Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/eb114035-426b-3b76-91f9-1407d02974e0.roa
File:                     eb114035-426b-3b76-91f9-1407d02974e0.roa (raw, json)
Hash identifier:          QoOvqTAFzBJNaDUzj/r1Q5f+/rCyvAj6Ulnndi+kPXc=
Subject key identifier:   D6:CF:43:9C:E9:A5:5C:F3:B0:21:9E:64:0B:67:A0:F5:57:E2:36:48
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584F4988A84586FCBAF524800800
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/eb114035-426b-3b76-91f9-1407d02974e0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7346
IP address blocks:        70.39.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:a8:45:86:fc:ba:f5:24:80:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b6289971-77a5-4c58-966b-b94c709d9f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:43:27:f3:71:a9:20:ee:11:38:eb:c6:73:
                    be:d6:25:7b:da:1c:f7:f0:72:2f:60:0f:79:b7:83:
                    08:25:49:26:7d:02:1e:1c:5a:b8:98:45:c3:80:e5:
                    b3:30:2d:d7:94:5b:f0:5d:a5:3c:91:ba:bf:7a:7f:
                    ba:c8:8f:83:71:67:02:80:bf:2b:4b:c0:cb:81:2a:
                    8d:16:8e:aa:ee:73:71:89:0e:fb:e0:68:56:d3:f2:
                    9d:fe:47:7e:31:f8:91:99:63:ff:f6:24:0b:51:f1:
                    6f:f2:ac:20:0b:28:b0:b9:a0:7c:ff:cc:ce:b6:6a:
                    4e:59:5e:a5:2d:76:5b:9a:1d:4a:9d:6b:c8:66:d7:
                    44:31:87:95:31:75:a4:b0:2f:a4:af:7c:dc:a3:1c:
                    1b:2d:76:2d:23:9c:77:19:0e:17:c7:98:bd:a7:14:
                    48:a2:48:3d:f4:51:41:2d:10:2a:7a:bc:48:f0:2c:
                    6f:53:81:a9:63:df:4e:ec:54:39:e3:75:81:0a:bf:
                    d8:29:d0:4e:7c:39:6d:e7:eb:68:2a:63:12:14:a0:
                    c4:f4:d3:d6:a5:5a:5e:92:f8:ee:cd:fc:a5:40:de:
                    8f:8d:87:05:c3:6e:20:7a:f0:10:39:d3:3f:06:de:
                    a6:9a:2f:f7:e3:f1:9d:27:dc:31:7a:bc:97:aa:16:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CF:43:9C:E9:A5:5C:F3:B0:21:9E:64:0B:67:A0:F5:57:E2:36:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/eb114035-426b-3b76-91f9-1407d02974e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:79:39:6f:1b:b0:17:92:46:1d:82:1f:2f:a0:bc:d2:ed:da:
         bd:43:a0:4c:c9:a4:9d:49:19:80:d5:81:b2:35:ac:3a:98:f5:
         ec:9f:39:de:9c:2c:26:a9:e5:52:2d:f9:bc:c7:f5:33:8c:e9:
         0d:33:c0:ad:2f:d9:3c:f9:8f:78:2b:4d:25:c6:8c:be:d9:a9:
         26:2e:25:b9:ff:79:56:fc:99:47:c3:09:f5:5c:75:26:ec:c7:
         c4:6c:03:69:80:ca:73:39:90:ed:1c:4d:9e:b3:3d:1e:87:fb:
         93:42:b5:98:65:c9:17:5e:f3:b3:71:c3:e7:84:e3:d1:1b:2b:
         35:28:8c:bb:cf:b5:ea:c4:2a:76:dd:bc:90:fb:3b:5f:2f:65:
         bb:86:6b:54:35:98:0a:be:45:3e:51:4f:39:01:0a:9d:cf:aa:
         0c:06:5f:54:b1:67:f8:48:70:3c:fc:87:2a:b8:fe:cc:a5:42:
         c4:7a:dc:0f:a3:c3:74:02:b1:e2:e1:57:a6:4e:68:b4:2a:f8:
         22:0b:e2:b3:1d:a9:1b:82:db:d7:4e:57:d4:2d:a3:97:35:25:
         e0:1e:44:13:f5:90:64:0a:35:21:5a:cb:f1:3c:e5:7f:93:74:
         61:2e:70:24:b2:46:47:bd:6e:be:1f:85:82:28:86:e8:2d:8f:
         0f:42:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:38:22 2026 by rpki-client