Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa
File:                     26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa (raw, json)
Hash identifier:          hfkfCAfB/0SMwXQ4FUXFa1MrVrj1dbf/NXIW8s22XEY=
Subject key identifier:   1F:29:B0:AE:A8:11:FC:E5:CB:B1:78:58:09:62:29:9C:1C:0D:A6:2D
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B2066D45D86857344340BF610
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22652
IP address blocks:        70.35.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d4:5d:86:85:73:44:34:0b:f6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=5d859cef-7f33-4d67-a81d-c3b317c8997b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:d4:39:85:92:e0:da:a0:00:9c:bf:17:95:
                    93:cd:58:85:7d:60:18:f8:f7:4f:69:16:f6:a3:6d:
                    80:89:e1:25:4c:5e:35:0b:87:db:85:e0:c9:68:57:
                    c2:06:92:23:62:ab:1c:4a:fe:14:b1:56:d6:79:5b:
                    f7:49:59:c6:23:1b:d5:fb:bf:bf:41:08:37:9d:bd:
                    d1:9e:b0:e0:b3:8e:5a:3e:57:11:dc:37:14:50:f9:
                    91:c1:3e:f1:54:97:3c:66:8f:56:ac:0a:7b:f8:e5:
                    3b:dd:1a:17:91:cc:3f:ca:4b:47:36:d3:f8:5b:6a:
                    35:99:6a:3f:c4:72:ee:f4:a2:c9:5b:e3:d8:c8:ec:
                    f3:a0:d2:47:a6:c7:37:7f:6d:fc:ac:3f:30:4f:6c:
                    52:e1:dd:89:89:59:3d:a0:51:a1:e5:8b:a6:41:d4:
                    1d:9e:de:c5:d0:51:ac:0c:53:39:e0:c9:31:12:71:
                    b9:7c:11:30:56:7c:34:7d:8d:b0:58:4e:2f:5a:32:
                    4c:b0:dc:14:97:4d:40:f7:75:14:f3:75:a7:61:8d:
                    ed:5e:f2:72:2d:7c:fa:18:ce:70:51:5d:f8:e4:c9:
                    cb:c6:9d:3e:7b:0b:e3:2a:d3:66:81:20:c5:5e:71:
                    2f:7e:85:a0:d4:61:8a:33:28:2c:e5:69:58:48:1c:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:29:B0:AE:A8:11:FC:E5:CB:B1:78:58:09:62:29:9C:1C:0D:A6:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/26b6d07f-ca55-3ae1-98f6-71ebdaec577b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:70:6d:05:ed:9c:4e:dc:19:0d:dd:e6:a1:94:22:eb:6c:41:
         05:e9:36:7c:f8:34:a3:d5:d8:de:c6:75:05:ed:35:12:0a:ae:
         cd:0e:30:c8:07:66:c7:68:9f:31:46:3e:54:e3:96:35:ef:5d:
         52:02:49:79:34:9e:ee:c7:e6:40:e0:a4:a8:83:a4:2a:a7:b5:
         83:1e:2b:32:4a:86:6b:9f:aa:5c:74:3e:ed:3f:65:9e:98:aa:
         57:1d:04:c2:68:25:93:7c:3e:df:75:6d:5e:81:11:67:66:d3:
         5e:9f:5f:91:d1:d1:2b:9a:c9:cf:18:b0:ba:84:04:f1:e9:93:
         d9:e1:23:aa:26:e8:61:4b:ea:17:dc:80:0a:94:2d:21:82:23:
         db:e3:c4:52:cf:5d:41:cd:19:49:cc:4d:aa:c4:ce:bd:f1:77:
         f9:87:c1:db:10:f4:14:e4:8c:11:55:07:8a:bb:1d:1a:69:36:
         d6:fb:0e:ca:47:b7:29:cc:77:0e:86:12:0b:c7:40:4d:7b:86:
         a8:cd:3c:bb:6e:24:5a:32:04:3b:a9:76:b8:98:e5:42:69:94:
         d1:b6:cf:a4:36:15:7d:2a:ea:fe:33:5d:0c:be:eb:0d:0f:69:
         e5:76:10:9b:ab:07:a5:aa:dc:b4:dd:9f:d3:d1:2f:d2:cf:4c:
         53:52:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:39:09 2025 by rpki-client