Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/9ca14035-c867-351e-8ee3-1a98d91b7230.roa
File:                     9ca14035-c867-351e-8ee3-1a98d91b7230.roa (raw, json)
Hash identifier:          D+iEsLnmDTwMfmzs16yWZbdkeLEZFy5CREybS3Qt2Ac=
Subject key identifier:   67:64:7D:48:87:0B:8F:7F:4F:D5:D1:0D:5F:4C:7B:57:49:48:7E:2B
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584E6574ADEFF24E95308744C500
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/9ca14035-c867-351e-8ee3-1a98d91b7230.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     44486
IP address blocks:        70.40.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:ad:ef:f2:4e:95:30:87:44:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=a936ac77-bb4b-4131-8a55-39a89de3b380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:52:25:7c:22:6b:d0:a9:90:f1:3d:f8:53:
                    63:9a:8b:3d:fc:b6:78:4e:46:6c:7c:88:53:64:7a:
                    eb:36:bc:bc:4d:44:82:13:be:82:7e:41:25:fd:8d:
                    20:6d:cd:98:c8:dd:72:f6:a5:38:7d:7a:60:4d:92:
                    7f:09:fe:7d:12:e2:76:6d:c1:33:fa:5c:e2:19:56:
                    ff:3a:32:9c:61:50:62:46:61:37:de:50:21:65:c8:
                    58:55:88:89:d7:ca:4b:c2:d9:93:82:f3:c0:6c:31:
                    bd:7f:69:85:8b:6d:7d:f1:8e:0e:1e:18:05:8c:a3:
                    29:e2:a7:19:44:d4:c2:10:d4:a4:dd:7e:7c:5d:63:
                    be:f0:02:58:ce:37:64:d5:65:79:c6:10:21:8f:fb:
                    26:cf:d4:a7:95:a7:5f:dc:d9:c1:92:44:18:b5:63:
                    03:88:de:d0:36:da:d0:64:3d:36:50:9f:c4:5e:9d:
                    90:45:dd:f1:71:b0:4a:b1:bb:60:46:70:06:25:cb:
                    9a:52:db:9b:5c:cd:2d:06:91:5d:cd:b4:a1:59:bc:
                    31:16:e6:41:b1:5c:b3:79:b8:9f:ad:b5:81:fc:9c:
                    66:5c:b0:92:90:ec:86:07:f7:75:1f:23:5a:69:b3:
                    93:4e:e1:0a:cf:cb:5c:79:f1:00:cb:c9:1d:70:f3:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:64:7D:48:87:0B:8F:7F:4F:D5:D1:0D:5F:4C:7B:57:49:48:7E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/9ca14035-c867-351e-8ee3-1a98d91b7230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3d:29:0a:74:75:ad:33:99:11:81:06:51:67:fa:6d:14:5e:
         b6:f2:8f:e6:e8:49:38:46:4e:3c:da:ba:63:97:17:c9:b7:74:
         fc:08:a7:f7:ed:c5:49:b7:43:03:9a:c1:85:bc:1c:68:7e:1a:
         46:40:fb:01:cb:62:72:6c:da:42:38:67:41:4d:71:3d:30:e3:
         2a:3a:ff:16:48:4f:0f:4e:c9:8b:c4:47:9a:b7:31:59:eb:78:
         53:b6:d5:28:6a:e8:ee:ae:26:64:bb:ac:50:5b:23:b3:ed:49:
         a0:d7:22:04:d5:af:04:f7:a9:88:c8:e0:e9:46:40:00:fd:9c:
         f8:8e:54:0c:22:32:58:f8:cc:4c:64:28:41:47:eb:9d:55:36:
         41:e7:21:e2:8c:e7:90:da:bc:02:e3:a1:7b:7f:35:61:56:5f:
         7e:6b:2e:f9:42:ed:d0:cd:52:d5:b4:df:38:d5:55:41:89:a3:
         6d:d7:70:b5:83:c0:be:27:0a:8b:f7:2e:5f:04:3e:19:98:2b:
         03:a7:06:4d:8c:13:98:5e:fc:a4:3c:75:9f:04:db:49:ff:80:
         d0:34:de:7f:84:c5:2f:94:8e:51:dc:a9:b9:00:e2:90:84:bd:
         6f:74:e9:52:b6:bc:0f:83:bc:4a:a7:44:02:22:24:7c:eb:79:
         5c:bb:ff:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:20:47 2026 by rpki-client