Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/70f8ff8a-8ec2-3f13-ac30-9a08da50dddf.roa
File:                     70f8ff8a-8ec2-3f13-ac30-9a08da50dddf.roa (raw, json)
Hash identifier:          SdQ3GCc9zRMcFctADRvEhWeWuo2AZdNngnmd5xRNAZg=
Subject key identifier:   24:70:7D:86:ED:C8:06:91:34:BE:7E:C2:E1:C3:52:E6:7B:50:CB:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672299508E86693018E1F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/70f8ff8a-8ec2-3f13-ac30-9a08da50dddf.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     15321
IP address blocks:        216.208.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:29:95:08:e8:66:93:01:8e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=44a492b8-93c2-48f5-be87-a3826b73f631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:91:55:c4:88:95:99:57:0d:e3:52:3f:71:
                    a1:a9:9f:a4:a1:75:4e:27:5e:f0:78:ae:a5:88:db:
                    e0:4e:e0:d9:a4:a0:78:75:b7:52:af:cd:22:3b:e0:
                    b2:61:bc:34:e4:4e:64:4e:75:a0:d8:03:1c:72:4a:
                    68:52:c3:ca:c1:bd:ff:ff:46:a1:99:3c:8f:b7:35:
                    73:5d:d9:7c:27:c2:5f:51:71:64:c7:18:33:cb:d2:
                    1a:1f:f7:b3:1f:8c:49:73:fe:5e:40:3b:3c:b5:cf:
                    d7:51:8c:37:62:4b:f6:62:76:0a:7b:71:df:bb:55:
                    ec:e4:4d:b8:fd:b4:d7:bb:65:9e:e4:df:1c:4f:90:
                    55:ec:cc:fb:b3:be:d8:5e:d4:2a:72:d7:2f:8f:97:
                    62:69:d4:10:5f:24:52:96:8a:23:62:52:5c:86:15:
                    b9:73:b7:d5:97:c8:5a:db:32:aa:b7:f7:92:63:bc:
                    2f:bd:34:b7:8c:f9:a9:ca:ee:15:b3:7e:7e:b7:5c:
                    b3:c1:6b:0a:27:cc:b1:99:27:bd:f9:e2:cb:60:ba:
                    72:b3:87:23:a4:aa:c1:4e:36:b5:8f:92:e2:1c:e2:
                    0f:66:6e:d0:4d:5d:22:19:1b:98:ce:a7:73:1a:93:
                    2b:82:6c:b6:9a:2d:a2:08:1b:a9:02:ea:9b:92:c6:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:70:7D:86:ED:C8:06:91:34:BE:7E:C2:E1:C3:52:E6:7B:50:CB:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/70f8ff8a-8ec2-3f13-ac30-9a08da50dddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:09:42:79:5d:74:67:d1:6a:92:6d:64:c9:0c:ef:0b:65:
         b6:62:f1:2f:5c:a6:ee:cc:04:ae:40:79:96:6f:08:50:ef:a1:
         e2:ea:84:0a:90:de:14:fe:59:88:50:12:97:6f:57:b3:fb:74:
         91:f9:c4:ec:f4:f8:ef:c2:60:27:a4:89:3f:22:96:0f:08:96:
         7e:17:8b:17:43:f9:a1:a7:de:2d:f4:dc:62:34:12:1c:90:31:
         fa:c7:d9:fc:60:f7:60:e7:c4:46:5d:ce:d6:05:0e:12:f6:69:
         60:b2:0b:03:88:f9:d3:cb:97:09:a9:a9:27:fe:c1:2b:78:d1:
         7d:a1:0e:2c:12:da:45:5f:af:97:42:3b:fc:d9:d3:91:ea:9e:
         5c:2a:95:58:0b:18:67:a5:e2:98:fe:83:91:88:31:b9:49:08:
         6e:21:5b:02:d6:fa:13:af:1d:8f:4b:ab:ea:26:06:78:dc:a9:
         0d:de:b4:7c:b3:56:32:99:a2:b3:02:73:d5:9d:2b:a9:7e:06:
         a5:e1:75:47:c6:c2:9d:4d:1a:f8:38:72:79:5a:81:9b:12:06:
         bf:1d:75:2f:23:e0:49:0c:87:b0:be:09:d5:13:f4:51:ae:f0:
         f9:f2:e5:2a:e3:ad:e2:8f:a8:10:d1:00:62:5f:e2:02:e8:72:
         74:16:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:41:40 2026 by rpki-client