Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa
File:                     ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa (raw, json)
Hash identifier:          IHkgNM2xmSXlwggKDx0J3kFnkwwakASeubhffywL+kM=
Subject key identifier:   81:2F:45:7D:E8:ED:86:71:E4:7F:EE:A9:85:47:AD:8B:C9:6E:D7:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B6689B15E621B4AA10E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        70.41.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:66:89:b1:5e:62:1b:4a:a1:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=13eaebda-5145-4125-9155-8dcefc5ddabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:99:95:68:45:e5:3b:5f:94:00:ce:f6:ab:
                    31:8c:52:f1:69:1d:de:fc:f0:b9:56:2c:5f:9d:1d:
                    52:c5:18:b0:06:39:72:c7:f9:5f:9d:86:86:96:c7:
                    f3:c0:74:da:71:d9:87:07:e7:82:a3:9f:da:cc:d8:
                    90:d8:79:c8:b0:ef:2a:c1:a9:42:4d:8a:f6:6e:72:
                    fa:62:4d:56:30:05:97:9c:65:b9:9f:b5:98:23:6c:
                    b8:e6:6a:00:95:c2:98:0d:c8:95:48:f3:f2:a1:8b:
                    03:91:54:95:b2:ad:5f:53:c4:74:30:91:4a:eb:1b:
                    07:04:bd:2f:ea:3f:2f:64:09:ad:88:cb:da:e8:4f:
                    f7:68:fe:40:ac:fa:56:9a:df:34:83:ef:65:fe:e3:
                    29:95:df:b1:09:a5:6b:e7:40:a6:17:41:27:32:3a:
                    77:ef:00:48:54:76:5a:99:8b:2f:da:2f:87:00:27:
                    cb:a8:be:d4:29:3c:49:a7:8c:c6:78:f2:18:00:71:
                    69:27:da:80:62:25:64:11:ee:7b:a5:89:e0:ca:95:
                    f6:19:ce:d9:f5:98:79:5b:bc:95:ec:d1:42:76:74:
                    f6:a7:e3:86:65:8d:16:c8:3f:f1:f7:b1:f3:c2:29:
                    27:ed:96:02:7b:8d:9a:a2:c6:fd:09:d3:47:6d:60:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2F:45:7D:E8:ED:86:71:E4:7F:EE:A9:85:47:AD:8B:C9:6E:D7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:76:ea:fb:11:b1:29:31:92:14:7a:6b:3e:3a:ef:15:4c:
         cf:3d:71:e7:94:5e:9d:8c:c7:72:f9:54:8a:e2:33:07:cc:24:
         66:ad:dd:72:6c:e2:1a:96:f2:d3:d0:a6:44:87:4c:ee:07:23:
         18:b4:71:0d:8d:21:87:fc:dc:b3:03:25:50:d8:bd:59:34:9d:
         59:29:01:f8:67:1d:ac:2d:96:8a:98:60:11:ec:95:ff:f0:a8:
         58:03:fa:28:ef:b7:b0:a4:79:14:f5:4c:e0:13:6a:a9:18:92:
         9e:a0:5d:3c:67:88:da:89:b5:45:97:65:d6:2e:41:c2:46:9e:
         e0:02:3a:06:82:98:fa:d6:66:f4:15:fe:07:14:59:36:bf:c5:
         49:09:5b:11:e7:93:8d:69:a6:e4:18:35:9f:79:2f:b5:3f:45:
         03:a5:a5:06:a3:72:10:17:0d:4d:84:c9:7c:3e:70:ad:59:4a:
         72:b9:1e:14:30:9d:3a:ab:e6:41:0a:31:b9:9d:b2:5c:c5:5d:
         81:ca:20:d6:c6:6d:3e:b8:4b:24:78:71:76:10:76:1b:59:b9:
         ec:d7:07:43:2c:9d:e2:85:8a:75:ae:62:be:2b:32:84:aa:bc:
         50:6f:17:0e:a5:65:70:7e:39:b7:4e:02:97:79:15:39:ac:c2:
         63:62:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:22:56 2026 by rpki-client