Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa
File:                     1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa (raw, json)
Hash identifier:          lzv02fGJw7fxC17wJj+hgdtLIHUPAvBV9JibdDvLuUY=
Subject key identifier:   40:D2:49:A5:2B:B3:8C:75:29:BA:0E:B8:BB:3B:02:44:C4:1F:EC:0B
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E82C4DB03A225549E68256D00
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     394796
IP address blocks:        156.70.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:db:03:a2:25:54:9e:68:25:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=e4cd9bc4-5400-44f9-bbad-753ceae1c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:63:fb:0c:d5:ad:2e:ab:2c:c0:76:57:48:
                    68:ed:d9:a7:5f:99:4a:e0:ab:61:66:5c:4a:36:2b:
                    ad:3e:6e:a6:12:94:0f:6b:d1:7e:e2:e6:c3:69:9d:
                    d5:a1:0d:d9:93:22:ba:49:4b:3c:30:07:4a:85:cb:
                    fd:e4:18:05:40:6a:66:c0:c6:1a:46:5c:d4:dc:bc:
                    88:0a:d4:bb:c4:d3:66:64:b0:99:4e:1f:da:f5:17:
                    56:50:0e:f9:4b:e7:dc:c0:b6:e8:7d:7b:f4:f2:2b:
                    64:2d:45:df:87:0a:eb:ce:9b:eb:14:d6:83:fa:a3:
                    34:83:ef:14:5b:6d:ea:da:4c:98:68:2f:60:e6:17:
                    8e:7d:93:e3:43:06:cb:ca:5f:25:b3:d1:d0:9e:bc:
                    fc:30:e7:50:3f:5f:14:0e:ab:ef:28:de:15:ac:6c:
                    35:b1:fd:01:4c:02:57:70:bf:52:2f:0f:4a:b8:d0:
                    10:8c:5d:b2:4a:50:90:69:52:c8:dc:1c:b6:ec:bf:
                    de:bb:67:9e:04:30:fc:26:c8:b7:6b:eb:29:a9:34:
                    39:87:2a:d5:03:3d:21:8e:b1:eb:b1:25:6d:6d:d1:
                    20:04:d7:9f:41:49:af:0e:52:74:1c:2b:b2:8f:28:
                    42:9b:99:3f:d4:2e:90:bb:47:92:75:52:d1:93:46:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D2:49:A5:2B:B3:8C:75:29:BA:0E:B8:BB:3B:02:44:C4:1F:EC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/1b219a35-80e0-3e65-8d81-6b7639db6ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:17:33:fc:6d:c5:a0:56:89:d1:1f:3f:49:57:c4:28:76:64:
         1e:1c:15:6a:13:32:7f:7c:b1:16:07:6c:d5:d2:c1:96:56:7d:
         7d:d8:e5:c2:8f:4c:fa:61:00:b3:d0:95:31:4a:00:c4:f7:a5:
         48:92:99:65:a1:b8:f0:1d:e6:42:3e:bb:a7:82:86:23:95:2d:
         2d:1e:26:dd:43:e3:ee:ef:1a:a9:22:2c:fd:65:25:7f:79:b3:
         c5:00:78:39:58:4e:40:2c:8c:b3:d8:36:50:86:2c:30:c5:f8:
         bf:0c:ab:45:38:75:dc:fa:30:39:6c:20:52:62:4c:89:0c:15:
         02:4e:d6:cf:32:67:02:fd:76:cf:f1:10:ac:17:da:39:5d:19:
         b5:e3:5c:aa:f9:63:d2:23:0c:a1:d1:e2:41:f5:ef:15:bd:9f:
         5f:1f:92:81:5f:a4:2e:25:60:b9:12:c7:98:92:c3:72:f1:f7:
         c0:a3:15:d2:86:65:4e:21:f3:7f:ff:64:6f:63:98:74:55:4d:
         dc:01:f2:58:68:0e:71:af:83:8b:13:b0:7d:be:54:4b:51:99:
         74:a1:3c:04:0e:42:a5:7d:21:4a:9c:e1:3b:ef:f1:16:ed:f2:
         19:89:f0:a2:28:40:e9:91:81:67:1c:c8:60:0a:ec:2a:af:73:
         5e:3c:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:16 2026 by rpki-client