Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/d244f692-f934-3cec-8679-564b06334478.roa
File:                     d244f692-f934-3cec-8679-564b06334478.roa (raw, json)
Hash identifier:          wHpantgmIRPMILwqg0UHcCZkQHYrym3FQjaaEgeUdKQ=
Subject key identifier:   23:EB:14:E6:13:CB:60:A9:94:B3:AD:01:D8:23:21:35:06:E4:4C:65
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584E78FF7C12CA0243E9F2F19500
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/d244f692-f934-3cec-8679-564b06334478.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     19137
IP address blocks:        208.70.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7c:12:ca:02:43:e9:f2:f1:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=cf4d24c3-126a-45ef-85da-98b5d30b9ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:fb:fb:79:21:d4:ca:c1:96:60:e8:06:34:
                    1b:9c:5a:ee:93:c1:41:80:ba:b9:d1:b4:9d:f0:f2:
                    83:10:c3:91:b2:9a:92:00:5d:b2:18:d9:3f:d9:2e:
                    e5:27:63:fb:20:ea:cc:76:61:f8:12:53:8f:91:66:
                    d9:12:4d:78:9e:10:dc:d5:51:50:e2:bd:50:7c:ee:
                    a2:da:e8:0c:ee:c2:74:a2:53:75:be:16:dd:23:6f:
                    ed:f5:52:15:1f:fa:7d:6b:f1:56:ae:e5:df:60:71:
                    f6:7a:2e:7b:57:22:fa:95:51:f9:c6:05:5d:46:4a:
                    18:69:fa:bd:83:73:14:cb:b2:5f:30:4c:4f:13:c9:
                    da:93:2b:97:4a:25:4e:55:a6:c2:f4:e5:c9:ee:b9:
                    19:b3:f1:44:5e:9f:50:a4:e3:55:f8:f5:a8:21:6e:
                    2b:57:ce:e0:00:88:c5:b3:0e:2c:ea:51:c2:08:79:
                    5b:54:5a:72:66:51:10:8e:7f:47:7a:8c:75:43:53:
                    7d:3a:c7:04:91:b2:32:4f:fb:4a:81:0c:37:14:3f:
                    3a:df:ad:2c:e9:e2:b6:60:a6:c4:23:82:e6:b5:e0:
                    01:4b:06:9d:5c:b2:f6:b1:10:8e:85:7f:05:fb:ed:
                    91:ed:7e:86:75:78:f1:76:37:5d:ea:f7:85:04:5e:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EB:14:E6:13:CB:60:A9:94:B3:AD:01:D8:23:21:35:06:E4:4C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/d244f692-f934-3cec-8679-564b06334478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:4d:fe:92:9c:9a:a5:a1:8e:9e:f5:2e:62:aa:8a:c0:07:
         97:b5:a5:f7:be:1d:42:de:13:21:01:9a:c9:3f:ec:7b:c8:1c:
         65:83:58:3e:b8:27:ff:e0:64:b1:35:5e:9b:5f:a8:ad:47:2f:
         39:4c:c2:e6:f4:16:8f:b0:d2:fa:90:d0:cd:ef:ae:aa:a8:89:
         67:96:1f:61:9c:01:21:90:f9:9b:bf:d8:25:5e:33:02:73:7e:
         74:a8:e8:0d:82:ea:e9:76:55:89:6a:a1:83:70:23:1a:2a:b4:
         6a:06:55:95:c4:ee:08:b0:2e:8b:79:ed:dd:fe:57:e8:d7:c4:
         bf:b0:a7:93:e9:7c:7e:27:3c:83:15:ce:7a:25:0f:f6:92:7b:
         9e:44:1a:d5:34:4c:f0:77:a5:4d:19:61:28:76:63:ab:e4:46:
         26:97:24:d0:ab:6f:5e:a4:27:ae:71:79:75:15:5d:e4:fc:3a:
         20:25:83:df:1f:15:e8:22:e7:0c:7d:7a:79:72:b4:7f:a9:ab:
         94:84:0b:f3:50:37:58:b9:07:81:ab:54:c3:e1:57:5a:ef:b9:
         98:30:e0:b9:42:54:3a:ea:68:79:05:71:81:71:5b:d2:c9:05:
         d0:d1:37:20:88:a4:39:64:88:2c:6a:37:0f:19:3a:02:aa:c8:
         1d:b5:bc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:06:35 2026 by rpki-client