Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa
File:                     090d7b9a-cfa4-38dc-90ad-396577649ccd.roa (raw, json)
Hash identifier:          Akl3xt2HAnEA5s0OZMDV77TTggvR+zl6RaISMas2AWk=
Subject key identifier:   20:ED:3E:28:8E:E9:F4:0F:CE:00:EF:2E:87:0D:16:8D:6D:DF:A8:85
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D733941584F6CAB3558C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        70.41.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:73:39:41:58:4f:6c:ab:35:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=27c70feb-3fa0-46ec-825e-cebc9e330ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:59:77:f1:2b:8c:2b:19:81:75:2c:23:c0:
                    f0:00:cf:f5:42:9a:bb:00:4e:de:86:db:51:a4:0c:
                    ce:e0:40:40:63:ec:7d:8a:e4:70:dd:0a:50:9f:51:
                    5f:0b:41:66:aa:19:72:0a:95:71:c4:5f:63:02:06:
                    2d:69:a1:29:64:b2:8f:8b:f6:18:4c:97:bf:81:8e:
                    3b:7e:7c:c2:61:7e:96:92:0f:b7:b3:b7:27:90:63:
                    6b:86:64:ff:2b:28:cb:f5:1d:d6:09:41:c2:c0:d7:
                    f9:23:d1:93:ab:18:32:69:84:fe:96:3e:74:14:12:
                    2b:ae:70:fa:2d:c0:0d:f8:f6:85:50:14:33:85:2f:
                    aa:ea:e9:17:83:1c:49:e2:6a:9c:84:f0:7a:c5:72:
                    15:15:25:c8:a6:1f:05:37:f1:58:3c:b6:ec:34:19:
                    82:e4:9d:4f:30:7b:44:3d:dc:5f:97:7c:20:3a:7e:
                    43:0e:0b:87:b6:cf:8a:4e:da:db:88:78:56:57:8e:
                    94:6c:81:11:66:dd:5d:26:0f:e7:76:9d:3a:14:f1:
                    6c:4d:9b:6d:91:a7:0b:d6:10:3f:ce:86:34:5a:93:
                    6e:f8:f1:04:31:29:d5:d6:c6:e6:84:8d:73:23:e1:
                    41:e7:1c:56:d2:af:5b:f3:ae:fb:16:4f:ec:80:d7:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:3E:28:8E:E9:F4:0F:CE:00:EF:2E:87:0D:16:8D:6D:DF:A8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:95:55:f1:6c:52:14:9f:71:38:56:3f:78:04:51:aa:ee:
         e6:fd:3f:c9:b7:f8:06:16:e9:74:3e:e9:d8:fc:04:f5:4f:3d:
         0d:c8:07:d0:49:0c:0d:e3:ad:e2:ed:4b:9c:fb:3a:25:25:03:
         b8:e8:8e:26:da:bb:84:34:ab:6a:82:fc:5f:e8:7a:d4:96:59:
         6b:43:af:ea:79:94:21:0b:89:d4:b6:31:9f:f7:44:29:43:5d:
         30:47:d4:96:93:bc:d0:a7:1f:21:59:49:a0:f1:5c:5c:19:8a:
         05:8a:41:6f:ed:85:bf:29:7e:c2:27:f2:0f:9b:3d:94:4f:5f:
         03:ba:a6:07:3b:ca:21:9d:bf:27:92:1e:29:10:b2:0d:43:7f:
         3a:86:e6:38:86:e1:b4:51:84:86:15:df:26:cf:94:94:95:f9:
         9b:42:af:2d:74:38:de:b8:d9:13:ed:39:22:c6:1f:6c:a2:2c:
         03:18:68:74:81:b6:15:a9:f0:d0:b5:61:f2:af:d7:ed:43:3d:
         ae:dc:78:91:44:46:70:34:ae:5a:c9:8a:09:24:5f:f0:41:e1:
         3e:0c:8b:fd:36:1a:f4:e9:3a:5c:89:44:0b:f3:2b:5e:22:45:
         b7:f6:0c:68:a0:73:5e:b9:3c:d4:53:8b:5e:9c:a0:74:2f:99:
         38:82:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:04:12 2026 by rpki-client