e4:4b:41:74:14:c6:8f:19:97:22:04:4a:97:24:
                    07:fa:8b:0b:63:7f:8f:ed:28:9d:c9:36:2d:23:f5:
                    d6:8b:04:14:e1:8d:97:bc:26:e5:5b:60:02:12:aa:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:B3:39:8F:9E:D9:93:65:A6:6A:49:97:23:28:32:45:23:9B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fc14c82-8d55-33a5-826b-062562439ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.126.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:38:98:13:19:dc:b5:b2:47:5b:0b:d9:ac:01:51:28:d5:99:
         c3:74:3b:21:3f:2c:77:a9:5c:54:3f:d7:3e:42:26:6e:68:59:
         bc:99:2b:8f:62:5b:00:2e:29:c5:07:d2:95:40:55:fe:61:55:
         7e:50:81:47:a7:91:a8:b5:8c:f4:cf:8d:02:93:8f:0c:9f:de:
         29:c4:ac:eb:e4:28:85:68:1f:bb:78:e9:58:1a:f6:d7:07:3f:
         81:dc:f1:3f:80:c7:32:3e:7e:86:cd:f3:51:c0:9a:a8:dd:9b:
         d3:3b:af:a4:d2:fe:92:a6:b6:ec:89:da:c2:61:cd:d2:a2:4a:
         0d:53:6f:27:d4:5f:fb:4f:76:fb:81:1f:a8:2d:47:49:b2:ee:
         f8:95:53:cb:77:3b:42:5e:19:37:eb:7e:18:6c:cc:62:db:06:
         0a:31:bd:d5:30:51:49:d4:16:ee:3f:72:dc:64:6c:dd:bc:7f:
         5d:18:c4:04:5d:f6:fe:3b:bb:6f:b1:a6:43:d7:d3:5c:5a:54:
         da:dc:b9:c9:84:51:78:f9:4f:e7:8d:a1:ca:d6:29:96:b9:1d:
         fe:c5:6d:22:33:5c:bb:2f:b8:66:f0:c8:3b:32:5a:a4:d0:37:
         0f:a1:cd:72:98:93:77:e9:3d:76:16:17:5e:b1:c6:0a:b3:23:
         73:b8:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:32:17 2026 by rpki-client