Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27cd168f-c24a-3b13-9847-189986948cad.roa
File:                     27cd168f-c24a-3b13-9847-189986948cad.roa (raw, json)
Hash identifier:          QnejOfjGkMYS8cwpJCObref8r+GLYE5YH81kQSJbO+A=
Subject key identifier:   D1:5D:E0:2C:7F:D2:81:F0:A1:59:B7:6B:0A:A2:12:80:B1:58:EF:0D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFB185265B02BBB7E89380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27cd168f-c24a-3b13-9847-189986948cad.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        70.41.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:b1:85:26:5b:02:bb:b7:e8:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bb18038f-c814-4f68-8f28-a73a0d91e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:24:90:99:20:8c:91:26:20:31:45:64:04:
                    a5:28:d9:1e:08:9c:66:ca:b1:c8:f0:66:30:2c:51:
                    b8:c7:73:60:65:92:20:b2:d9:81:af:aa:a6:45:4c:
                    86:7a:06:9c:70:01:3d:3b:da:a3:e6:ad:76:56:e0:
                    49:3b:4e:1a:ca:59:06:f9:b3:22:6a:84:9c:ea:7e:
                    36:dc:92:d3:2a:15:07:2d:17:7b:97:fa:de:04:bf:
                    c8:17:c2:ce:75:6c:5d:f1:3e:f6:0e:e5:8b:62:4d:
                    50:6f:f3:01:2b:e9:19:f7:e6:d1:8a:90:53:ed:e6:
                    09:d8:b5:dd:b3:d4:09:ab:73:79:d4:c1:e6:4e:0c:
                    d2:c6:6a:ee:8f:1b:e5:b5:61:df:51:25:c7:d4:5b:
                    62:ce:ee:f1:24:30:54:5a:a9:2a:3c:84:6f:2b:f1:
                    cb:f1:06:56:93:ab:e7:89:c9:29:04:6b:51:25:74:
                    8c:ae:23:c1:29:9b:da:27:ee:39:22:fc:b3:cb:bb:
                    a1:e8:d3:7c:66:73:8e:db:50:02:76:4f:81:81:8d:
                    d9:a1:ac:63:a5:df:13:06:10:a7:99:04:17:a4:c6:
                    84:53:c7:fa:ff:0f:e0:27:cb:da:c0:c6:25:c7:e9:
                    2c:93:10:45:31:2f:10:4d:99:7a:bb:1c:be:ea:4a:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:E0:2C:7F:D2:81:F0:A1:59:B7:6B:0A:A2:12:80:B1:58:EF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27cd168f-c24a-3b13-9847-189986948cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:05:c3:25:97:08:45:f1:28:3d:b8:1f:c3:67:74:92:0a:
         4e:1d:56:27:5a:9c:ca:2f:d6:7d:4f:12:1c:16:d0:cb:60:c0:
         9f:47:4f:20:f0:8f:02:e0:0f:54:b3:95:2f:86:4d:c3:9f:87:
         5d:85:ac:9f:2c:d2:69:b6:88:ec:40:80:1e:8a:5c:e8:aa:d9:
         74:bd:43:06:ec:1a:c0:d6:a1:03:b8:6c:7c:17:54:a5:58:7b:
         d8:45:38:ff:7a:7d:d4:05:90:19:76:c6:07:c8:dd:51:09:f6:
         63:b7:17:f3:e4:90:43:fe:28:53:84:08:63:79:85:22:f9:0d:
         f5:2b:3e:b2:18:31:ae:1f:56:b6:b3:07:d5:a2:e2:0d:98:57:
         a1:0c:d3:d4:b0:9e:45:d0:fd:c4:b6:09:5e:e5:c0:56:a1:00:
         1f:74:51:6f:40:d4:53:37:81:c2:97:85:0d:44:bf:63:60:f0:
         ac:2b:24:81:45:30:f9:72:48:aa:fd:6d:50:02:a6:49:ea:38:
         59:c2:cd:d1:26:69:18:13:5e:b2:6e:42:8e:4a:5a:39:08:2b:
         de:cc:3c:96:42:e7:22:d8:fd:d4:f7:e9:0d:90:58:e4:14:b1:
         41:62:ee:0f:ba:c1:7c:8f:78:e1:b0:fa:0f:94:88:34:da:ad:
         57:97:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:39 2026 by rpki-client