Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
File:                     04114cad-7ec5-3696-b7ac-b904c25e638d.roa (raw, json)
Hash identifier:          ZRl2dVzBW+Ex0COTAPv7njHBgcLuA+WYNMnJ8r0HAgQ=
Subject key identifier:   91:34:FC:96:8B:72:61:96:C2:7B:E8:5D:50:90:82:53:CA:A6:8A:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C1670625E2DD2490DE2C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:16:70:62:5e:2d:d2:49:0d:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b8a46e57-8409-485e-b353-e2d364091a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:35:da:c0:f0:44:e4:02:37:32:1e:90:35:
                    2d:ad:3d:d4:7c:4b:f0:11:8c:8a:60:9f:be:1e:50:
                    19:78:59:0b:02:c9:a6:d4:df:8f:8d:0f:8c:bb:e3:
                    3d:8d:4f:7d:11:d0:8d:8e:94:93:f7:50:d0:ce:25:
                    5a:75:83:7b:de:30:97:74:94:2a:db:b4:16:1e:03:
                    8e:fe:3f:b2:b1:c6:94:4d:19:40:b2:57:c9:82:90:
                    ef:5f:e0:04:59:9d:32:06:39:b0:b8:23:90:ac:eb:
                    6e:fa:a5:30:42:d9:d9:e3:20:81:ec:ed:69:66:38:
                    a9:a1:31:c5:f4:72:f3:61:10:dc:28:36:10:c2:41:
                    dd:69:87:70:4e:62:c8:d5:cf:ca:b3:37:ac:1c:13:
                    fd:60:fb:5c:f6:f2:b7:d0:50:57:bb:13:87:79:25:
                    a4:c4:2b:46:28:63:0c:b7:61:49:cd:f7:da:6b:7f:
                    ba:5a:13:fb:4f:73:9b:9e:1c:4d:d1:86:8f:70:ca:
                    37:fb:69:f6:b1:1d:2d:62:43:fc:34:b0:dc:98:da:
                    c5:72:e8:0f:c4:6a:e7:0e:b8:20:85:dc:fd:4f:e4:
                    f2:89:57:77:23:be:15:b0:24:6b:76:41:73:0c:e6:
                    e3:08:16:19:f0:a2:03:23:9c:da:07:b7:c7:28:3d:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:FC:96:8B:72:61:96:C2:7B:E8:5D:50:90:82:53:CA:A6:8A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04114cad-7ec5-3696-b7ac-b904c25e638d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:c9:77:ed:3e:65:26:0e:a7:9c:b4:b3:32:8a:32:c2:97:bd:
         1a:5b:69:67:de:53:ec:7d:7d:3f:93:ed:9e:c8:65:27:79:32:
         ec:32:c6:d7:0d:4a:f4:7e:b7:e9:44:7c:bb:2e:8f:f3:9b:2c:
         c7:52:b2:93:11:31:26:cc:b1:ee:a1:f2:15:2d:ff:6f:db:64:
         05:77:6a:59:e3:6d:79:40:3c:7a:a7:6b:b4:de:7f:00:97:cc:
         d6:ed:56:25:38:77:6c:68:15:e0:6d:b5:fb:a9:bf:73:5c:ce:
         78:5f:5c:96:47:a0:da:2a:78:95:56:73:04:7c:ab:5d:68:73:
         dc:1a:53:66:1e:b2:45:36:52:5f:52:6b:14:31:e6:b0:0a:e3:
         46:3c:a3:01:78:e1:f9:82:1e:80:13:68:24:3e:ac:25:63:fd:
         19:b8:76:08:ed:af:8f:d6:b9:4f:b1:7b:81:10:8e:57:21:cf:
         10:ef:a5:92:59:cc:bd:bf:a6:72:96:3a:5f:f8:47:36:fe:11:
         52:8f:70:71:ef:ca:fa:f1:67:4f:7f:ea:ef:b4:c0:07:3e:96:
         64:44:2d:60:8f:da:df:d3:7f:9d:4d:5d:c0:2e:56:56:77:7b:
         3b:a6:04:f6:a2:42:a0:ea:aa:f8:35:c2:c3:76:d4:d2:7c:48:
         0a:6e:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:30 2026 by rpki-client