Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/5293862a-1d99-3b6f-8dde-810ae5b3ee5f.roa
File:                     5293862a-1d99-3b6f-8dde-810ae5b3ee5f.roa (raw, json)
Hash identifier:          j2nDTR4XxD+TNjV0rNyV66/Ic79yp6tPI/3LnK6xIW8=
Subject key identifier:   83:8D:69:25:0B:16:F9:36:83:78:E7:FD:7A:C5:A3:03:1E:43:C1:E2
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584F5CFD59A8B47C9D8CC6A69E80
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/5293862a-1d99-3b6f-8dde-810ae5b3ee5f.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     40933
IP address blocks:        70.33.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:59:a8:b4:7c:9d:8c:c6:a6:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=0ebbea3e-4670-4040-b6a0-e9607bef8c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:d3:b1:2a:cf:35:0d:58:42:30:4e:cb:10:
                    9c:0b:e5:b0:3b:23:fe:7d:f3:ec:8b:91:f3:79:97:
                    83:a5:e1:1d:3f:fb:b7:c0:77:88:f6:2e:ce:bc:b8:
                    7b:a9:dc:98:73:d9:65:c6:bd:b6:6f:dc:0e:b2:55:
                    77:a4:af:2f:fc:3c:f8:85:b3:4a:a4:47:9f:17:5d:
                    46:66:de:95:09:49:84:90:a7:85:35:26:86:d7:18:
                    cc:c5:75:b6:60:a0:72:6f:da:57:38:09:27:81:9f:
                    59:ad:af:87:3b:a7:39:8e:07:f6:3e:cd:9e:94:27:
                    73:86:33:c2:a7:71:4f:7e:eb:50:5a:4b:9c:9c:90:
                    6b:00:2b:87:df:82:7b:17:82:26:b6:b7:62:34:ba:
                    98:b0:b8:0c:d1:85:e4:4e:88:4f:d9:f9:d6:5d:47:
                    fe:14:94:f6:dd:48:11:e0:cf:3b:93:60:ef:78:e4:
                    b0:07:88:a3:b4:c8:45:27:eb:1a:02:05:50:24:d6:
                    f4:eb:82:96:62:45:e8:58:62:58:61:df:52:db:73:
                    a2:b7:d6:c3:73:47:c1:d4:df:c0:ff:c9:7e:6a:f2:
                    1f:70:2e:ee:a4:6e:6f:72:43:f1:cc:c5:bb:64:bb:
                    31:c5:0a:6a:ad:83:66:8a:fb:b7:29:49:0b:6e:bc:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8D:69:25:0B:16:F9:36:83:78:E7:FD:7A:C5:A3:03:1E:43:C1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/5293862a-1d99-3b6f-8dde-810ae5b3ee5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.33.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:06:0a:58:4d:bf:a4:e2:67:53:4a:33:3a:03:b8:dc:70:b7:
         58:e1:a7:25:e8:81:fd:65:92:2e:1f:e3:3b:3d:21:63:3b:83:
         fb:7d:2a:7e:5e:9a:e3:c6:fa:4d:d4:57:c0:a2:91:b7:aa:81:
         5a:da:59:57:6e:a0:db:06:0e:06:16:8b:a9:38:46:0d:3e:11:
         33:c0:10:36:cb:ba:21:3f:1b:98:8f:6f:69:6f:2c:bb:78:d5:
         f6:24:21:d9:33:73:bf:2a:f8:4c:7a:8c:80:eb:b5:2d:f7:02:
         7f:3f:da:68:89:a1:14:38:73:c6:8d:e5:7f:de:67:47:48:68:
         29:3b:39:81:de:2a:33:38:f2:97:7c:6e:55:dd:d7:83:a3:e3:
         dc:a7:e7:c8:6b:01:45:6d:43:39:fc:9b:1d:8f:c0:c5:29:9f:
         65:c5:a5:d2:c3:3f:89:5b:02:bb:84:5f:c7:75:9a:44:2c:96:
         36:2b:cd:95:71:80:2c:8d:b9:e0:4f:f8:ee:14:0b:52:df:f7:
         5f:dc:1f:b3:1b:eb:94:14:81:05:26:7d:17:c0:92:7a:f8:dc:
         8a:88:df:68:74:41:60:66:a4:bf:ca:ef:0b:84:bf:8e:78:03:
         8d:52:0f:06:ab:c1:7f:95:d9:f3:15:f9:ae:48:49:7c:18:75:
         28:26:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:24:10 2026 by rpki-client