Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa
File:                     bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa (raw, json)
Hash identifier:          o/xtWOZa6JexmXqcmjX3NVpfS8r+m4tHlgIkQ//KAlE=
Subject key identifier:   7C:B8:6A:44:54:05:6A:5A:90:0C:A8:1A:14:FF:82:50:CF:BB:C2:08
Certificate issuer:       /CN=2b52814e-343c-46a0-bf89-2e9064856503
Certificate serial:       010D0C9F4328584DBA3ADDF6A58C87DCF5233B00
Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     16276
IP address blocks:        192.30.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:dd:f6:a5:8c:87:dc:f5:23:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=a2accb4d-230d-458f-8f5c-0764e829b523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:c2:35:06:f4:d7:78:17:05:38:48:22:b8:
                    b1:b4:92:0f:3a:83:19:a8:57:97:54:05:28:18:e3:
                    09:88:c1:c8:52:4a:77:51:aa:3b:d6:d0:d1:01:50:
                    3c:5e:4c:02:f1:94:81:76:6f:0f:72:2f:4f:87:1d:
                    4a:98:2b:b4:94:86:05:a1:85:90:14:fe:7c:ba:fe:
                    83:1c:52:1a:80:f2:7d:64:53:8e:15:e0:64:98:4b:
                    af:5e:4f:64:3e:d3:dc:32:08:42:96:64:3b:2b:dd:
                    63:f2:35:74:25:fa:6f:ab:bd:34:3b:22:95:33:78:
                    12:f5:04:72:ea:2b:85:75:ce:1a:74:be:ab:4a:65:
                    89:97:b5:c7:da:13:19:21:a8:8c:59:68:82:9d:81:
                    6e:1d:48:23:de:3c:cd:11:31:a0:7a:a4:f4:a8:19:
                    d1:d6:29:b5:01:39:a6:c9:57:5c:5e:15:51:9a:29:
                    6d:89:83:45:b5:49:c1:ec:64:9d:a5:fb:09:48:10:
                    31:ee:ec:86:0b:f5:f9:15:f2:5d:66:b0:84:c2:01:
                    46:ef:0c:d0:92:b1:2c:b3:87:1c:84:97:98:74:ff:
                    bd:43:2e:0f:37:b0:6d:d2:ae:b5:d8:ef:14:72:2b:
                    8e:c0:32:95:5b:c8:df:a0:56:db:5b:78:5d:82:1d:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B8:6A:44:54:05:6A:5A:90:0C:A8:1A:14:FF:82:50:CF:BB:C2:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/bdabc6ac-4781-384f-a473-cf26c0ffdaa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl

            X509v3 Authority Key Identifier:
                keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:a0:a5:62:f8:c5:30:f4:bc:a5:a1:69:ae:a1:1b:c7:1b:
         dd:db:e0:9e:84:bb:5e:03:6b:cf:7b:ed:17:dc:38:c2:f9:9a:
         53:31:ed:82:98:10:af:83:ed:24:1b:20:56:bb:1a:5c:46:42:
         4e:9b:01:ab:1d:98:8c:86:5a:67:96:02:dd:f1:6e:a5:f0:6c:
         87:8c:9d:f6:56:a1:14:25:fa:94:22:83:98:32:e7:8c:6d:22:
         fd:21:5a:69:69:5e:e1:66:cc:0c:30:63:86:78:9a:39:0b:b2:
         81:df:10:86:92:06:42:04:15:5a:55:d1:e6:f3:c3:94:5b:77:
         58:d5:e6:5f:4f:37:4d:7b:8f:36:f9:39:3c:20:7b:27:98:75:
         2e:cc:db:8e:99:46:3c:4e:9c:7b:26:f3:dd:e6:e9:92:59:3a:
         fd:73:89:ac:23:ab:ef:24:c7:47:17:60:fc:9e:2e:0a:ba:05:
         80:c6:36:fd:75:9b:7a:1f:99:8d:41:0a:1b:4a:08:89:2e:18:
         f7:89:04:80:ed:16:b4:7e:17:db:cc:33:69:2a:ed:94:0a:3b:
         a5:96:61:fa:ab:c4:76:fd:dd:6e:3d:84:94:4c:dd:19:d7:e3:
         1b:52:9a:e7:59:73:7d:30:10:ec:64:43:61:13:e7:01:1a:8a:
         2d:cc:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:49 2026 by rpki-client