Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa
File:                     0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa (raw, json)
Hash identifier:          Pk933uErPBqFpIcDUJlEA846yihMFhMF1caR9gfxer0=
Subject key identifier:   D0:2B:38:9C:90:65:40:EB:81:24:68:C7:02:90:75:62:86:6F:49:C2
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DA6B027A29C15C19DAE48EF40
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        70.32.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:27:a2:9c:15:c1:9d:ae:48:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=1a5623bb-0330-4b6f-8884-277baf22df32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:32:ef:fa:7d:78:07:fe:67:98:da:77:fb:
                    09:9f:8e:36:79:58:e3:3a:bf:df:3e:1c:57:15:64:
                    b6:38:93:fe:a6:cd:f6:ab:cc:04:42:bb:3b:4c:9d:
                    75:ae:e2:d4:47:c7:c7:e2:de:3c:d2:9b:63:d1:61:
                    cf:a6:e8:94:b5:0f:f4:01:71:41:b2:cc:0b:18:79:
                    73:59:c3:0c:cb:fc:a1:8b:c4:f2:0e:47:dc:7b:30:
                    2b:de:0b:5b:a3:02:02:70:0a:de:ce:fe:d4:a5:59:
                    dc:4e:67:ae:42:e9:14:4b:8d:3a:15:df:63:55:d4:
                    67:e8:1a:37:37:3b:55:75:f1:ed:ff:eb:c6:c0:29:
                    8c:13:96:da:d6:1c:f6:75:eb:c2:a2:9c:0e:d4:fe:
                    f1:70:5a:a1:73:ee:67:df:0e:cf:e8:8f:40:99:f2:
                    5e:12:8b:ec:3c:78:f0:22:91:90:75:a7:96:e3:5d:
                    d7:59:19:b2:8d:82:cc:fd:50:96:64:8e:47:03:1c:
                    38:c8:04:08:93:2a:72:ba:9c:68:13:04:28:d0:52:
                    ff:d5:1e:00:60:e1:de:f1:ad:ba:51:18:b4:2d:92:
                    67:7a:58:7b:b0:8c:ea:7a:06:0f:9d:b8:c6:ea:a1:
                    66:d2:8a:dc:29:80:67:03:46:1b:1a:b4:1a:c3:66:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:38:9C:90:65:40:EB:81:24:68:C7:02:90:75:62:86:6F:49:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:6f:f9:41:ff:8f:a5:32:be:d9:36:bd:7e:01:e8:17:ee:
         94:5e:96:be:5b:70:bf:3d:23:5b:33:9f:b6:1f:b6:f2:66:1f:
         0d:ce:b0:86:71:25:f9:1f:9b:99:f4:3a:04:fe:00:ac:e4:b1:
         5b:c2:02:22:c4:8c:0e:80:a5:e9:5b:84:29:6c:1b:fa:a2:ea:
         6f:f0:5e:64:8a:35:88:5a:1a:f4:ef:09:b8:24:eb:23:93:40:
         50:de:76:96:b8:eb:62:47:ae:3f:bb:b6:58:d9:90:16:f4:5c:
         7e:ec:5b:3d:66:6a:0a:1a:8c:ce:cb:a8:91:b2:f8:4d:e2:85:
         c1:2e:bc:ec:6d:6d:3d:25:58:1a:5d:bc:f5:5f:8a:0b:b9:26:
         4c:eb:77:7b:37:f9:1f:49:20:86:e9:21:69:21:d9:a7:72:7b:
         f9:74:13:d3:8e:6b:0d:91:b4:ea:c8:da:12:d0:64:d9:db:de:
         b3:80:e7:7f:5c:23:c9:70:17:07:74:33:cb:93:42:1f:fc:df:
         fd:c3:0c:6a:d0:b5:33:d6:b6:42:26:05:60:0c:78:a0:b9:db:
         61:22:4d:4e:10:ca:f4:31:e7:eb:88:25:2b:96:22:ac:1a:55:
         2d:0e:75:0c:85:cc:2c:1b:2d:cc:97:57:68:4e:02:33:8e:ab:
         8a:98:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:48 2026 by rpki-client