Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa
File:                     58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa (raw, json)
Hash identifier:          gxCkn89AhFlx71uivSuUus3gMPDrUkPaGWmQNebuI+E=
Subject key identifier:   85:0E:56:C2:17:72:EE:81:86:E4:1C:AA:42:4A:68:56:89:EB:B3:4B
Certificate issuer:       /CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85
Certificate serial:       010D0C9F4328584D59EA6E821B833F4DCDAD6B62
Authority key identifier: 20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        199.248.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6e:82:1b:83:3f:4d:cd:ad:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b1dbf6-fdea-421b-898e-66bb9122ec85
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=c26fa3df-f9cc-4f26-957c-7e1711a474a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:00:09:32:2d:80:1d:2b:5d:38:79:86:f4:
                    ad:1f:ac:a0:9b:94:bd:53:d9:9f:25:39:98:82:69:
                    6c:73:d4:4d:bc:42:a8:3d:62:c2:22:e8:3b:2d:e7:
                    5d:dd:dc:f0:f0:26:a8:d6:f7:7a:87:52:8f:f9:1e:
                    15:2b:9f:7d:98:bf:3a:0f:15:b4:76:3a:68:d3:98:
                    d8:ad:a0:2d:4f:15:e6:40:5d:e5:dc:7c:7e:fa:45:
                    3e:5f:0b:ff:be:48:57:fd:fd:a3:5e:b3:f3:17:f2:
                    2a:f4:1d:89:4e:e7:bd:4f:49:5e:80:84:62:a6:31:
                    d0:36:73:d4:48:8c:32:0f:19:ab:d5:60:d6:45:b2:
                    58:74:fb:37:79:d5:9d:c0:56:35:de:01:f1:9d:8a:
                    83:88:25:e0:6c:00:d3:b5:87:61:96:b3:0d:3d:a9:
                    26:47:f0:c0:87:b2:bd:38:96:20:b4:82:91:77:cf:
                    a7:81:86:4a:3b:68:0a:56:37:34:74:81:83:5f:c6:
                    72:46:cc:f0:4f:be:e2:1f:0a:2a:06:11:9a:f3:6c:
                    33:fa:e2:eb:93:b4:98:fd:75:16:4e:6e:6f:dc:4b:
                    7e:99:3c:49:f0:3d:13:50:bf:ad:66:70:ab:32:8b:
                    bd:4e:21:5c:bf:4a:3e:1c:71:cd:cc:30:c6:0c:1c:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0E:56:C2:17:72:EE:81:86:E4:1C:AA:42:4A:68:56:89:EB:B3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/58117fe2-8c85-3f0a-aa6b-1d5b9c068cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85/c2b1dbf6-fdea-421b-898e-66bb9122ec85.crl

            X509v3 Authority Key Identifier:
                keyid:20:41:DC:D5:C5:00:28:9C:21:0A:FA:EF:A2:F0:6C:8A:47:D9:63:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2b1dbf6-fdea-421b-898e-66bb9122ec85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:02:26:bf:f1:94:d8:24:40:8e:04:06:22:48:8b:fa:5a:98:
         d7:62:90:f5:5b:66:8d:e5:ad:5c:aa:58:c5:76:59:fe:67:03:
         91:f7:c1:7c:d3:de:66:b4:8e:b8:0a:34:46:2b:0d:7f:2c:c3:
         88:a3:9d:cb:d4:67:ca:a5:2a:cb:b2:f6:7e:4b:41:db:73:38:
         2d:05:6e:e3:3a:47:c9:be:be:98:e6:11:9c:8c:e8:01:0b:dd:
         91:3b:3e:41:0e:b6:14:43:fb:e1:58:d4:94:20:de:b3:2f:67:
         89:cf:85:d2:eb:5e:1c:76:a2:13:a4:c7:a7:c2:03:bf:20:59:
         e4:9a:01:3b:8a:db:b3:22:76:f6:ef:7f:cf:14:03:32:a3:5b:
         76:67:80:f9:71:0d:53:03:f5:8e:ce:8a:42:a1:ac:c7:f7:6d:
         75:e2:d2:7b:68:bd:ff:d5:e4:a0:a3:a1:3b:12:0e:17:13:1e:
         c3:49:c8:18:9f:7c:a7:c9:71:68:a6:35:07:7f:d0:1c:2b:02:
         10:56:3a:d8:56:2f:75:d1:06:02:e3:1f:ef:62:d7:16:b3:cd:
         d9:39:0b:14:6d:33:3b:62:64:e8:16:83:c1:dd:08:10:a9:a8:
         fd:41:b6:c1:b6:17:19:81:b5:8a:40:e3:60:b6:a0:49:5c:18:
         83:75:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:54 2026 by rpki-client