Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/63079e98-732e-3e4a-8c31-91a6815f0f68.roa
File:                     63079e98-732e-3e4a-8c31-91a6815f0f68.roa (raw, json)
Hash identifier:          tQIR2aVLs+tjr4K9/uRvg/wx5OnlJnqemRgqkdytIOM=
Subject key identifier:   6A:69:4D:A7:19:89:09:58:B4:04:4F:45:3D:32:AD:91:16:DB:D7:8A
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584E82C4DB4052817B8E407345E0
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/63079e98-732e-3e4a-8c31-91a6815f0f68.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     16504
IP address blocks:        156.70.128.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:db:40:52:81:7b:8e:40:73:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=d811b125-94e5-491c-843f-ce4edb5e76ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:8f:d4:eb:ff:85:01:e6:f6:a7:6d:16:68:
                    ef:99:b0:9d:63:af:bd:99:00:14:25:8f:fb:30:77:
                    f3:ab:30:84:20:82:d6:92:af:4c:17:89:07:65:82:
                    47:42:ef:7f:02:ab:ad:19:ce:32:6c:34:c4:24:fd:
                    b3:c8:90:4a:19:48:a1:18:0f:c9:cf:7c:9e:af:52:
                    47:02:02:67:44:b4:6e:cb:b3:29:bd:75:be:a3:29:
                    6a:36:28:59:04:e2:0c:35:4e:ba:88:2a:06:22:fa:
                    03:5d:99:1c:1c:af:7e:21:1b:0b:d7:89:13:b4:f5:
                    db:d7:a6:da:37:82:08:8a:c8:6e:ed:ff:67:ca:22:
                    09:61:d8:72:f2:09:1c:41:cb:3b:53:cb:5f:8f:be:
                    f4:e5:fa:d3:c2:2d:61:25:97:9a:c2:50:57:bf:22:
                    22:34:77:60:a7:4a:46:1d:dd:34:91:1e:60:a6:42:
                    3d:11:18:35:2d:36:2a:0c:62:5d:3f:bf:8a:99:8f:
                    39:7b:52:35:b9:03:1f:06:46:54:9c:f1:1a:4b:7f:
                    0c:7a:1a:fe:41:c3:27:e0:2d:d7:6a:12:07:19:fe:
                    73:e9:10:69:fb:42:b7:8e:e0:a1:91:41:de:c4:6b:
                    e5:19:7a:92:a2:c9:b6:82:14:b5:58:80:3c:60:33:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:69:4D:A7:19:89:09:58:B4:04:4F:45:3D:32:AD:91:16:DB:D7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/63079e98-732e-3e4a-8c31-91a6815f0f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:dc:b0:72:cb:15:f4:75:27:71:e3:50:71:21:5b:af:08:
         31:aa:e7:83:47:d0:1c:81:e5:db:fd:ba:c1:f1:a1:5a:c7:cb:
         b9:2a:3f:d7:7e:c7:be:16:22:d1:13:17:f4:e7:49:a1:fb:3d:
         69:ba:bb:cb:a8:d4:95:62:65:4b:38:29:ae:6b:94:3b:20:98:
         74:dc:92:c3:da:fa:0d:44:41:2d:4f:9b:6a:4c:88:bc:ba:7a:
         82:2f:e6:02:68:6b:b1:69:52:92:5b:18:dc:a1:d3:fa:70:f4:
         3a:18:8c:05:c1:68:04:09:6d:bd:32:67:6c:79:3c:ee:ad:f2:
         cc:9e:e7:40:d0:e5:97:39:64:ab:af:17:0c:a0:e9:06:28:3b:
         1b:67:05:eb:df:5b:0a:06:de:30:bf:7c:83:47:b7:18:1a:ce:
         1a:f0:ba:c7:71:78:da:90:dd:ad:cf:55:e9:aa:11:58:b8:fa:
         28:be:8b:71:db:41:3d:58:54:3e:4e:e5:75:f6:83:fe:09:10:
         c9:d7:b2:65:1f:6a:05:c4:b2:e4:5f:ae:1d:32:b6:52:d9:66:
         bc:05:50:c6:c9:dc:d8:e5:3e:36:7c:94:2d:c5:90:d6:4d:ce:
         7d:a4:ab:78:b7:89:c3:5f:f9:50:6f:3a:dc:fb:9c:cc:1b:ea:
         67:f5:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:54 2026 by rpki-client