Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/72539783-dbcc-33ad-95ec-ac79c4d80160.roa
File:                     72539783-dbcc-33ad-95ec-ac79c4d80160.roa (raw, json)
Hash identifier:          /AW81B7kmnC5vGcjymo+ZtIEOktPjxfDzODPp9J1xsU=
Subject key identifier:   48:85:7C:64:AC:AA:6C:7F:BF:28:24:11:2B:BE:A3:8E:D8:55:18:C0
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584F49885CD160A089AE2D0EB900
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/72539783-dbcc-33ad-95ec-ac79c4d80160.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4922
IP address blocks:        70.32.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:5c:d1:60:a0:89:ae:2d:0e:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=437c067c-bc97-480a-b220-dc98804db92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:d5:12:a8:53:01:9b:4a:8f:aa:aa:c8:f0:
                    ab:39:4d:d8:fe:44:30:b0:cc:8a:d6:9f:f9:fc:81:
                    66:59:6e:c0:6d:d7:59:55:ce:f2:b7:a3:b3:f3:35:
                    16:58:c0:78:b0:7e:08:c4:63:f8:a6:08:8e:f6:58:
                    3d:32:06:02:e8:d4:a6:0b:94:8a:d0:25:46:fb:56:
                    f2:25:0b:7e:90:d9:73:19:2b:2e:5c:9a:18:52:41:
                    40:ee:fd:87:43:f0:4b:cc:52:4a:ec:1a:2c:f2:8f:
                    c2:f9:12:df:34:97:25:a8:57:93:9b:1a:19:38:77:
                    2b:86:ae:f9:9f:e5:08:6d:47:13:2d:3c:44:2a:c3:
                    90:ce:c6:e5:d6:5c:86:1f:07:69:52:28:af:fc:2b:
                    8f:83:5f:01:23:52:3f:a6:02:25:ea:d1:3e:99:ac:
                    4a:25:bb:24:50:4e:46:35:c4:0b:fa:1e:76:4e:18:
                    42:de:e1:c5:9d:95:bb:99:71:08:b1:17:f7:8b:69:
                    01:24:9f:2f:72:98:88:73:09:50:a2:ca:e6:2a:c5:
                    3e:4a:52:b0:e4:e7:46:d3:76:6d:5a:c5:50:e3:be:
                    24:68:01:1f:dd:0b:d7:cb:27:cc:cb:59:ad:71:ec:
                    ab:dc:3b:c8:7e:52:a5:7f:c8:a3:c3:f7:7e:6e:d0:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:85:7C:64:AC:AA:6C:7F:BF:28:24:11:2B:BE:A3:8E:D8:55:18:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/72539783-dbcc-33ad-95ec-ac79c4d80160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.194.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:7b:44:a0:e2:08:ce:3d:12:59:f1:69:d1:42:1b:c4:ff:db:
         c3:6b:0b:61:33:0f:15:78:81:4b:8c:6a:86:7e:02:6b:a8:6a:
         d1:10:48:15:8a:3e:5e:b9:f3:87:87:f2:ca:a6:1d:49:89:f2:
         3c:dd:21:be:e4:23:24:4f:0b:bd:ce:9b:40:15:7f:44:16:28:
         88:3d:72:64:c3:1a:e6:a2:2d:19:99:58:64:b0:ac:d2:15:a6:
         37:a9:a7:a6:bb:ea:df:ea:ed:ca:db:0d:36:6b:bf:c1:c3:f7:
         66:b6:71:60:6d:53:83:b0:11:1c:30:3b:58:d1:04:15:9e:3e:
         61:43:42:3f:86:da:c4:cc:1c:f9:54:6e:18:23:fb:2e:b2:be:
         38:46:52:2b:73:9d:e9:f0:82:00:f3:bf:3b:ba:90:82:25:3d:
         85:bd:95:b9:d7:48:30:fa:8f:4b:e3:bc:94:00:76:b7:81:5f:
         da:2b:ae:a7:40:8c:85:a8:04:70:9d:75:7b:bf:22:5f:ec:68:
         e0:e5:2e:52:11:13:c1:ec:c6:9c:c2:01:9f:f2:70:4e:07:a3:
         19:1c:12:f4:fe:3c:fc:99:98:12:a0:c7:54:6e:e4:b7:7c:1e:
         67:97:2f:0b:27:24:24:45:bf:ea:d1:6b:d1:a6:d9:19:fa:b6:
         0b:f9:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:08 2026 by rpki-client