Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b8ef0fa-f2a8-32e7-bffb-e286ad0350d0.roa
File:                     2b8ef0fa-f2a8-32e7-bffb-e286ad0350d0.roa (raw, json)
Hash identifier:          JX6cPNfuwswqQcLl4necZSOKhDyHijmn7TtOwcRWZCQ=
Subject key identifier:   21:11:47:E7:D3:7C:4E:37:2B:2C:C9:1B:E6:36:0B:D3:DB:7F:59:E3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC371D29BBA3983BC452954C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b8ef0fa-f2a8-32e7-bffb-e286ad0350d0.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10796
IP address blocks:        70.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:d2:9b:ba:39:83:bc:45:29:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=42f18ec3-bcef-450c-ad39-56828ca55383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:6f:37:1e:57:d0:0d:7c:7e:bc:31:21:3b:
                    da:f9:37:d4:7e:14:80:30:ad:7b:57:4f:f2:2f:f8:
                    bb:90:cf:09:43:11:fa:67:14:61:43:67:24:19:80:
                    b8:1a:55:89:b0:c8:0e:c0:45:5a:4c:b3:7b:29:71:
                    d7:6d:9e:a8:65:dd:7c:15:67:a2:0b:fb:05:93:b8:
                    f5:0b:c2:40:74:d2:ee:9a:78:9d:87:b7:ec:18:0a:
                    36:a5:25:08:04:54:37:78:af:f2:9c:b2:7a:a3:a0:
                    97:94:ef:93:e6:4a:03:3b:70:eb:81:66:ee:56:74:
                    bd:17:f2:34:99:38:39:0b:e5:2a:c5:c7:1b:8d:7f:
                    34:d2:e4:5a:00:6f:a0:74:4c:8f:e0:2f:fe:de:38:
                    d2:00:00:d6:a3:37:29:2e:ca:68:a4:66:2f:8e:22:
                    46:9d:29:1f:1c:fc:77:76:77:d3:00:51:07:b7:bc:
                    a4:19:7c:47:67:4f:6a:c8:15:ef:07:a2:71:aa:8c:
                    8a:23:46:f7:6e:d6:a8:ac:df:52:da:3e:67:9b:fb:
                    d5:1a:68:92:cd:b6:61:79:a0:c3:41:6a:e1:8d:13:
                    f1:c9:94:3e:4f:f3:bb:31:71:e2:18:bb:37:cd:24:
                    63:23:85:9f:3b:af:8b:66:5d:bc:d2:77:af:bc:b4:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:11:47:E7:D3:7C:4E:37:2B:2C:C9:1B:E6:36:0B:D3:DB:7F:59:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b8ef0fa-f2a8-32e7-bffb-e286ad0350d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:66:27:ed:5b:8f:27:b5:0b:19:58:c2:ad:72:1f:97:ee:30:
         53:65:04:f1:c9:b5:73:1b:c4:4b:75:8c:b2:32:e3:fd:d0:c7:
         4e:6b:ae:71:1f:ef:ff:ba:dd:e5:b9:1f:61:e4:a0:7c:f2:ea:
         ba:d7:cd:f5:11:47:e3:74:ca:89:44:48:03:55:61:8d:ee:1f:
         4b:57:30:91:2c:d1:42:89:fd:45:fe:41:91:63:5a:cb:e0:37:
         47:a6:64:87:96:b9:b5:e1:a5:8f:ba:52:0b:c7:b9:19:1a:d6:
         1c:99:f4:98:b0:23:0b:44:7e:5f:e9:31:f8:7d:48:13:56:7f:
         22:a9:eb:99:5a:65:3f:73:0e:db:83:45:dd:86:55:16:87:4b:
         88:69:cc:ee:e6:13:4e:e7:0d:4b:56:c3:31:d7:da:b1:0a:65:
         3c:87:70:72:01:24:ce:91:65:e1:59:e8:ba:34:15:6b:fc:ec:
         9f:c1:dd:2e:ee:d1:16:f1:7d:85:4d:4a:d1:5d:72:4d:14:99:
         7c:21:bf:ff:f1:31:cc:20:65:a6:cf:1b:c2:87:e9:c2:94:d5:
         01:74:ca:cc:38:50:b9:87:26:66:77:1a:a8:ab:65:cc:fa:7b:
         bb:c1:9e:9b:c8:ff:24:ec:b9:12:37:a1:5b:b6:2d:92:0d:a0:
         ac:eb:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:22:38 2026 by rpki-client