Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa
File:                     09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa (raw, json)
Hash identifier:          oe86FbjgqcYxjewuVJZQlC7t22B1q7NbMVhFJEtkSUY=
Subject key identifier:   3A:B0:0B:67:A1:11:F5:8D:C5:BB:4A:A2:1E:F8:FE:AE:DC:51:2B:76
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BDF625665B654BAC2AA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:df:62:56:65:b6:54:ba:c2:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3b346986-8566-4fb3-be40-8a4fd89bff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:18:a7:dc:33:6c:4b:ea:56:41:2a:98:4b:36:
                    0e:1b:02:cc:0e:ba:68:51:a3:35:84:94:69:81:80:
                    d7:16:1e:8b:01:c5:5c:61:75:1d:c3:f3:6b:c4:20:
                    af:fd:75:cf:c8:56:48:11:7d:5d:fb:99:0b:62:57:
                    5b:39:0e:1f:2e:cc:6a:3d:ba:da:06:ae:37:90:9d:
                    8b:db:9d:d2:ab:99:2c:b5:18:7d:84:c8:34:97:7b:
                    50:bb:f5:99:10:60:6e:81:c7:d3:eb:42:e9:ec:b5:
                    4c:2f:ae:88:5d:9e:3e:fb:79:74:73:59:b5:89:a2:
                    48:f0:69:32:69:95:f7:fe:c1:4e:2d:f6:78:4e:d8:
                    f0:8a:86:cc:2d:73:e5:b1:63:6c:5b:26:e7:f5:ef:
                    82:30:26:9c:3a:24:a1:ad:ab:80:8f:fa:43:06:21:
                    90:ea:0e:7c:e3:92:ee:77:0e:a3:4c:ef:a4:a8:66:
                    75:ea:21:66:41:da:7b:24:03:e7:75:e3:71:3d:5f:
                    5b:14:56:5a:74:ff:0b:ed:4d:20:63:e1:77:94:1e:
                    d1:c0:33:eb:c2:07:53:08:ff:c4:76:b8:86:aa:81:
                    01:8c:15:ee:c5:9b:fd:40:64:52:79:03:63:25:77:
                    47:1a:c3:6d:4b:05:8d:b2:71:e7:f6:25:b1:29:38:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:0B:67:A1:11:F5:8D:C5:BB:4A:A2:1E:F8:FE:AE:DC:51:2B:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:6c:9d:db:03:2f:65:22:25:a3:88:76:6c:41:26:f8:e4:d3:
         83:7c:65:ce:a5:ea:cc:f4:1a:30:3c:67:15:f5:15:2c:2b:a5:
         ea:da:6c:f0:95:2c:d2:44:b5:c3:40:e8:0e:46:ba:94:94:af:
         b8:66:2d:28:f0:0d:3b:fb:a3:60:40:b6:20:3c:f7:3e:11:56:
         6b:b4:49:17:04:ce:81:2c:aa:6f:8f:00:3e:9d:e6:6a:c2:56:
         22:f9:95:54:74:0c:aa:4f:6f:a0:7a:1b:46:54:13:80:bb:d9:
         20:77:86:cf:3f:48:7b:a1:d7:11:23:9a:be:21:aa:64:8a:a5:
         84:9c:5c:e7:52:e0:a0:02:85:7b:39:ea:25:35:ea:fc:e6:6d:
         83:b1:02:b7:48:a7:6d:ee:1b:43:d9:69:35:0c:51:46:ca:83:
         c2:62:51:9e:da:73:6d:a7:7e:3f:5f:42:5b:16:b5:11:3f:43:
         a9:57:b0:85:19:7b:7e:02:10:32:85:ba:56:1c:0b:9b:d6:72:
         1b:e8:63:8f:e1:26:c0:85:b2:05:c9:b0:c4:2f:bc:e3:73:e0:
         4f:8f:44:3e:a1:10:36:fa:10:ad:2c:b5:d1:db:59:fe:37:7c:
         3c:53:ec:63:c6:07:ee:d1:f0:26:0c:31:6b:94:18:b6:d8:49:
         46:76:5b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:41 2026 by rpki-client