Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa
File:                     a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa (raw, json)
Hash identifier:          C6pUnOip8qUz50okSYjb3UCOeM/rsal384P+epuIj6E=
Subject key identifier:   D1:DB:72:00:DC:F9:3D:48:55:19:04:BE:A1:6C:98:54:9E:C1:0E:47
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B5BDE06A586D09F2E66C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     40306
IP address blocks:        70.41.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:5b:de:06:a5:86:d0:9f:2e:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=90e043cb-b1f6-45bb-96bd-e7ae1a5d6359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:63:7d:38:26:14:23:a1:c9:92:96:40:44:
                    f7:67:53:4b:31:25:45:1b:61:12:85:ae:f1:59:dd:
                    0b:dd:25:5c:91:cb:a3:dd:b6:fa:97:bf:15:e1:4b:
                    ae:9c:11:e0:4e:a8:37:bf:82:76:3b:2d:21:3c:89:
                    a5:c3:b6:83:bb:84:f1:1b:79:fe:bb:82:f3:81:e5:
                    c4:6e:b4:56:dd:19:40:09:59:c4:70:16:62:c3:fa:
                    a6:38:f4:57:0b:13:ce:ff:d4:87:24:50:ce:5d:17:
                    25:35:b8:82:85:99:8e:52:2a:2f:03:e0:54:f3:b2:
                    03:e2:e1:1d:ce:04:81:2c:74:90:cc:20:97:55:2c:
                    96:d8:c5:e1:a5:02:1b:85:78:f1:e6:cf:19:d6:d0:
                    17:f9:c6:82:e2:9b:17:7b:7d:52:4b:83:06:24:d0:
                    f5:50:18:cb:8d:cc:9c:4f:2e:fd:0b:62:55:2d:18:
                    61:8e:f8:0e:a6:7f:7e:ad:b3:f8:87:9b:ce:90:12:
                    95:9e:26:8a:e6:ba:e0:36:92:5d:17:a8:b1:b5:df:
                    92:fe:de:7d:30:71:76:0a:b2:9b:f6:b1:71:fb:af:
                    8b:c3:12:45:29:28:70:4e:93:8a:e0:f7:07:6f:24:
                    83:3f:6b:b6:1b:77:0e:7d:cf:9c:6d:45:35:66:c0:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:72:00:DC:F9:3D:48:55:19:04:BE:A1:6C:98:54:9E:C1:0E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:cf:ce:52:14:bb:e6:87:b3:97:09:8f:e6:f0:4d:7a:b7:
         23:87:04:54:e8:69:ea:19:29:07:d3:55:f5:27:63:e1:e9:38:
         0f:0d:03:72:3b:42:ad:4f:42:56:c7:85:89:15:3a:cc:ae:03:
         47:8a:2b:d7:6d:4d:d3:a4:1a:7e:d5:76:b0:5f:a2:99:4a:cc:
         49:84:99:e4:e8:64:1c:90:b1:25:05:e3:9b:94:7e:0d:cc:d4:
         2d:f6:10:62:c7:bf:e7:f6:bf:ab:c7:fc:d9:12:ce:38:a2:a3:
         c8:e0:04:4d:dd:eb:1f:82:3a:ad:f2:ec:c6:87:77:12:cc:26:
         32:58:5b:6b:3c:98:f1:01:c3:ac:4e:da:b2:6c:0b:84:08:23:
         a7:bf:e3:22:45:2f:93:bb:34:1b:b2:a9:c0:41:bf:ba:a5:26:
         ed:45:df:0e:05:d1:93:49:fb:bd:8a:c2:6b:96:82:d8:75:ad:
         3b:2f:9e:68:3c:d7:51:fe:c3:74:a7:02:c1:35:77:61:f5:37:
         d8:0d:58:d7:39:9d:4a:42:1c:f4:1c:7f:08:28:0e:4b:a1:57:
         d3:3e:71:fa:6e:21:07:43:b2:cf:bb:b2:00:87:de:31:26:97:
         30:a7:10:6d:e0:fd:51:11:c5:60:e7:a3:5a:20:dc:f5:82:a7:
         d3:6f:cf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:05:14 2026 by rpki-client