Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa
File:                     9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa (raw, json)
Hash identifier:          tPqnJkO2p3Si6qH53zcesYNN4u9VsZyrsXnFTqktG7k=
Subject key identifier:   0D:8A:1E:CE:2F:53:67:B3:30:5B:60:00:94:C0:F5:6E:53:EB:D9:1A
Certificate issuer:       /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Certificate serial:       010D0C9F4328584DA6B00AD4F261131CAD06B4C0
Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     8070
IP address blocks:        97.107.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:0a:d4:f2:61:13:1c:ad:06:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=f58d1863-706e-42fd-b907-543e687a621a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:b4:34:a5:47:24:0d:23:2d:98:5c:b5:21:
                    ad:f6:c9:a5:31:8e:fb:34:00:45:44:70:44:bf:20:
                    a2:09:66:1e:72:b7:2a:b0:f5:b4:83:a3:61:f7:fd:
                    80:31:cd:d2:42:97:3f:91:9d:99:62:95:88:58:46:
                    df:9f:fd:eb:37:3c:b1:c5:b7:f2:f7:3e:78:3d:3c:
                    b1:a0:31:ac:b1:2e:b0:0f:27:97:14:a1:9a:9d:13:
                    25:ea:7c:bb:05:42:53:73:98:d7:0b:94:c5:24:a0:
                    50:b1:1a:ed:ea:12:32:f8:42:28:ad:f9:78:1c:0e:
                    60:1b:b0:9a:32:9a:0b:ed:94:c4:45:6e:d6:7b:90:
                    6d:d2:72:e5:0f:f4:56:aa:b5:96:10:34:93:4b:e8:
                    0f:02:68:53:21:eb:fb:47:1c:49:f5:fc:6a:ba:8b:
                    9c:80:fc:a4:30:8c:3d:24:3a:b7:41:5a:bc:c2:14:
                    08:de:22:9d:4c:bb:28:2f:85:91:c0:04:f2:d4:68:
                    1a:20:e9:17:1b:f5:ce:d8:5f:96:1b:54:e6:4f:1d:
                    aa:98:5a:37:3b:2b:0c:84:e0:bd:77:23:51:b5:e4:
                    35:44:74:fb:e3:be:08:81:de:61:79:15:fe:2b:fa:
                    9d:52:a9:9c:87:61:b2:da:15:71:a7:37:a4:10:af:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8A:1E:CE:2F:53:67:B3:30:5B:60:00:94:C0:F5:6E:53:EB:D9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl

            X509v3 Authority Key Identifier:
                keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:b9:4d:24:33:3f:e1:9a:93:3d:68:c1:e7:87:3f:17:c7:c7:
         69:dc:3c:6b:54:75:82:24:70:25:9d:80:c5:be:35:50:38:42:
         df:fe:91:96:01:1d:bf:46:cb:6f:b6:de:a1:ea:88:35:32:9b:
         8b:98:a3:62:8b:7c:0d:f5:e1:ae:c1:83:bf:e8:48:d3:46:0a:
         ba:b1:1b:93:39:3e:53:68:6d:6c:45:c8:71:86:88:1a:65:e2:
         82:16:84:9b:a9:c0:39:f9:f4:1e:be:1f:c4:18:82:80:9c:25:
         f0:99:58:18:3d:ab:d7:ec:3b:44:41:51:d9:91:d6:24:89:b6:
         86:2f:ec:d8:2b:3b:1f:f7:33:b3:62:02:c7:92:4b:3c:7d:b5:
         4d:e3:43:4d:e4:f2:80:82:77:40:61:2b:db:d7:99:fb:0d:8b:
         73:40:08:7d:d0:d8:3c:de:5a:fb:30:73:4c:a3:d0:69:a2:9d:
         72:f0:44:c5:70:3d:03:96:72:d0:41:db:9f:81:7f:bf:17:fa:
         52:0b:38:d3:ad:78:33:11:48:c2:d1:0e:af:84:49:12:2e:11:
         71:35:7d:51:8f:d7:ce:42:1c:65:a6:ee:da:ee:d8:8b:1f:f7:
         1c:d8:a8:3e:f1:f2:81:d6:71:40:77:fb:ed:3d:dc:08:ee:a2:
         91:b6:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 12:55:55 2026 by rpki-client