Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa
File:                     2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa (raw, json)
Hash identifier:          IvCUw6HiiXT/y+CMRw0btn4LBeIVOvtqJBMDq2t2ZKs=
Subject key identifier:   C6:8D:BD:AA:15:75:0B:5D:5C:AF:83:05:DC:4E:67:C5:34:48:B6:3B
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F305265C897B8DE95CBDF05E0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     54858
IP address blocks:        172.81.152.0/22 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:65:c8:97:b8:de:95:cb:df:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=cc04c4a8-26e2-424b-98ff-8bc32cb38bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:6e:23:e7:3a:24:17:d1:1b:1c:ec:9b:8a:
                    dc:02:9c:8f:aa:84:b5:f2:23:4c:38:f2:a1:01:68:
                    e3:af:f4:79:4b:d1:d9:32:45:6e:ec:49:5e:ee:2f:
                    f1:39:95:0c:90:cc:51:08:c2:18:35:b9:7b:0a:27:
                    c7:16:9f:36:ea:53:7a:0e:83:1d:75:fe:6f:b4:18:
                    d9:ce:aa:f1:fb:6a:ba:57:aa:07:6c:d4:6c:ff:91:
                    82:6f:a6:66:8e:fe:f2:82:6e:0e:0e:58:b5:59:bb:
                    3a:8b:e9:69:90:26:b6:83:7c:59:ca:e5:4d:6f:3e:
                    f1:87:56:bd:28:3b:4c:1f:1d:7a:68:a1:b5:40:79:
                    b3:3d:46:d3:c1:b4:3f:59:61:08:6a:10:75:59:63:
                    7a:af:80:0e:56:45:2b:16:84:51:f3:6b:a8:4f:ee:
                    9c:3d:0d:8c:e0:5f:fe:74:58:49:b6:92:ba:17:3c:
                    68:df:cb:ce:0a:4b:3f:5a:27:ef:8b:d9:17:c2:ab:
                    37:a1:ac:b3:ff:00:13:31:ae:5c:a3:22:10:78:2b:
                    f3:8c:6a:bc:2b:6f:a9:d3:47:36:19:73:c5:57:d4:
                    bb:d1:30:b1:88:80:e1:85:e2:18:bc:a7:e6:a6:6e:
                    94:fc:4c:9c:d0:23:8d:92:ed:0c:2d:7b:d8:48:97:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:BD:AA:15:75:0B:5D:5C:AF:83:05:DC:4E:67:C5:34:48:B6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2ef88d4a-4713-3ba8-b32a-75ba9fd6a15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:02:9b:c3:40:10:62:f1:ed:ba:66:85:96:35:a5:50:7e:
         3c:c4:7b:b7:02:a8:c0:b8:f4:9e:07:68:2d:be:9b:3f:b7:d0:
         b4:65:38:54:ae:4e:2b:cf:3c:6e:6d:3c:c2:05:65:ec:ae:b3:
         82:b4:85:81:14:ab:c8:53:16:17:3a:a9:a8:33:d1:39:d3:06:
         62:26:51:15:ee:8d:5b:97:8a:f1:bf:d5:a7:9b:e9:90:a6:83:
         c8:c6:cf:fd:9a:42:af:f7:fd:7e:9d:b6:82:57:dc:58:7e:67:
         e5:60:3d:49:11:c9:57:51:32:12:91:d8:11:7c:e5:2e:78:59:
         78:2e:44:6e:e9:3a:c5:8a:6c:b3:73:12:d8:7a:88:cc:7c:ab:
         6a:27:9c:36:d9:d2:43:66:01:e1:45:e5:f1:5c:6c:33:04:ed:
         ed:ff:0b:be:16:98:60:1c:23:86:a5:a1:57:d6:41:52:9a:ab:
         55:2b:96:ae:bd:33:b4:de:53:73:65:d9:d5:81:c6:b8:98:d8:
         49:0e:fd:90:c4:5e:78:d3:bd:b5:f2:45:9b:65:59:de:39:e5:
         48:ba:9a:cc:56:5f:49:db:5f:b5:b8:81:21:b8:b0:51:b8:45:
         6d:21:8d:43:cf:c4:c3:5b:6c:66:08:74:5d:3f:a7:89:57:f7:
         19:90:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:31:07 2026 by rpki-client