Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa
File:                     245c4e93-80b2-3747-ba45-f754ff2f763b.roa (raw, json)
Hash identifier:          v4R7laahf3QYHe64pO079gIhaFTRksZCNLeL5qDhREk=
Subject key identifier:   BD:29:AE:D8:88:26:EC:F2:07:21:49:29:E9:AB:A7:09:69:D6:F2:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E06327DF455314F1A99A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        70.41.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:63:27:df:45:53:14:f1:a9:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2030723d-7fe2-4501-873b-c2c93180ca6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:e1:7d:16:c0:b9:63:d9:8e:b8:96:b5:02:
                    b7:68:62:04:21:61:3b:1e:b5:06:9a:95:53:79:b4:
                    89:c7:f8:80:9d:c3:c5:da:07:88:5f:36:8e:45:82:
                    67:fc:59:cd:ad:59:fc:d3:81:da:07:ca:96:7e:07:
                    e1:08:6e:da:d2:69:f8:e5:5a:eb:51:b7:3f:d1:70:
                    b0:94:3c:f5:57:9a:6b:63:02:2f:c4:e1:13:a9:7d:
                    d5:4e:d0:ac:d6:d3:cb:45:69:1c:9a:26:05:a8:e3:
                    64:57:52:83:ef:d1:e3:73:e9:e6:d0:1e:64:3b:54:
                    68:c6:a3:e1:3d:fc:58:ec:16:3f:e8:d3:86:68:f1:
                    32:b7:c0:55:9e:69:9b:eb:08:0b:d8:f0:96:eb:53:
                    cd:89:44:9d:7f:f8:e8:2b:ee:fb:4e:e8:7a:47:35:
                    e7:80:ff:1b:45:b5:e2:14:79:a2:60:de:a8:ad:ca:
                    3c:71:cd:2e:92:0f:16:a1:f1:b0:e2:11:30:b8:27:
                    ce:74:0b:81:12:6a:9a:d0:22:c0:1d:4f:f1:07:d9:
                    8b:36:ee:09:81:41:b6:54:5c:c6:c1:14:12:f3:9e:
                    b0:f9:c6:14:ea:9b:1b:22:1a:db:8e:bc:8d:82:73:
                    45:08:f4:99:a3:6c:fb:5f:cf:b8:74:5f:32:49:cf:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:AE:D8:88:26:EC:F2:07:21:49:29:E9:AB:A7:09:69:D6:F2:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d7:81:a1:0b:fa:b1:5d:f3:42:7a:93:eb:56:4a:d0:45:8c:
         41:69:ca:fb:d1:43:45:42:f5:4a:9a:5f:04:f4:6f:89:2a:ae:
         0d:4e:bb:df:a1:d2:83:9e:6a:e6:24:74:5c:7e:0d:92:0c:7f:
         d0:a8:f0:a1:af:97:f8:bd:45:b4:9b:d8:29:ea:e2:28:67:15:
         c1:0d:07:80:bb:3d:51:b4:86:c8:e6:97:dc:4b:6c:af:2e:f9:
         2a:3e:9f:a6:14:85:8a:14:07:f8:9c:c2:2b:47:55:cf:f6:cd:
         6a:63:f0:07:39:de:dc:52:50:d9:91:be:73:a0:c9:e7:72:f0:
         9c:e6:1d:03:b4:a6:d4:42:08:f3:e4:1d:07:0e:36:c6:29:32:
         a9:2b:32:03:cf:cf:2f:2e:88:5e:51:fb:ab:b5:ef:82:08:47:
         be:2b:8e:6c:89:9f:07:b7:87:41:f1:da:b2:48:09:9a:83:04:
         3f:5b:af:92:b2:11:49:81:7c:cf:86:c0:9d:1d:87:a9:ac:6e:
         2c:8b:20:08:22:50:4f:f5:1c:08:9e:94:5a:4c:c6:13:24:03:
         73:b0:d5:9d:da:4c:91:fe:cb:cb:bd:b9:e9:07:84:19:cb:8c:
         44:84:07:f6:1a:8d:ba:2e:f3:ca:a9:72:7d:22:6f:c5:12:ad:
         25:66:e8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:53 2026 by rpki-client