Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa
File:                     7299b5dd-141b-3229-868e-dd2b5a44ef10.roa (raw, json)
Hash identifier:          uYmuovtKI9dUlD1xi4HZJpIjtox+ussc3qFySYKK1nE=
Subject key identifier:   DB:71:AA:AA:28:87:9D:CC:CA:E6:2F:86:58:E2:CE:9F:78:98:FE:AC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D2D3F82996E1818E4FB41C060
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     40306
IP address blocks:        70.41.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:82:99:6e:18:18:e4:fb:41:c0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=b6046611-4df9-4caf-8379-551bd9ed508a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:a8:73:cf:a6:1b:ee:88:86:4f:e5:79:81:
                    e7:e2:f8:a0:6a:0f:04:d8:c4:dc:cb:b3:d5:f5:8d:
                    11:a8:b0:e9:fb:07:97:7f:f0:36:c9:58:50:c9:de:
                    53:97:2a:e1:1d:c3:0b:6b:b0:68:8b:52:14:01:f6:
                    8c:c6:46:a8:80:86:96:5b:b8:7d:2d:75:08:83:07:
                    48:75:4c:64:18:4a:88:85:a0:f7:b8:0c:7b:86:a3:
                    e4:0f:38:d8:7e:59:4c:c2:ca:71:31:aa:e9:16:98:
                    44:e1:52:80:bd:6b:2b:b4:4f:bd:ba:70:28:8a:da:
                    bd:ad:4c:92:02:49:5f:6b:b6:08:d8:66:22:50:e3:
                    5c:03:c8:8e:3c:67:55:bc:d3:3b:96:03:1c:ec:56:
                    9c:35:d8:8e:5c:fb:f5:b2:c3:22:d9:28:a5:bf:97:
                    95:48:9b:66:f5:de:ea:ea:21:22:ee:8f:78:86:fa:
                    b6:49:d7:eb:83:f8:a2:84:53:9f:d4:9c:7e:fd:ae:
                    3d:3b:7a:a9:6d:9f:54:dd:ae:c3:fd:9c:2e:6a:ba:
                    0b:e2:c5:9f:ed:63:7e:86:45:20:12:60:01:2d:92:
                    22:7b:15:5d:97:78:e9:f9:60:64:4f:55:a6:f5:f1:
                    52:fd:b9:9e:f9:ca:0f:00:73:2d:ed:56:f0:26:05:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:71:AA:AA:28:87:9D:CC:CA:E6:2F:86:58:E2:CE:9F:78:98:FE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7299b5dd-141b-3229-868e-dd2b5a44ef10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:e8:ce:41:3f:ac:b9:a5:39:f2:bc:2c:46:99:21:ea:12:
         4d:c5:d3:36:71:01:9a:ce:20:a4:c3:b7:08:0e:c3:5a:08:58:
         61:48:81:44:0b:8c:d1:1f:38:36:43:37:45:63:5e:05:d3:5e:
         c4:7c:65:b0:43:8c:7d:79:d7:49:e8:3e:61:ad:8d:69:8a:25:
         62:73:ea:53:5a:bd:3c:03:3e:e4:95:cd:81:ec:74:eb:3f:6a:
         d3:21:1d:0f:e3:36:fd:ce:52:d4:31:fd:a1:4b:ff:a0:bc:95:
         bb:e4:53:e7:4e:0c:95:a7:4a:86:7f:4b:8c:25:26:98:26:97:
         17:0a:ad:2b:41:d8:6f:9d:c4:e5:5e:ee:c4:bc:f3:cb:6e:1f:
         4c:9b:19:ba:c8:69:80:98:d1:71:5a:39:23:15:10:90:d2:17:
         e4:50:03:18:fb:13:5f:2b:00:c4:3c:b2:37:f5:81:75:e2:42:
         b7:63:3f:93:3f:ee:2f:62:7a:7f:d2:fa:83:d2:76:f4:8c:fb:
         ec:44:bc:35:43:0c:55:5a:b8:9e:3f:6e:20:f0:55:74:93:96:
         10:1b:67:c7:05:77:82:e3:ba:d6:b8:cc:75:ed:aa:3f:12:71:
         56:5e:49:14:eb:11:89:ec:6c:20:67:70:47:e4:0c:86:7c:14:
         bc:32:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:07:16 2026 by rpki-client