Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa
File:                     96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa (raw, json)
Hash identifier:          oGXcjcwOu1MHTVlNSRqiIHtZlwO/2lIAHtLm1DQ3mng=
Subject key identifier:   15:5A:7A:7E:D3:E3:B0:A1:33:03:7A:19:7C:74:34:3F:75:83:B4:32
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E0D84286EB68F325E105A4100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     40306
IP address blocks:        70.41.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:28:6e:b6:8f:32:5e:10:5a:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=4b5cee4e-4668-48d9-b6a9-271e7d806283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:00:8a:c7:13:e8:d8:50:92:c4:8b:cf:22:
                    79:1a:49:32:a3:3f:31:5e:57:92:31:15:e2:95:2d:
                    4d:7e:50:aa:71:a5:ae:30:01:66:4b:bc:0f:54:2e:
                    de:1a:b4:3e:68:3c:dd:63:18:0b:6a:16:a2:2e:c0:
                    17:4c:d5:a7:36:a7:93:f1:4b:bb:ef:2e:71:ae:a0:
                    33:ba:77:0b:cf:94:4c:92:30:85:9f:b0:54:ff:d4:
                    d9:21:51:f0:49:5a:2e:01:37:9d:19:1d:81:52:d4:
                    26:3d:3a:24:53:0c:4c:0c:dc:bb:99:24:36:6c:8d:
                    c4:86:e3:31:d6:e1:42:b7:e7:d3:bf:5f:e0:f2:2e:
                    a0:27:4e:2f:aa:84:f9:3b:02:5d:ec:ea:38:df:3e:
                    29:ba:7e:d8:c5:e9:61:ca:ae:3f:09:e6:20:ef:82:
                    66:34:a1:de:33:fa:1c:d5:f0:f7:94:b3:3a:89:8f:
                    e3:fa:fd:02:d0:00:42:c0:87:76:0a:3d:83:c0:f2:
                    11:23:59:88:95:da:3f:6f:95:60:c2:df:6e:07:b9:
                    75:80:dd:84:49:50:9e:42:aa:96:a4:34:f0:c9:2b:
                    bc:4e:d0:9b:5d:d6:e7:56:e6:71:e4:7e:c0:ad:0f:
                    31:c8:40:8c:24:b5:aa:c6:fc:cf:3a:af:3a:19:9b:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5A:7A:7E:D3:E3:B0:A1:33:03:7A:19:7C:74:34:3F:75:83:B4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:2f:bd:31:a5:06:4b:fa:7d:4f:f4:f9:6a:f8:88:d0:2c:
         3c:90:70:84:8f:b5:55:b5:f3:ab:ce:5d:98:10:d8:4b:cb:7f:
         a9:9f:1e:c9:e2:5d:e8:c2:60:5d:ed:d7:52:5a:9b:eb:b1:65:
         b0:e6:87:63:37:2f:42:15:52:85:53:23:83:c3:0f:03:fe:ca:
         93:87:f6:db:72:85:2c:0f:35:8b:6f:4b:e9:34:8a:cd:19:0e:
         70:68:b7:d5:3f:21:3d:22:99:b4:3b:44:46:ba:13:b6:de:b3:
         2b:6e:40:d8:f0:0b:17:4a:a4:70:3c:68:90:29:49:1a:96:db:
         2d:81:8d:eb:f8:6a:26:b8:6d:85:a5:84:3e:68:cb:be:71:26:
         56:30:41:92:dc:e4:f9:66:65:cf:7c:85:e0:86:17:0d:32:30:
         bb:f1:49:19:8d:b1:bc:9d:c5:c1:1d:38:3b:d4:71:e5:3a:1c:
         b6:ad:0d:92:af:c5:dd:7a:2a:3d:a4:df:a9:99:d5:4b:1a:8b:
         44:08:b7:3c:09:d5:6b:20:8a:31:ac:68:03:75:a8:0b:2b:2d:
         c5:4d:0d:76:c2:75:95:dc:67:8d:da:7b:bf:01:16:ce:7f:79:
         ea:d0:d4:33:5e:d0:a9:24:21:1d:f2:73:bd:36:81:cb:32:88:
         1a:15:97:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:27 2026 by rpki-client