Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
File:                     70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa (raw, json)
Hash identifier:          2vpSMqfOuNCz0WKc0rWGX/UiUO6mg+pJC9RoN7ZaJqU=
Subject key identifier:   F1:34:EC:B3:0E:4D:6F:C2:2C:9D:3C:B0:F9:39:CA:B1:66:90:F3:3E
Certificate issuer:       /CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
Certificate serial:       010D0C9F4328584EE38CA7C2CB75454DF4074880
Authority key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     400633
IP address blocks:        23.226.160.0/20 maxlen: 24
                          64.190.44.0/22 maxlen: 24
                          168.100.48.0/20 maxlen: 24
                          216.246.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a7:c2:cb:75:45:4d:f4:07:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=155e4e4c-c3a9-48fd-ba55-f540db6b6c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:de:3e:13:d4:21:51:f1:6d:56:de:84:bc:
                    13:0b:8a:b7:70:37:c2:91:16:d1:15:29:2f:e4:0b:
                    62:bd:4c:9b:f3:b5:fa:83:0c:c1:33:58:dd:e2:5d:
                    a8:24:09:30:8b:f9:ad:48:f0:56:3d:2e:31:7a:71:
                    09:2c:ce:9a:4d:62:42:54:c5:cd:6d:9f:b7:08:51:
                    06:fc:c1:e9:c6:3c:4e:60:bf:c0:41:44:60:62:71:
                    3b:fa:42:bf:bf:80:48:85:22:ff:17:9b:15:7b:a4:
                    54:97:b2:de:44:e3:79:ca:ba:3f:61:20:ee:44:ab:
                    e0:33:70:ef:a8:2d:dd:10:17:b4:4e:14:6e:da:56:
                    21:c1:04:70:b6:a7:53:4a:75:57:41:71:88:f4:ad:
                    c7:dc:f1:cd:41:ff:52:b4:93:83:11:84:59:e3:3c:
                    a7:e6:23:88:2b:d8:cc:be:e5:54:5d:51:a4:66:e5:
                    69:f4:92:99:f1:f6:ea:0d:b0:74:ef:8f:5f:74:d5:
                    b2:0e:06:c3:12:71:d8:2e:73:e8:87:46:16:12:9c:
                    eb:a0:c5:b3:e6:38:14:72:f2:61:ea:8c:ca:28:72:
                    d5:09:93:3d:76:25:92:4d:b3:cd:8c:ed:57:c8:ba:
                    05:1c:0d:ff:a1:6a:ce:62:19:53:e0:8d:ec:38:d4:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:EC:B3:0E:4D:6F:C2:2C:9D:3C:B0:F9:39:CA:B1:66:90:F3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/70c4a7e8-a06e-3c1e-9364-3fe51647ef0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.160.0/20
                  64.190.44.0/22
                  168.100.48.0/20
                  216.246.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:14:8c:dd:fa:4b:75:71:21:fa:16:c7:29:76:28:f7:f5:a3:
         72:a6:8f:ba:3d:a5:56:10:ff:ab:d4:e7:4d:88:2b:72:87:58:
         f3:55:a6:93:c3:5a:7b:eb:60:09:97:93:ba:03:40:53:a2:1f:
         20:97:4b:44:e2:a4:76:15:ee:b3:95:7a:1d:d8:ec:26:df:7a:
         99:f4:e5:85:ec:d8:e6:4b:6d:0b:11:33:56:eb:c0:97:34:0e:
         19:7e:ea:d8:27:18:aa:dc:7b:0e:fd:28:d2:60:ae:9b:3c:f1:
         b5:18:95:20:01:31:d1:5a:11:8f:81:bd:4e:57:85:a3:ce:f9:
         bf:93:33:71:36:36:d3:f8:b9:3f:1c:70:f4:e9:8e:db:aa:a9:
         1a:a8:d2:eb:95:c0:88:de:8c:9e:8e:6a:a0:a5:d8:89:bf:7c:
         c0:4f:d3:14:3e:34:29:61:4e:df:91:d7:b2:b3:c8:7e:92:13:
         ef:10:c8:0e:45:0f:59:79:51:53:63:0b:be:39:1b:28:de:0b:
         47:89:fe:5e:9e:17:17:ff:cf:ae:aa:71:17:c6:4d:5d:ff:83:
         33:e6:16:40:0c:dd:a0:90:38:7c:4c:0d:cf:5d:b8:4c:fc:ed:
         0c:57:01:e0:5c:84:31:9c:ce:9b:a4:29:cb:19:96:dc:05:23:
         e4:dd:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:28:08 2026 by rpki-client