Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
File:                     ea9b1f11-cc10-3201-8210-2b8888464357.roa (raw, json)
Hash identifier:          gFoAN8nTd/PGfT8Jjq7PZsw+e1kBN/UrVLdqspgyuSU=
Subject key identifier:   A1:27:25:F6:25:2C:4C:40:DD:E1:A4:FC:4D:AB:54:75:F1:9E:C3:6F
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F4328584E842A3E4A895FECA20264DC40
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     32034
IP address blocks:        70.35.146.0/24 maxlen: 24
                          70.35.147.0/24 maxlen: 24
                          70.35.148.0/24 maxlen: 24
                          70.35.149.0/24 maxlen: 24
                          70.35.150.0/24 maxlen: 24
                          70.35.151.0/24 maxlen: 24
                          70.35.158.0/24 maxlen: 24
                          204.14.40.0/24 maxlen: 24
                          204.14.41.0/24 maxlen: 24
                          204.14.42.0/24 maxlen: 24
                          204.14.43.0/24 maxlen: 24
                          204.14.44.0/24 maxlen: 24
                          204.14.45.0/24 maxlen: 24
                          204.14.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:3e:4a:89:5f:ec:a2:02:64:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=fe435c49-40c5-413f-9ce5-39b14bf29665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:d3:a1:76:ae:b3:f3:3a:b3:4a:76:28:10:
                    01:b3:d4:81:7c:b6:62:d1:2c:f1:21:d1:95:97:26:
                    8c:c7:bb:0e:a8:59:d4:6c:cb:fc:00:ba:6e:fd:a4:
                    14:f8:e8:61:19:ae:82:fc:15:b5:f3:f3:9a:93:70:
                    71:c1:06:13:c6:00:89:a3:7a:4b:79:e5:9e:98:b7:
                    77:c2:c6:b6:ff:69:12:7b:d6:e3:c1:a7:b7:07:f3:
                    f1:63:f9:ec:d6:02:df:32:71:4f:18:0a:9f:4f:97:
                    79:df:e2:4e:13:58:ed:98:21:ec:d5:23:66:22:a9:
                    e9:46:50:46:1c:10:6f:a8:8e:66:a7:f7:a3:99:28:
                    d0:79:7a:06:54:54:1d:a6:b8:ea:f6:c9:26:d2:fb:
                    ba:6f:8a:1b:4c:58:31:cb:73:5a:dc:6e:18:9c:57:
                    18:28:ce:04:68:16:82:f5:79:17:86:fd:9f:6c:6f:
                    2b:69:18:bd:47:dd:ae:95:71:68:f6:b2:a2:6f:60:
                    6c:94:60:e6:aa:3a:9a:fc:93:27:29:c0:e6:21:b7:
                    fb:78:ac:f6:51:7b:d8:e6:0b:e7:64:05:71:06:0c:
                    26:e2:a6:8d:0e:78:a0:67:25:5e:9f:7c:93:54:af:
                    9e:03:a3:8a:bc:48:5e:29:00:3a:59:1d:7d:f6:0b:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:27:25:F6:25:2C:4C:40:DD:E1:A4:FC:4D:AB:54:75:F1:9E:C3:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/ea9b1f11-cc10-3201-8210-2b8888464357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.146.0-70.35.151.255
                  70.35.158.0/24
                  204.14.40.0-204.14.46.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:11:2c:86:db:dd:6b:65:e4:5f:ad:ae:c7:d5:72:6a:31:af:
         f7:5e:46:5a:30:67:43:08:dd:be:5e:c3:98:7b:fd:90:65:ce:
         f2:bb:83:aa:54:74:c0:e8:77:57:29:da:ed:3a:12:51:a8:1d:
         23:df:0d:2e:b7:9e:6c:e3:ca:35:2d:f1:5a:b6:49:b7:37:74:
         b2:e1:8b:ae:cf:d0:1e:84:19:3e:72:2f:92:10:72:66:cb:78:
         54:2f:1c:24:38:14:12:76:f7:8c:17:d6:3f:42:a2:b5:30:74:
         b7:01:a4:3d:57:46:e7:a5:e3:bc:49:3c:85:a2:bc:83:76:1d:
         1d:51:68:3e:87:29:89:53:b4:57:6c:da:ef:69:28:d7:28:1f:
         d8:9a:ff:b0:c5:a2:f7:9d:7a:bc:25:38:97:e3:66:17:ad:c5:
         a2:8a:03:e0:1b:48:ec:0e:b1:8c:62:d3:7d:d0:63:c1:15:75:
         72:d3:4a:76:18:e7:29:ea:e0:af:19:7f:1e:51:5c:2c:2d:c2:
         31:52:6c:c8:55:38:b9:aa:eb:2f:29:f1:7d:80:db:b2:04:b5:
         69:3c:4e:86:54:2b:e4:43:ae:b4:b2:97:b9:0b:a2:f1:60:51:
         8c:3f:59:b5:18:81:2c:b4:9d:7c:a4:3d:b8:e9:cf:e4:39:73:
         dd:50:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:14:44 2026 by rpki-client