Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/dd289160-8a5a-324b-a5eb-09e5a50db462.roa
File:                     dd289160-8a5a-324b-a5eb-09e5a50db462.roa (raw, json)
Hash identifier:          FZStezDiH+waw5te8FMhrawgb+Sxz04QoW1EE02/3ZM=
Subject key identifier:   E3:93:29:F8:24:FE:0C:DD:0D:41:38:B5:61:86:33:4C:51:D3:5F:72
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EED51F88CC12410D94E44C440
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/dd289160-8a5a-324b-a5eb-09e5a50db462.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     7385
IP address blocks:        70.98.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:f8:8c:c1:24:10:d9:4e:44:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=843964b7-cd00-476e-aaa5-c5d2f4a57b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:b8:7d:b7:b3:e2:1d:f4:77:14:e8:58:06:
                    66:44:53:7c:b4:2f:28:c7:61:a2:6a:df:f2:2f:9c:
                    a0:d6:8e:80:03:6b:e9:c4:ee:80:46:8d:80:ce:4c:
                    73:a9:50:c8:91:66:fa:a4:33:e3:a1:4f:ad:08:a1:
                    44:9d:c2:3b:e8:e7:39:79:51:a5:e4:e4:fa:80:7a:
                    97:36:87:c4:f2:b4:6e:90:8f:53:be:2b:19:06:8f:
                    9e:e2:ad:92:3f:ff:b9:70:1a:fb:89:2e:44:2e:74:
                    b9:06:3c:9f:92:62:f4:ad:e3:05:a6:6e:3b:27:f5:
                    f5:46:8b:ff:8e:74:e6:4f:30:8d:dd:a3:73:39:98:
                    32:96:45:28:13:47:78:70:86:d6:84:b1:76:47:7f:
                    69:17:e3:93:78:1a:47:25:37:0e:c8:3f:a5:ff:9c:
                    90:7d:12:65:11:3e:6b:68:d9:31:e7:43:a4:54:31:
                    c8:61:b6:7f:33:a8:51:fc:97:30:e7:8d:6f:9e:9f:
                    54:2f:a1:e6:5c:28:fa:ec:32:c0:b6:a2:dd:67:2b:
                    9f:56:55:c0:53:ca:97:97:16:68:4c:a1:fe:26:01:
                    5b:5d:72:a4:d2:35:50:68:ec:81:ce:87:ec:4c:53:
                    af:98:1d:be:85:af:63:34:96:06:95:4a:58:68:5f:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:29:F8:24:FE:0C:DD:0D:41:38:B5:61:86:33:4C:51:D3:5F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/dd289160-8a5a-324b-a5eb-09e5a50db462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.98.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:02:b3:9c:89:a6:ab:8c:e8:67:d4:bd:91:ea:59:d2:03:
         b4:7f:36:29:43:53:f0:be:c9:42:6e:a3:77:b8:c5:a9:92:7e:
         c6:ef:ca:78:85:9a:bd:bf:2e:0c:e4:67:9d:9a:2f:21:70:27:
         42:0f:d4:68:42:fb:08:ae:3f:8b:d7:f7:2b:de:a4:f6:cd:0a:
         69:8b:a8:ef:fe:46:43:2c:d0:5e:f5:1d:dd:4c:d1:2d:78:2a:
         d2:4d:9f:d1:98:1a:be:57:b8:1a:ac:73:88:d7:b2:14:99:1f:
         7b:b1:39:d0:eb:bb:c7:21:a2:2e:c0:b5:1d:e5:ba:8f:77:ad:
         35:04:bd:8f:ec:19:2f:4d:3a:f2:d2:30:51:33:04:61:a4:d0:
         d9:62:f1:d8:3b:2c:25:19:ee:b2:b4:05:23:c8:c6:2a:1e:7b:
         4f:a1:83:e9:04:54:f2:b8:e7:70:43:d2:13:61:c1:72:58:05:
         c7:3d:cb:55:50:d9:bc:14:b9:a8:cc:f0:c9:e3:ce:08:1f:f7:
         41:33:1e:33:0f:af:a4:1e:71:71:7b:ec:e1:cc:9c:7f:b2:00:
         79:d3:b1:97:67:cc:bf:9b:91:e0:a5:1d:27:e8:22:55:1a:43:
         51:9f:de:b6:a6:02:57:e4:da:50:9e:06:17:99:48:74:f3:fc:
         9c:7d:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:24:18 2026 by rpki-client