Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2c5942fb-81e2-3f30-ad4c-7b77d8a87342.roa
File:                     2c5942fb-81e2-3f30-ad4c-7b77d8a87342.roa (raw, json)
Hash identifier:          eP5KdvEOdwlfZmInCnJ/OqykezLNOhxIa+/64ocImjA=
Subject key identifier:   DE:C5:77:A4:F5:3B:AB:71:96:B3:46:B7:0B:4E:A7:45:8D:2C:CC:12
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF321D5B75680436025ACB80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2c5942fb-81e2-3f30-ad4c-7b77d8a87342.roa
Signing time:             Thu 06 Aug 2026 12:28:53 +0000
ROA not before:           Thu 06 Aug 2026 12:28:53 +0000
ROA not after:            Wed 04 Nov 2026 13:28:53 +0000
asID:                     396362
IP address blocks:        70.32.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:32:1d:5b:75:68:04:36:02:5a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 12:28:53 2026 GMT
            Not After : Nov  4 13:28:53 2026 GMT
        Subject: CN=bdc77ee1-50b7-4bfe-94e3-0bf43caba2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:86:88:94:49:61:0e:2a:fe:f7:6d:6f:42:4f:
                    c2:77:a3:2a:36:f5:e0:40:b0:37:5e:31:b8:82:a7:
                    ad:1a:00:33:19:0d:26:53:8a:2c:e0:37:f6:a3:91:
                    d5:61:b1:3c:c1:7a:8c:25:56:24:12:2d:83:fa:76:
                    7d:19:d1:d1:e3:ac:d7:9e:21:3d:97:04:55:4c:55:
                    a7:a4:70:25:3c:1f:30:ec:08:d3:bd:fd:5e:66:05:
                    72:6a:a4:78:56:29:b3:30:b3:09:73:f1:76:b4:f5:
                    7e:00:5a:13:63:f9:7e:13:44:88:c9:55:a6:2b:73:
                    87:6f:e4:5d:83:01:6f:a6:63:a8:5d:ff:ea:96:31:
                    fc:e0:36:f3:2c:f1:16:70:54:9f:19:aa:a4:c2:07:
                    8f:44:df:ef:cc:cf:bf:da:0d:ee:73:87:82:77:87:
                    31:6f:39:2c:b6:7c:39:3a:98:b8:ed:86:49:0a:ab:
                    bc:60:a0:fd:5c:86:0e:1f:16:c5:b5:2f:17:ca:ea:
                    e8:4a:d1:08:57:e9:10:71:e6:46:66:90:3c:64:1f:
                    21:de:39:bf:d2:3b:ab:c0:7e:ce:b7:d1:1b:b2:5b:
                    05:41:6c:a1:04:f0:ac:07:06:a7:ad:05:85:0a:f3:
                    cb:e4:ee:9b:36:ff:08:a5:72:6c:14:9a:7e:da:62:
                    cd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C5:77:A4:F5:3B:AB:71:96:B3:46:B7:0B:4E:A7:45:8D:2C:CC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2c5942fb-81e2-3f30-ad4c-7b77d8a87342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0a:37:28:d4:a3:ab:e7:7a:c0:fb:8a:8c:e9:83:9a:99:72:
         60:c6:fc:e5:f6:9f:9d:61:8a:4e:06:c0:3c:21:ba:e8:2b:c7:
         f4:7c:d1:7e:da:c8:93:3c:3f:b1:c2:80:b3:45:32:17:85:5a:
         ff:0e:1d:01:99:3f:67:70:f0:e9:f8:82:36:bb:83:6a:ec:6c:
         a6:a6:f3:38:4c:9a:2a:9f:d4:ac:95:4e:77:c3:e7:11:b4:25:
         65:00:69:4b:0d:26:72:89:21:a1:5d:9a:c0:1e:99:8f:52:23:
         b5:3f:fd:7e:70:9a:a8:27:b0:11:d1:54:a9:f1:63:c4:bc:dc:
         00:b1:fb:a2:20:02:37:55:61:0f:9b:7c:89:3f:c9:e5:a6:54:
         10:19:d4:67:53:b3:a8:1b:52:3a:fb:d6:88:d9:cf:76:5a:6d:
         46:13:6b:ef:42:ef:81:da:c2:6b:1b:5f:a2:76:06:97:71:f7:
         91:f3:3f:f8:bc:37:03:ac:16:b2:a6:9f:6a:b0:19:c9:da:0c:
         e8:34:f3:24:b8:bc:1d:2d:f0:e7:41:93:ac:7a:b4:18:a6:b2:
         24:21:59:34:f5:9b:54:c9:db:00:45:d3:5b:bf:c6:e7:6d:e8:
         fa:63:fb:de:53:32:ac:46:26:02:2c:d1:35:54:27:f0:0c:84:
         73:11:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:14:17 2026 by rpki-client