Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa
File:                     9108badb-91ba-37e3-a32e-1e9f3607a741.roa (raw, json)
Hash identifier:          RSxkhoXnzCJFH0zY8XzyYCgw2P/khgy3NDE2I+j907k=
Subject key identifier:   EF:CA:4B:5F:39:1B:E9:06:93:30:94:BB:53:DB:D9:C0:14:A2:50:19
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584DADAAE20FE55D4B9EE3B6D120
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        72.22.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:e2:0f:e5:5d:4b:9e:e3:b6:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=91d87c62-5416-49fb-863b-95f1709a52fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:e2:cf:d9:14:0a:c6:62:3a:fa:9d:c5:74:
                    dc:6c:c0:9c:8e:03:e4:7c:d4:97:1e:f4:f8:dc:e0:
                    46:3a:c4:6f:75:02:13:0c:94:e4:24:61:97:6d:94:
                    b6:69:c1:cc:d9:81:84:8a:92:63:7e:e2:42:19:02:
                    92:80:d9:e5:ce:4d:ea:e6:e1:5a:c6:53:32:20:d8:
                    29:e7:12:73:b2:f4:88:8f:19:d7:89:01:6a:e4:47:
                    2c:76:d8:8d:bd:2f:b5:f2:27:bd:bb:17:d5:29:a4:
                    ec:26:05:b4:de:28:2d:aa:60:91:5c:92:19:98:bc:
                    97:c2:59:a2:38:fb:a6:75:44:85:43:e6:f6:96:a4:
                    09:70:87:52:38:45:0e:d9:f4:df:0a:8b:10:57:8e:
                    3d:d4:b2:5b:37:2c:1a:f8:67:c8:c1:c9:14:2d:a7:
                    ba:20:78:ac:74:15:4c:b4:8d:36:c9:af:f5:9c:1c:
                    a8:85:9b:02:de:47:d0:3b:26:6a:e4:be:3b:f9:dc:
                    af:95:7a:96:2c:d7:ed:f8:5f:58:54:de:b2:64:01:
                    7f:f4:85:82:ae:34:a7:37:84:a2:2a:52:2e:40:55:
                    bb:4f:63:df:c0:72:6b:27:1f:00:e2:0b:76:d7:c1:
                    86:dc:e0:6f:c6:04:21:00:7f:23:9f:2e:ef:7e:5a:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CA:4B:5F:39:1B:E9:06:93:30:94:BB:53:DB:D9:C0:14:A2:50:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/9108badb-91ba-37e3-a32e-1e9f3607a741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:91:bb:f4:dd:fc:5a:dc:2d:64:a0:24:f1:5d:90:6e:e8:45:
         ec:6a:e1:89:57:9a:13:f2:14:fb:38:98:80:cb:c0:e6:30:a5:
         e5:14:85:30:2e:30:92:d0:59:2e:16:23:92:d5:78:df:9b:b2:
         b7:f7:69:cf:0e:34:63:16:89:10:9e:3d:b6:f7:98:cd:2d:d6:
         ff:5a:42:d4:c9:70:76:d1:52:a3:f7:c1:46:88:94:aa:44:df:
         c5:04:55:df:71:36:44:79:82:e4:7c:cb:70:9e:a1:95:21:ea:
         a1:ce:7d:b6:5a:8d:05:95:ce:3f:d1:b8:83:98:e7:2e:fb:57:
         61:d0:e6:b1:70:92:ca:08:9f:89:cf:df:a1:d9:02:55:6c:c8:
         c8:fe:5c:37:a1:d9:69:09:d6:03:73:99:22:1b:09:64:e2:98:
         df:1a:00:21:ca:9e:5d:c1:f8:21:73:f1:c0:60:85:fe:c7:76:
         49:63:7b:d9:25:66:8c:4b:81:fb:05:6f:bf:5f:f6:80:45:45:
         9d:c8:96:fd:38:c9:e9:7f:8f:9b:d4:52:c7:7f:77:80:6e:7a:
         e0:73:b2:9a:78:24:98:96:67:26:e3:4d:47:87:9f:9f:53:4a:
         b5:62:9c:14:d5:02:d4:46:f1:b0:86:65:8e:a8:00:65:a2:7b:
         53:9e:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:20 2026 by rpki-client