Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
File:                     f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa (raw, json)
Hash identifier:          4uwuGAH1F1mzxdlncOqiiFsTmByoUKzlQlHppvGgNjE=
Subject key identifier:   77:12:A0:DA:B1:8D:E7:0E:BA:4D:17:4B:53:E4:81:18:9B:26:7B:85
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F4328584DA815838C168084AB9740CB50
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     3695
IP address blocks:        70.36.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:83:8c:16:80:84:ab:97:40:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=ca8f3629-36d6-4b00-80d0-86d675f7556b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:31:b0:87:1a:ae:86:71:07:79:cd:f2:e1:c8:
                    c4:6d:fe:74:e9:39:c9:61:84:0d:3e:7f:72:64:dd:
                    67:8c:b9:79:7b:53:ce:39:cf:0f:30:26:ee:f2:dc:
                    9a:c9:ee:5b:c7:8e:cb:12:2e:fe:2e:a3:6d:f5:e3:
                    6e:6e:16:57:4c:be:9e:41:d0:c5:a4:6b:6a:a6:ab:
                    7d:c2:5f:88:42:27:31:0c:36:ad:f6:42:3c:0d:23:
                    f0:22:f3:00:cb:55:69:16:24:f7:a1:3c:57:a4:c5:
                    a4:0b:6d:50:65:08:a6:77:a4:bc:44:82:25:85:30:
                    fc:e4:90:a4:1f:ab:05:41:0d:ed:f2:97:e2:88:3d:
                    5b:2e:7d:76:8c:30:b8:88:8d:55:56:54:3f:77:80:
                    53:9d:93:8f:8d:49:26:e5:a9:43:ab:bf:3b:b8:03:
                    4f:74:c7:9c:ec:9d:3c:1a:10:d7:95:01:cc:f3:78:
                    37:bc:5b:ac:8c:4a:87:65:7f:79:df:78:86:f6:64:
                    91:0f:76:c9:ad:7e:db:4d:43:c5:c0:50:1a:c9:e1:
                    c3:f5:3c:aa:f2:38:ed:63:aa:40:c9:f1:b1:6f:73:
                    82:ec:e8:b5:a6:69:33:80:69:90:26:9a:3e:17:bd:
                    d5:27:6d:ec:da:be:03:2e:cf:b5:04:71:91:50:df:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:12:A0:DA:B1:8D:E7:0E:BA:4D:17:4B:53:E4:81:18:9B:26:7B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:11:f1:b6:72:73:36:c5:02:c1:c4:c6:dc:3b:b7:0e:a2:c4:
         4e:35:81:c4:d5:10:d9:fe:b2:61:0c:6f:a5:fa:46:c8:4a:66:
         34:39:c6:a8:22:ea:75:c3:31:d5:0d:7c:c0:dd:ca:54:f8:7f:
         1f:bc:01:24:44:00:16:f9:b9:1f:00:a1:58:d7:f1:6f:d4:30:
         c0:e6:27:09:df:e7:83:11:d4:b2:9f:ec:29:88:06:66:d0:09:
         b6:5f:b7:13:fb:37:02:9e:65:00:f9:07:8a:36:b6:2e:de:f3:
         5f:88:47:50:2a:6b:2c:e6:76:82:5e:54:0f:69:2f:83:e7:16:
         3a:07:a5:54:8a:dd:e2:33:56:e9:ae:80:6a:c5:41:bd:50:49:
         05:6d:3d:f3:ae:8f:f0:d9:37:4d:96:76:f4:07:9d:42:d2:04:
         a5:bd:32:5f:ce:c6:14:c7:38:fe:45:32:f2:cd:c4:cf:73:ae:
         da:a2:35:8b:45:ea:d9:a4:80:ef:e9:3d:2f:bb:ea:10:4b:d1:
         72:2c:83:82:52:f8:03:55:3b:b5:bd:57:ca:83:0f:e6:37:83:
         6c:d0:13:66:45:c7:ab:ce:85:fc:c6:1e:70:cb:51:db:31:d2:
         78:d7:5c:3e:f2:c0:26:94:bc:77:57:fd:48:a3:ab:ec:ba:fe:
         e4:50:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:47:14 2026 by rpki-client