Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
File:                     31a7d06e-f401-374d-a3e0-58275ee35373.roa (raw, json)
Hash identifier:          Tb4cLRgJ4XQmIIcgcbaqV+F7jQ/8JW3Cxh8DjnHo5m4=
Subject key identifier:   C0:D2:02:8F:65:1C:F9:D1:3A:34:8C:3B:9E:88:9C:D3:2D:52:DD:17
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06721DE980A4E542F6FABA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     855
IP address blocks:        70.31.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:1d:e9:80:a4:e5:42:f6:fa:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=128a128c-7211-4868-bab2-d04807080add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:f2:12:ff:3d:d4:f6:48:62:44:50:09:2c:
                    68:78:cf:93:4c:eb:f3:da:44:71:2b:42:e1:cc:a5:
                    d6:d6:b9:0f:72:8c:5a:47:3b:44:83:11:0d:3c:e0:
                    6a:4d:b6:da:14:a4:84:f2:0b:60:0d:fb:28:f4:4e:
                    0c:8d:0f:6c:bf:c1:d6:f7:23:d4:06:ad:70:6e:f0:
                    68:46:f4:2e:39:82:58:46:dc:31:bb:39:a3:73:43:
                    d4:df:b1:ed:d4:f0:73:c7:08:1d:b5:2c:de:3d:4f:
                    9b:b5:1a:76:d3:74:e3:d4:e5:a0:f8:71:0f:af:79:
                    4b:b5:4a:25:70:d5:c4:50:0a:f8:2b:24:86:56:a9:
                    f4:22:66:8a:53:eb:a5:25:06:d4:ff:cf:ae:f3:86:
                    8b:2a:28:c4:e2:85:40:22:8e:48:07:35:36:35:20:
                    6d:db:53:db:a6:4e:56:2c:cc:34:83:d6:00:21:bf:
                    45:9d:ce:24:e5:c6:e9:d7:ad:46:ca:5b:f7:d5:75:
                    f7:72:e5:95:2c:9a:ef:74:40:fa:a9:f0:c8:1d:89:
                    06:eb:60:f1:bc:cc:d3:19:09:80:e6:89:cd:4d:17:
                    13:1b:cc:d1:84:66:c4:99:16:a9:c8:5f:cc:b6:33:
                    f5:4a:6e:20:3f:7d:dc:da:d3:c2:a3:ca:36:bd:e2:
                    c5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D2:02:8F:65:1C:F9:D1:3A:34:8C:3B:9E:88:9C:D3:2D:52:DD:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31a7d06e-f401-374d-a3e0-58275ee35373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.31.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:50:75:47:4a:b8:1d:0a:84:ff:7a:65:be:ce:16:94:c1:
         90:4b:d0:5a:c7:6e:8c:88:dd:14:c5:c9:d8:9b:98:0e:c6:9e:
         d6:6e:be:95:c1:2b:ed:52:37:1f:3d:ff:5c:e3:b1:0d:01:48:
         6b:c0:40:63:61:cf:df:37:01:00:37:56:61:b9:25:1d:50:e8:
         3b:18:cb:cf:fc:df:d0:c4:8a:7c:a1:ba:66:83:7d:8b:ef:60:
         33:b6:de:a0:62:ae:05:89:8c:7c:f5:47:95:3f:b9:ae:77:21:
         08:26:cd:71:4c:7e:48:fd:98:20:95:a7:ef:e7:a6:b9:a3:ae:
         e2:fc:22:46:3c:3c:e6:43:e0:1e:41:36:db:a3:91:13:e5:0f:
         3d:c2:8d:08:0a:e6:72:08:3d:b6:36:74:fe:a6:34:02:f4:40:
         4f:99:ff:b9:12:52:05:f8:d4:d6:ea:fb:4e:22:de:5f:4e:25:
         d3:57:13:71:8a:33:11:c3:c4:fe:ee:c0:00:21:9d:37:0d:2f:
         28:61:21:69:11:83:6c:ad:6c:21:ad:0c:aa:e2:62:8b:84:66:
         66:ae:bd:0d:51:bd:29:4d:c6:aa:7f:df:f7:77:8a:03:b9:b0:
         41:cb:bc:f1:9c:07:b9:26:a4:84:a3:fb:b8:68:a5:e0:0b:4b:
         95:e7:17:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:42:26 2026 by rpki-client