Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/d1ec1fed-c9a8-32db-93fc-930eeedff6d0.roa
File:                     d1ec1fed-c9a8-32db-93fc-930eeedff6d0.roa (raw, json)
Hash identifier:          cEZ75y/yrcu+N5m6wdAJT6muvNXRhX0czPlVbTmhVcU=
Subject key identifier:   03:8B:E0:FF:D8:2B:6D:34:CB:B8:9E:C7:E4:64:71:82:35:9B:13:BE
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA97455A2AA0CBEA7E7DDD50
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/d1ec1fed-c9a8-32db-93fc-930eeedff6d0.roa
Signing time:             Tue 04 Aug 2026 20:53:39 +0000
ROA not before:           Tue 04 Aug 2026 20:53:39 +0000
ROA not after:            Mon 02 Nov 2026 21:53:39 +0000
asID:                     40933
IP address blocks:        70.33.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:97:45:5a:2a:a0:cb:ea:7e:7d:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:53:39 2026 GMT
            Not After : Nov  2 21:53:39 2026 GMT
        Subject: CN=ba4ab011-dc93-4210-857f-63e24b026fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:c9:37:a3:88:58:01:d0:67:b8:be:bc:a0:
                    3e:4e:af:c3:4d:59:05:8a:3e:09:3d:83:76:31:27:
                    9a:8a:7a:0e:82:d4:fc:8e:b4:04:85:f9:80:e5:61:
                    07:a1:20:77:ff:63:84:e1:23:0b:b6:ef:94:37:2e:
                    c6:0e:29:36:a1:39:83:f6:a0:c8:0f:45:86:5f:61:
                    56:26:6b:2f:ec:b8:71:24:dc:f3:7b:48:a7:e4:45:
                    f1:77:94:43:89:a9:89:c8:ab:45:75:f7:4c:c1:06:
                    d9:bd:83:76:47:fc:11:e6:bf:af:a1:0c:0c:af:3b:
                    8c:5a:58:e0:35:64:2c:0e:4c:a5:ed:ac:82:b1:83:
                    67:48:ce:93:ab:e1:12:40:0c:ad:63:95:0f:82:b1:
                    25:b9:c4:fc:0c:20:43:60:a6:7e:67:70:de:50:45:
                    36:f2:2b:b3:31:d2:5c:e2:6e:49:cf:2d:3c:db:92:
                    5a:06:78:87:a0:4d:ad:86:85:84:29:13:1c:65:69:
                    51:2c:d4:89:0c:58:3c:06:a5:92:b9:d5:2a:46:de:
                    35:ea:e4:5e:d4:e0:a0:f3:eb:54:93:40:b7:2c:b0:
                    21:4f:7b:91:67:84:71:b4:0e:cb:2e:f5:62:76:35:
                    57:aa:3d:d4:a0:e8:c5:ee:58:d3:24:43:ee:d9:ef:
                    ea:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:E0:FF:D8:2B:6D:34:CB:B8:9E:C7:E4:64:71:82:35:9B:13:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/d1ec1fed-c9a8-32db-93fc-930eeedff6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.33.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:24:49:f2:23:44:12:44:6d:f1:d9:64:bf:37:dc:73:2d:0a:
         1c:01:4c:b5:2a:0c:05:72:86:d9:46:62:2c:f1:9d:67:cc:a9:
         76:21:ca:e6:cc:28:dc:8a:eb:12:9f:c1:1b:56:6d:bc:92:58:
         da:0f:dd:70:20:3f:ce:35:ce:91:8d:2e:c3:f4:28:20:92:55:
         5f:06:0d:6e:8a:66:af:66:a7:5c:02:0d:86:27:0e:fe:87:c8:
         b2:4a:4b:b6:c5:28:91:f7:cd:9d:90:cd:2c:f1:5d:75:4f:51:
         d2:e3:0d:1d:35:87:d2:64:eb:62:af:eb:0c:fc:a3:1e:a5:8f:
         5d:72:31:5a:e4:42:84:41:c0:f2:2b:6e:b7:f7:ed:ae:e1:64:
         28:ce:e2:21:45:fd:33:89:21:e0:64:b8:e8:49:85:58:6b:41:
         4c:d9:21:be:d7:a8:05:1e:9d:41:a7:eb:e1:a8:e0:e1:62:39:
         7e:f3:76:9d:37:94:58:e9:1f:be:be:e8:1b:a8:77:82:7a:13:
         bd:60:7f:ca:44:63:ba:ca:20:17:24:46:2e:0c:a0:b6:50:b4:
         9f:ec:54:a0:64:88:e0:e6:cd:b7:e9:02:26:67:83:89:cf:dc:
         ae:3f:54:a4:43:bc:f1:a7:60:df:ed:f5:1a:46:70:74:41:70:
         c8:01:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:20 2026 by rpki-client