Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ecf32efb-4925-3d12-867e-d0574902ce81.roa
File:                     ecf32efb-4925-3d12-867e-d0574902ce81.roa (raw, json)
Hash identifier:          bfNFRHZzfKQlaJRk3vFtFEcAEBdVYOXBi0Xivsovp6o=
Subject key identifier:   7C:BD:84:DA:04:CC:17:45:B7:B1:6A:E3:A9:6F:84:4B:95:A4:19:64
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584E37646156C71A628E4B902440
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ecf32efb-4925-3d12-867e-d0574902ce81.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        70.39.164.0/24 maxlen: 24
                          70.39.191.0/24 maxlen: 24
                          70.39.229.0/24 maxlen: 24
                          70.39.241.0/24 maxlen: 24
                          70.39.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:61:56:c7:1a:62:8e:4b:90:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=28b6f094-dca1-4162-8b2c-df447417c126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:a7:f8:4f:c0:07:14:59:cd:98:f4:d2:16:
                    ec:3f:ce:7b:58:55:71:22:50:a9:c3:52:76:8a:a4:
                    82:dc:81:9a:fa:03:c4:a1:44:9f:38:80:67:6c:10:
                    4e:18:b0:f9:39:e5:d9:7d:91:1c:f1:4f:1d:5d:47:
                    97:66:7b:91:76:1a:9a:e0:75:ee:11:85:bd:3b:65:
                    f2:68:53:98:19:7a:0a:a9:cd:6c:0c:32:24:29:67:
                    1c:0e:5e:88:ff:fe:e0:18:11:5f:87:e1:5b:2e:f7:
                    af:57:9e:dc:38:f7:ea:92:99:5b:d9:a6:81:46:fa:
                    e7:49:79:0c:5c:33:67:22:7e:7e:fd:de:7e:b6:56:
                    92:a3:b3:a5:8b:96:2d:5b:d0:f5:19:d1:80:17:82:
                    53:54:99:d5:f8:97:2b:ed:c5:bd:e4:ba:41:38:f6:
                    9e:06:28:ca:57:bc:59:9d:f7:7a:44:a4:22:12:9b:
                    33:ea:b2:95:b3:6c:9e:a5:4f:2b:3c:2a:ea:bd:a6:
                    db:c7:b3:5e:90:35:d0:ad:aa:ed:03:c7:73:e9:59:
                    1e:a8:df:c3:22:32:aa:f0:0b:a8:9b:31:ef:07:41:
                    f2:4c:7b:bd:55:bf:79:6b:a4:10:bd:76:f9:6b:95:
                    44:ed:9b:49:3c:15:26:a1:b4:27:50:19:31:84:10:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BD:84:DA:04:CC:17:45:B7:B1:6A:E3:A9:6F:84:4B:95:A4:19:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/ecf32efb-4925-3d12-867e-d0574902ce81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.164.0/24
                  70.39.191.0/24
                  70.39.229.0/24
                  70.39.241.0/24
                  70.39.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:03:a0:c8:e9:da:27:51:89:a5:42:8c:9c:86:3e:b5:a7:
         57:7a:35:b7:dc:b7:40:8c:de:18:6b:3d:fa:c7:56:02:72:62:
         a3:ca:23:1c:bc:e5:26:70:65:b6:c8:64:8c:c8:91:0d:05:a3:
         17:c0:12:29:c8:c2:16:5c:5e:04:61:b0:b6:60:b3:9e:04:59:
         ce:f9:98:29:ff:f6:0a:86:78:ec:f5:cc:1e:6a:af:7d:9e:54:
         e1:4f:5a:32:83:50:b7:5d:4a:d4:ab:7f:90:8a:a3:f5:d1:0c:
         30:ee:10:ef:2d:43:55:39:ed:6b:11:5f:42:c7:b3:3a:c9:7e:
         b8:80:d1:db:eb:be:fb:6a:bb:26:fd:c1:4a:8e:91:4c:14:83:
         8b:5e:dd:a6:0c:00:d6:df:41:fe:df:7c:d7:14:4f:f2:5d:e6:
         df:35:e3:a3:96:0d:b2:e2:d8:bb:b0:c5:2f:25:25:04:2a:50:
         74:57:59:77:dc:a7:29:97:77:c8:2c:2c:8d:4d:cd:c0:b9:b1:
         28:d7:c8:b0:b7:55:a0:45:4e:b6:31:b3:38:d6:33:4c:d1:2d:
         00:39:38:eb:25:31:ca:5f:78:91:13:d3:52:cc:9a:32:1f:6f:
         75:5f:66:18:aa:09:9f:42:4b:32:d8:dd:7d:d5:0c:1d:d2:b1:
         ae:66:37:fe
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE43ZGFWxxpijkuQJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MjhiNmYwOTQtZGNhMS00MTYyLThiMmMtZGY0NDc0MTdjMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjan+E/ABxRZzZj00hbsP857WFVxIlCpw1J2
iqSC3IGa+gPEoUSfOIBnbBBOGLD5OeXZfZEc8U8dXUeXZnuRdhqa4HXuEYW9O2Xy
aFOYGXoKqc1sDDIkKWccDl6I//7gGBFfh+FbLvevV57cOPfqkplb2aaBRvrnSXkM
XDNnIn5+/d5+tlaSo7Oli5YtW9D1GdGAF4JTVJnV+Jcr7cW95LpBOPaeBijKV7xZ
nfd6RKQiEpsz6rKVs2yepU8rPCrqvabbx7NekDXQrartA8dz6VkeqN/DIjKq8Auo
mzHvB0HyTHu9Vb95a6QQvXb5a5VE7ZtJPBUmobQnUBkxhBA9nQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFHy9hNoEzBdFt7Fq46lvhEuVpBlkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZWNmMzJlZmItNDkyNS0z
ZDEyLTg2N2UtZDA1NzQ5MDJjZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQARiekAwQA
Rie/AwQARiflAwQARifxAwQARif8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAMrA6DI6donUYmlQoychj61
p1d6Nbfct0CM3hhrPfrHVgJyYqPKIxy85SZwZbbIZIzIkQ0FoxfAEinIwhZcXgRh
sLZgs54EWc75mCn/9gqGeOz1zB5qr32eVOFPWjKDULddStSrf5CKo/XRDDDuEO8t
Q1U57WsRX0LHszrJfriA0dvrvvtquyb9wUqOkUwUg4te3aYMANbfQf7ffNcUT/Jd
5t8146OWDbLi2LuwxS8lJQQqUHRXWXfcpymXd8gsLI1NzcC5sSjXyLC3VaBFTrYx
szjWM0zRLQA5OOslMcpfeJET01LMmjIfb3VfZhiqCZ9CSzLY3X3VDB3Ssa5mN/4=
-----END CERTIFICATE-----
Generated at Sat Jun 20 13:21:20 2026 by rpki-client