Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b89b4e1-bb01-374a-b156-fd53a350e795.roa
File:                     9b89b4e1-bb01-374a-b156-fd53a350e795.roa (raw, json)
Hash identifier:          GVU9VkFAhe2D+ZE0UMBbHz6hHHzY4lt7Wf5NT8Cxncs=
Subject key identifier:   28:58:78:88:5B:2D:86:36:2E:47:D0:2A:E6:DA:54:95:37:DC:4E:57
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DB53578FE019FE5133060
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b89b4e1-bb01-374a-b156-fd53a350e795.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     40715
IP address blocks:        70.61.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:b5:35:78:fe:01:9f:e5:13:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=89e16c1c-d178-45fa-8414-47db3193ec32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:43:0a:fa:19:aa:b2:df:0b:c8:5e:02:66:
                    7a:c1:da:74:3e:e9:ac:9c:3a:4b:34:bb:72:4a:07:
                    7e:64:f6:ed:35:d4:69:f5:ef:7f:b5:50:51:10:c3:
                    93:90:28:47:7a:45:ee:9c:8e:e0:95:34:c2:44:5f:
                    12:6a:81:40:a1:85:42:b9:68:bc:c8:e2:93:db:2e:
                    5b:11:4e:5e:28:05:80:cd:16:8d:3d:7a:09:b5:76:
                    28:17:07:1e:a5:b5:9a:33:30:5b:73:92:6e:f6:dc:
                    c9:70:18:ad:45:df:e8:d9:ed:3f:86:81:06:81:a4:
                    d5:19:84:19:e9:26:5a:13:74:c5:b7:ce:94:b7:9e:
                    a4:95:af:93:b6:98:a4:12:e5:01:ab:a6:36:32:72:
                    8e:9a:7d:a5:f2:b2:5d:02:12:a4:13:35:00:34:a0:
                    7d:a3:4d:c0:3e:b8:23:67:ff:da:34:97:a8:d2:a9:
                    43:14:89:d3:26:5f:13:10:aa:1e:df:0e:78:49:9b:
                    f2:e0:73:35:87:62:54:27:c7:c0:bb:0e:2a:4c:a6:
                    6f:17:a8:29:c1:69:b5:e6:55:62:e4:8c:ff:ac:03:
                    71:f0:51:9d:18:7f:d2:6c:dd:3e:c8:a3:77:ec:e7:
                    92:cc:e4:73:95:68:24:71:7c:03:6b:26:35:55:b5:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:58:78:88:5B:2D:86:36:2E:47:D0:2A:E6:DA:54:95:37:DC:4E:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9b89b4e1-bb01-374a-b156-fd53a350e795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.61.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:00:c1:39:34:7c:c0:3e:36:17:d4:45:5a:ba:ac:e8:29:48:
         6e:1e:82:83:f2:85:da:52:28:aa:6a:76:e2:e4:94:8c:73:62:
         08:b6:93:29:a9:69:07:3d:24:51:ac:ba:e2:3b:41:37:2d:6b:
         e6:b8:5a:9b:12:24:d5:82:67:c0:15:68:ea:b5:92:6d:ea:d0:
         03:34:ea:d6:ed:56:72:7a:84:b1:e6:72:d7:9b:27:41:6c:b0:
         c9:d5:71:8e:6f:23:d3:4d:17:a9:a1:06:07:dd:59:b8:f7:97:
         f4:a6:eb:d5:69:76:45:10:8a:f0:ca:e8:4e:f1:72:d4:c3:0e:
         ea:ec:87:57:c3:d3:f3:15:09:59:d0:56:8a:61:1e:47:c9:64:
         51:c7:c4:b0:99:b0:20:8a:73:7b:6d:0e:48:f4:c3:75:36:54:
         1e:1a:66:e9:de:83:fd:82:a0:ae:0c:1f:3d:20:82:a1:9d:2a:
         f8:68:22:ef:4a:d0:68:1d:b3:0e:de:ed:c2:55:3b:17:d9:a3:
         7a:f8:f1:79:c7:b9:b2:16:88:3a:64:60:b5:52:91:53:b5:9b:
         0c:ef:cd:22:7c:73:6e:c5:bc:26:8e:6a:f2:5f:16:82:6d:13:
         a9:b7:5f:be:5c:ba:50:39:31:d3:8d:92:5f:80:11:91:9d:0e:
         b9:92:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:59:38 2026 by rpki-client