Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa
File:                     2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa (raw, json)
Hash identifier:          xWYS6EEseOvcp1W+RTokWDlSCfPr4rGqZ3U0bnqHUOY=
Subject key identifier:   85:8D:40:68:7A:B0:75:BD:24:53:8B:E8:84:FD:5C:4B:FA:30:0F:42
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06722457E1DE32A850B59E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     12132
IP address blocks:        67.70.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:24:57:e1:de:32:a8:50:b5:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=62307b7e-bb5f-4043-9d57-1414d5d2e4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:ea:f4:ba:29:a1:98:54:3e:5e:13:b6:80:
                    98:29:a4:1f:bb:8d:eb:24:09:3d:d9:30:28:76:e7:
                    c4:46:25:00:38:f0:85:b8:61:d0:ba:f0:03:2f:ce:
                    a0:e4:c6:87:a0:6d:a5:29:53:37:85:15:95:4b:c0:
                    b8:fe:f0:53:26:5b:e0:36:84:be:e9:8e:cf:ac:8a:
                    da:27:ed:ea:b2:d5:48:f5:ad:ef:80:5f:44:96:14:
                    81:57:ff:71:f7:ef:e9:28:70:a9:40:39:56:58:45:
                    e8:6f:cf:4e:a3:a1:0f:29:3d:a9:7d:83:ed:4d:91:
                    a3:0f:f1:cc:af:d4:71:35:41:28:71:41:48:5f:04:
                    f5:4d:a9:51:1b:7b:3f:84:e1:fa:50:1a:a6:15:71:
                    3a:b8:db:bc:ff:e2:04:25:08:f8:bf:44:a2:3a:8f:
                    ca:ea:91:b3:91:90:13:a9:1c:fc:55:0f:c3:06:a1:
                    75:2a:a2:7a:20:88:19:bf:ba:e6:12:22:3a:d4:7c:
                    84:fa:e8:57:e1:9f:34:8f:5d:71:d1:57:3b:8a:c6:
                    8c:3b:46:00:22:10:5f:e3:0e:b7:15:9d:1b:ba:e3:
                    68:49:6d:61:85:73:d7:86:ad:0a:b9:73:61:32:6e:
                    ad:14:26:7a:3a:2c:63:0a:64:d3:fb:c4:f1:39:c2:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:40:68:7A:B0:75:BD:24:53:8B:E8:84:FD:5C:4B:FA:30:0F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2d1bbbff-cbe5-388b-824d-d7cfb56cedf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:32:43:c0:eb:94:21:38:46:a4:0a:00:bc:0d:9a:86:12:e0:
         b0:d1:df:1e:78:df:d2:30:c2:cd:d6:1e:f5:2f:c7:49:75:31:
         0b:39:55:f1:0f:0e:1b:98:18:8b:77:c3:bf:03:0e:56:dc:da:
         d8:2f:be:6b:5b:61:69:3f:3c:db:a5:8a:24:18:63:59:22:10:
         33:85:14:ce:b8:d6:fb:53:99:d3:31:e5:68:02:11:a2:52:3f:
         b9:fc:5a:c2:10:e5:0d:4a:e7:fa:45:76:ed:1b:32:e0:9c:fc:
         03:c0:c0:0b:2e:6e:7a:7b:82:17:e2:85:5b:fe:5b:d7:0c:ec:
         51:d5:09:ab:49:21:96:5a:90:c4:12:b0:f5:3b:02:fb:5c:f9:
         ce:2f:57:60:74:4c:2d:a4:90:03:30:0d:3a:b4:32:1c:6e:fc:
         3c:a8:90:a2:23:86:b0:08:bf:b1:05:88:d2:8a:22:ca:73:38:
         88:b3:2e:8c:50:3e:c4:a6:39:8e:18:73:05:4e:e7:ea:5f:08:
         5e:81:62:6b:f2:ab:56:bb:55:81:38:07:fc:86:a0:3e:9e:4e:
         cd:e1:42:05:86:9f:3d:8a:4a:aa:04:8c:d9:01:82:11:98:44:
         94:f2:6e:83:83:96:46:a4:92:c9:4e:1a:98:f4:40:fa:31:92:
         f2:cb:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:32:16 2026 by rpki-client