Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
File:                     2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa (raw, json)
Hash identifier:          cW74AahaDWjBZzkyHWGEnRL6Lfx9ZwXWiq5KYhweoec=
Subject key identifier:   BE:47:53:85:65:9E:8F:21:39:98:7A:36:77:26:95:B6:9A:1F:FA:34
Certificate issuer:       /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Certificate serial:       010D0C9F4328584E7204D1FDF8AED70CE3F35BC0
Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     399519
IP address blocks:        172.82.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d1:fd:f8:ae:d7:0c:e3:f3:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=90a4e3e6-dd6c-4803-923f-e58d5700402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:00:25:3e:f6:11:69:fa:33:ac:fa:6a:f5:
                    f2:d3:bf:8b:59:c3:e0:16:d6:5e:29:0d:85:a4:1d:
                    9b:14:99:ce:73:5c:f6:5a:d3:66:14:2b:6a:13:c2:
                    49:f8:e8:b4:5c:86:8a:f7:64:17:46:2d:4c:7e:a7:
                    c0:90:60:20:41:93:79:83:d2:23:e5:c5:9e:e8:9d:
                    02:96:33:67:ae:45:d2:59:4a:15:d3:88:1c:83:4d:
                    c6:fd:27:74:ff:a5:5a:8c:8a:a8:4a:24:44:30:25:
                    52:02:85:ae:e8:57:81:5a:01:c3:ca:4e:77:10:64:
                    09:65:3c:b4:fa:d9:93:ba:05:2d:6e:7c:ce:96:fd:
                    61:13:81:0c:9f:f7:a4:8b:8d:fc:46:91:a5:38:b2:
                    c0:12:54:de:2f:da:3a:93:7e:95:40:97:74:1c:94:
                    18:f1:24:2a:df:ef:65:86:dc:85:bd:e0:5c:e7:84:
                    91:76:85:db:14:4a:18:5d:fa:1a:7b:d4:6f:59:59:
                    39:f5:7a:4b:d4:ea:ed:0f:36:46:54:43:6f:ef:57:
                    87:3f:04:a9:f3:19:e7:5d:9e:1f:36:58:2a:0a:48:
                    a8:9a:ad:09:c4:3b:5e:75:6f:39:f6:16:e2:fd:cc:
                    8b:38:b8:14:c0:e6:da:d7:83:aa:65:1c:68:75:b5:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:47:53:85:65:9E:8F:21:39:98:7A:36:77:26:95:B6:9A:1F:FA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl

            X509v3 Authority Key Identifier:
                keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:60:d1:a8:20:73:77:ae:ab:90:79:8e:17:e6:f8:b2:a2:02:
         32:18:33:a2:d2:e5:ed:c5:21:44:39:23:8a:d2:3a:56:83:17:
         34:f3:b1:11:1e:93:f0:1c:ef:30:02:d5:f0:64:25:48:02:53:
         91:31:45:22:bb:92:0f:88:1a:1e:ca:de:e9:74:1f:6e:d7:f7:
         c8:0e:e7:9f:80:df:bd:97:28:96:23:35:41:1f:84:0a:32:35:
         3f:0d:97:bc:71:ff:d6:99:4c:fb:c6:02:9e:80:13:32:f8:fa:
         82:9d:a5:7a:f2:e7:4a:75:0c:aa:92:a2:09:dd:bb:e1:2e:8e:
         b5:fc:61:74:13:07:fa:e9:98:68:fa:57:6f:4e:97:47:ae:4e:
         d6:7c:ab:6f:af:a2:77:2c:0a:27:f9:63:8c:04:47:7e:bd:bb:
         7a:02:42:05:03:d7:30:45:a1:ae:50:e3:2f:6e:80:99:f5:d3:
         14:a2:ca:c5:3b:00:03:9b:a8:c4:e5:74:04:61:14:48:e1:1c:
         3d:a6:08:68:fa:7f:08:6d:00:fd:32:98:13:b6:b7:c0:7b:28:
         e9:ac:0a:7f:a4:24:f1:22:80:6c:f6:c2:c9:13:c4:64:8b:ee:
         63:e4:a6:88:53:2a:d9:cd:b5:2d:06:fe:8b:e8:2f:b0:ac:5c:
         b7:f3:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:32 2026 by rpki-client