Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
File:                     31a7d06e-f401-374d-a3e0-58275ee35373.roa (raw, json)
Hash identifier:          FsCYq0+9YdS6AaBItKw9pz/JZ0s2jzAtATOlFz9lRZg=
Subject key identifier:   ED:1E:F5:EC:A4:41:B5:69:8D:C3:9A:7E:5E:6A:3E:E6:E7:57:7C:ED
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584FA85DCF69028CAD92E6724600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     855
IP address blocks:        70.31.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5d:cf:69:02:8c:ad:92:e6:72:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=90273b58-3e8b-438c-bf32-a67cd26ac6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:05:4a:c3:7f:24:43:13:4c:73:d9:3f:a3:68:
                    ef:bd:df:fe:22:97:05:c1:d1:79:b3:4c:40:e3:91:
                    9f:ec:f2:52:cf:e1:5e:34:62:6f:cd:2d:ab:0f:97:
                    bd:c3:30:4b:f7:dc:e3:ea:b2:84:77:65:64:41:3b:
                    11:74:5d:01:5b:54:8e:c6:55:07:ff:20:4b:9e:65:
                    92:1c:15:d6:e1:17:4e:82:d0:0e:79:81:9d:3b:8a:
                    0b:44:cc:a7:8f:fd:9f:c9:a9:53:53:7b:e0:91:0f:
                    a2:d7:18:6f:78:ba:98:44:77:7e:45:df:44:19:84:
                    d1:74:9f:ee:51:aa:4c:78:97:09:a0:72:0c:29:08:
                    00:8c:3b:46:e6:b3:b0:4e:ef:67:c5:30:10:59:b5:
                    a5:49:0d:df:fa:dd:ff:3e:d9:6f:0f:a2:5d:c0:b5:
                    73:8a:32:5e:ac:39:f4:3e:83:e9:57:10:45:08:9b:
                    a9:51:2a:4f:b9:9d:9f:cf:ee:14:3e:6d:d4:79:66:
                    ab:bb:43:a0:2b:0f:8c:a9:8a:6f:29:53:89:22:0d:
                    46:bd:79:c6:4b:9d:8f:e8:76:2e:2c:b2:9e:e5:16:
                    39:9e:29:d3:25:a6:98:40:1a:67:89:92:61:46:4f:
                    f8:d7:6a:9c:58:64:a5:d3:e0:ed:44:30:6b:e4:41:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:F5:EC:A4:41:B5:69:8D:C3:9A:7E:5E:6A:3E:E6:E7:57:7C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.31.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:16:0a:d2:90:f4:25:bb:b4:62:97:de:c1:a6:5f:45:3e:
         39:8b:8f:6c:3d:0c:50:1a:b0:f2:e3:09:0b:a2:90:af:fd:74:
         86:be:09:a7:51:12:6a:1c:e5:16:9a:ed:b4:7f:a2:e8:47:77:
         a1:c6:c2:26:01:e4:d4:04:b1:9c:0d:57:73:f7:bf:54:7b:51:
         0e:f9:5d:e3:a2:f8:fe:a7:3e:44:9a:bd:84:76:4b:ac:fc:1c:
         e4:d8:c0:4b:28:17:31:65:53:e3:0e:dd:a0:5d:8b:16:8c:cd:
         95:46:3c:fd:d3:1c:69:09:52:ce:70:d9:34:fe:7a:a1:8b:75:
         53:f4:bc:f9:68:e7:45:91:e1:72:15:bd:fb:4c:9d:3d:6d:95:
         5a:49:d0:7d:c3:13:49:3b:79:ad:23:7c:9e:a7:a3:1d:e3:e5:
         d7:6e:34:19:2a:d0:87:0d:33:80:92:cd:d2:4f:a1:d4:4b:db:
         4c:aa:e3:46:c6:84:c4:05:97:9e:53:74:47:59:26:8c:b4:3b:
         b8:a3:ca:64:57:b4:4e:29:eb:d3:91:f6:55:8e:38:2b:4a:8c:
         64:ff:d8:07:c8:e6:b1:7e:20:6c:f2:67:6e:9b:22:93:6f:cc:
         3b:22:eb:7d:f0:d1:06:96:f6:b3:d9:f7:81:ad:c4:a3:44:4d:
         d6:ac:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:08:47 2026 by rpki-client