Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
File:                     79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa (raw, json)
Hash identifier:          5x9fqibngtluvqDIFviMyJ3nMXAuwbe2TTmdLUshg/E=
Subject key identifier:   2B:03:8C:A1:E4:0D:67:91:E6:52:70:C6:33:3A:6A:26:F3:1E:CA:61
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DBE6B233F28E07C56CBBCEB40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22652
IP address blocks:        70.35.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:23:3f:28:e0:7c:56:cb:bc:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=ea4e1f72-7858-43aa-93d9-42dc8629a122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:cc:58:1d:0f:22:b5:c9:5b:a8:34:84:b3:
                    ee:74:c3:39:1f:4f:4f:10:ca:50:dc:95:54:1f:b6:
                    be:ee:d8:e9:cc:8d:a9:df:2f:f8:f7:99:8d:50:54:
                    cd:ff:bd:e1:66:49:4f:0c:46:00:11:09:31:92:c1:
                    21:a4:6f:ed:48:a1:c9:b0:5a:ee:0b:28:e2:35:c4:
                    0f:e2:88:84:6f:36:7d:dc:8f:3f:76:bd:9c:9b:e8:
                    ae:00:f9:7a:c9:00:03:dd:26:17:4f:19:c6:f1:6b:
                    de:49:db:f7:6a:23:9a:ab:3a:cd:34:1b:84:f2:8b:
                    bc:0d:0b:04:e7:e5:27:4b:e2:75:35:7d:3f:d8:75:
                    2d:27:7e:3e:41:9c:ea:23:fe:54:c9:99:85:4f:54:
                    6f:8c:da:3d:b9:06:df:9a:2f:f9:ac:ae:36:50:49:
                    ab:21:d7:7b:6e:1c:8f:89:60:77:b2:20:3f:eb:f6:
                    36:99:ad:0c:8f:cd:93:6c:90:de:5c:1d:78:cb:40:
                    58:2e:98:8a:a8:44:03:e8:14:85:2c:d2:e6:02:33:
                    6d:55:20:99:1a:41:20:dd:e2:b1:c0:3d:64:fd:38:
                    71:a8:ff:55:f1:e0:70:c0:f3:4d:66:6f:ea:84:35:
                    a7:fc:89:b4:83:45:d1:87:cc:cb:2d:0d:78:41:e2:
                    81:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:8C:A1:E4:0D:67:91:E6:52:70:C6:33:3A:6A:26:F3:1E:CA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.35.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:a7:25:a0:1d:73:06:ea:15:ed:43:12:20:39:39:2e:e0:
         fc:39:11:0d:fd:ca:cb:14:aa:84:a4:ce:a4:9d:6d:34:0f:94:
         55:5c:39:e7:75:c6:b4:e3:ea:62:f1:2e:a7:e0:3b:07:52:cd:
         eb:7e:c9:9a:86:26:83:6b:e1:a9:21:55:4c:22:22:6c:71:c5:
         31:64:a3:cc:02:36:b9:a4:41:67:d6:9b:d9:85:a7:d8:bf:14:
         3c:ba:b5:1e:89:6f:94:1b:e4:e9:c4:f8:b0:9c:bb:27:b4:27:
         9e:ac:17:16:4b:3d:82:ff:02:73:fd:48:f5:2f:94:6b:c9:50:
         a3:49:b0:b7:c0:2c:bd:cb:2f:45:db:92:dd:5d:d7:25:fc:56:
         e2:2c:4d:88:7d:8d:35:2e:24:1c:b8:7f:ec:bb:d5:ca:b0:e3:
         e2:23:fa:3e:82:c6:53:bc:3b:9f:bc:ab:a7:dd:c9:42:14:4b:
         b0:3b:23:b7:01:bd:4c:b6:ca:72:d2:a6:b1:dd:11:7a:09:49:
         d8:db:dc:0d:9b:ae:5f:3c:fe:76:ef:d2:00:be:f6:c7:b5:b8:
         72:da:09:9b:14:a6:66:39:90:c3:d6:11:0c:a8:72:cc:9a:e4:
         14:4c:4d:75:ba:bc:70:2f:91:6f:3b:0b:a2:1d:6b:f7:e1:d4:
         4a:3e:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:28:26 2026 by rpki-client