Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa
File:                     2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa (raw, json)
Hash identifier:          LDElumqxMTTGr5iy+CtDFJEMIVP1rqgPxi9I0THtSfk=
Subject key identifier:   F5:00:0B:95:C3:6F:1D:47:86:2F:C6:72:B1:21:FB:4F:9A:FC:44:51
Certificate issuer:       /CN=42ed3796-8b5f-4c19-adfd-f57282c67dda
Certificate serial:       010D0C9F4328584D191BF47C8110C361A8BB0D00
Authority key identifier: C3:A4:D7:E9:F9:BA:82:BD:6B:A9:D9:63:CD:49:EE:73:AD:0B:C0:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa
Signing time:             Sun 08 Mar 2026 07:53:07 +0000
ROA not before:           Sun 08 Mar 2026 07:53:07 +0000
ROA not after:            Sat 06 Jun 2026 07:53:07 +0000
asID:                     402091
IP address blocks:        207.174.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/42ed3796-8b5f-4c19-adfd-f57282c67dda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/42ed3796-8b5f-4c19-adfd-f57282c67dda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:1b:f4:7c:81:10:c3:61:a8:bb:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ed3796-8b5f-4c19-adfd-f57282c67dda
        Validity
            Not Before: Mar  8 07:53:07 2026 GMT
            Not After : Jun  6 07:53:07 2026 GMT
        Subject: CN=48c1dad3-a9ac-4a37-aaa2-37977ca18ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:cb:5f:77:b9:a2:cf:7f:f2:d6:db:81:6d:
                    ba:13:bc:cc:09:b4:e8:4b:2f:d9:e3:dc:17:0d:df:
                    2b:0a:2b:2e:22:ec:82:fb:89:73:15:3e:88:2a:53:
                    5f:bb:61:cf:28:e0:fc:3a:15:1c:1a:7b:88:22:3f:
                    62:ba:84:30:9b:d4:f7:22:17:c3:91:2d:51:90:23:
                    08:2a:fe:56:70:dd:5c:17:7b:9d:e5:dc:ac:26:10:
                    42:83:5b:29:a0:ee:6b:ae:88:2a:9e:43:34:05:ed:
                    ed:9e:d3:da:a8:d9:f5:fe:39:85:df:02:79:79:23:
                    54:69:5c:53:69:4f:fa:a6:38:bd:93:98:d5:c9:ec:
                    4d:f8:cc:5c:73:59:2b:7d:10:0f:c9:3b:74:1c:43:
                    84:eb:5d:d6:44:f2:11:d3:93:f3:64:a0:89:f9:be:
                    8b:9f:6a:f3:56:03:80:23:15:f3:f4:5f:6b:6a:53:
                    a4:41:7d:cd:68:99:58:77:0c:96:d0:9e:c9:52:48:
                    b7:f1:85:f3:fd:af:f8:52:9e:11:03:67:35:e5:d0:
                    67:66:0b:d6:36:32:c7:94:ff:a5:83:fc:56:78:2d:
                    d0:12:a9:0b:bc:3a:60:9e:b1:5e:da:81:20:81:76:
                    50:98:d0:02:2a:23:f2:d8:de:91:e4:1c:8d:a5:c4:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:0B:95:C3:6F:1D:47:86:2F:C6:72:B1:21:FB:4F:9A:FC:44:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/2c685ebd-7c47-3833-aa6c-9f5ae7e26bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda/42ed3796-8b5f-4c19-adfd-f57282c67dda.crl

            X509v3 Authority Key Identifier:
                keyid:C3:A4:D7:E9:F9:BA:82:BD:6B:A9:D9:63:CD:49:EE:73:AD:0B:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/42ed3796-8b5f-4c19-adfd-f57282c67dda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4c:f2:91:a8:70:e1:ba:42:c1:b8:dc:d5:e0:f8:ef:9e:61:
         83:7a:8f:e1:ef:19:fc:5f:84:48:1f:83:1d:5f:8f:82:55:73:
         52:25:41:b9:88:04:b3:98:33:2a:f2:4b:f7:42:56:bf:02:d2:
         ae:b6:eb:d6:79:31:90:46:af:89:c0:ff:d1:20:a0:f6:5f:dc:
         f1:50:a6:78:b8:f9:76:23:1d:11:f8:67:f1:99:07:57:1b:87:
         8f:ce:9a:14:e2:51:ff:04:7b:a1:d8:fb:35:a2:54:fe:40:0c:
         e6:0c:b4:55:3f:c1:6c:47:71:2c:d0:93:51:53:35:6b:64:d6:
         97:92:b9:05:cd:89:de:e1:f4:a3:b7:41:a5:8c:ee:29:57:8a:
         ef:c1:40:42:9b:b8:5e:44:62:c2:f5:9e:5f:59:16:26:81:3c:
         8e:e1:d6:61:0b:af:a8:94:3a:c8:51:c4:23:4c:bc:7a:ce:02:
         f5:6f:6e:d7:e1:23:00:ba:f6:77:ac:e1:8d:b5:89:2e:e0:89:
         3b:94:86:89:3e:22:4f:82:ae:65:0f:dc:ac:8a:9b:df:39:00:
         b4:12:96:0d:b7:bf:e6:13:7c:ef:50:ce:0d:9c:1d:d4:1a:39:
         a7:e0:d9:e6:d3:e6:25:c0:4a:12:93:8c:a7:26:8e:f3:e2:34:
         ac:a3:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:52:16 2026 by rpki-client