Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa
File:                     640c453f-18c8-33fa-8803-ecb7430cd4af.roa (raw, json)
Hash identifier:          toxFFvXfLRNIw2qob/iX9hMFBRnjgmnHWBh7ukVVA80=
Subject key identifier:   46:5C:21:0C:B2:D1:32:E2:D0:39:56:78:28:66:E9:FE:EE:5D:1A:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B66B968FDBA8FB6D1FC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:66:b9:68:fd:ba:8f:b6:d1:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2e11faae-222a-42e3-963f-fb78a00ff5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:17:d2:3e:7a:67:76:00:4e:cb:bd:69:44:
                    39:41:91:c8:3f:34:74:21:05:07:36:8b:27:da:bd:
                    05:84:45:ea:66:21:57:06:90:da:46:6b:c7:ae:af:
                    b0:0c:ba:3c:c4:9d:a0:06:6c:ad:f7:b6:a8:c1:e9:
                    16:e9:14:31:19:42:1a:96:7a:d2:29:ab:84:a7:3f:
                    2b:a3:78:d7:06:2a:25:9a:f9:22:e3:d1:d5:c8:09:
                    bc:ad:1b:15:e1:91:21:29:66:3f:da:a4:f0:69:3c:
                    ea:b5:e6:f1:d0:e0:c2:63:38:7b:b8:ab:88:9a:82:
                    de:ff:5a:5f:09:cf:cb:fd:5e:1f:af:5e:3e:49:09:
                    0b:02:0b:4f:9f:44:f7:c2:19:35:db:77:08:cc:fe:
                    27:4a:0d:de:40:c3:00:b3:17:fa:bc:0b:c6:80:05:
                    8b:e3:02:ea:67:98:11:84:57:70:d0:38:f1:6b:99:
                    ad:c6:2f:10:fd:4f:ba:fc:3a:0c:68:59:2a:70:7b:
                    6c:2f:3e:d5:2f:e1:cb:1e:a8:93:60:7b:74:f3:32:
                    14:d5:6b:f5:57:51:53:44:73:9e:f4:a2:fe:8e:b6:
                    50:58:f8:11:80:a4:49:82:52:04:1d:46:b4:55:41:
                    f7:c4:41:2b:8e:15:50:e7:bd:7c:f3:45:7d:f8:b0:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:21:0C:B2:D1:32:E2:D0:39:56:78:28:66:E9:FE:EE:5D:1A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:28:89:5f:76:d9:56:99:f5:3f:f9:d8:b1:e0:11:0e:48:
         63:fb:18:02:9e:5f:45:f7:bb:67:6f:5d:9f:78:de:3c:95:fd:
         83:28:1a:76:99:17:e2:75:1c:05:bb:19:5c:8c:27:5e:5e:da:
         e6:85:18:97:c7:d2:8e:69:cd:17:14:44:33:43:db:d4:da:cc:
         85:e5:a7:58:6d:99:5e:43:a8:f3:13:7e:ad:75:53:45:ca:70:
         66:df:80:c5:10:16:ee:21:d2:f6:e3:9a:0a:90:29:f6:ed:35:
         20:2f:1e:cb:68:12:5c:e1:d8:f1:c6:1b:bd:03:ac:51:c1:2a:
         dc:d8:01:93:02:9d:fa:63:f2:07:07:8b:37:d3:cc:80:1d:61:
         91:e3:31:b3:9c:b0:75:b7:8c:81:30:22:d4:44:26:7b:10:cc:
         ca:12:14:e4:59:13:6a:02:dc:fb:39:53:3d:c5:b0:f2:58:27:
         e6:66:54:71:cd:6b:13:d7:73:43:1c:fd:1a:b0:42:e0:bb:dd:
         de:fc:fa:9a:1b:7c:2e:18:fd:81:4a:e4:2c:42:60:35:08:37:
         51:c2:6c:fb:2e:9c:59:0b:c8:31:42:9b:2d:5b:f7:63:0d:6d:
         77:be:a3:9f:ee:28:07:74:1e:66:47:ca:73:b9:9a:94:7f:b7:
         53:c3:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:32 2026 by rpki-client