Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
File:                     b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa (raw, json)
Hash identifier:          yaWJEOOy699ZmWKIOyS4pgkKgTbcMAbfI0lrl3GHclw=
Subject key identifier:   73:6B:B4:29:26:4F:C3:64:1A:E4:6E:54:49:DC:50:E5:6A:5D:D3:81
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F4328584EA78825D5389E207418322280
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23465
IP address blocks:        70.96.220.0/22 maxlen: 22
                          70.97.86.0/23 maxlen: 23
                          70.97.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:25:d5:38:9e:20:74:18:32:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94925656-41bf-4f5f-aef3-c54282055906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:00:0a:1a:77:3a:5c:38:79:bc:44:a3:3e:
                    66:bb:e4:68:5d:f7:df:2c:57:69:77:48:29:f9:b4:
                    b8:90:2b:c3:a4:c7:8b:a1:dd:3a:c9:68:3f:b6:a4:
                    f3:ff:44:bf:d9:32:b4:54:24:60:da:21:a3:d1:db:
                    80:a6:44:29:16:08:1c:0a:5f:01:b8:d7:be:76:ac:
                    ba:b2:7c:18:1e:bd:6e:84:fd:45:72:94:9f:6f:70:
                    7a:f3:c9:48:fa:e7:be:dc:83:83:59:a3:d3:e0:4e:
                    a7:76:9b:db:e4:0b:28:ee:48:e7:b4:b7:e1:7b:3b:
                    8b:0a:50:d3:de:17:7c:48:45:9f:f5:b0:97:be:6f:
                    b0:1a:f9:6d:6f:dd:a7:e3:29:d3:8e:51:26:1a:9e:
                    cf:23:0a:fb:8c:bf:17:e1:90:5d:c3:63:e6:35:24:
                    e9:ab:5c:11:cf:2b:af:dc:48:dd:21:5a:5f:f8:95:
                    f0:38:a7:80:28:ab:e9:54:46:ed:a8:8d:8e:31:c4:
                    3c:85:b5:6d:a3:3f:c5:4d:c7:c1:25:cd:91:64:a8:
                    f6:9d:42:81:6d:23:3c:b9:32:e2:62:1a:67:a4:dd:
                    71:b8:07:9f:8a:b9:f9:36:90:62:bd:30:3e:92:1f:
                    52:9a:74:5c:9e:86:a5:dc:5f:1b:0e:ae:03:3b:00:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6B:B4:29:26:4F:C3:64:1A:E4:6E:54:49:DC:50:E5:6A:5D:D3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b2799ada-1ead-3a9a-9c50-b5b1aa57ae2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.96.220.0/22
                  70.97.86.0/23
                  70.97.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:75:e5:fc:6d:14:51:ab:7b:80:69:f6:47:08:bc:ea:b1:61:
         8d:a5:20:aa:37:e7:80:cf:4a:84:4f:e5:8a:fa:55:3f:b0:c4:
         e4:48:fc:4e:d7:d7:54:cb:74:e9:e6:78:80:2b:f9:5a:7a:d3:
         1a:ce:d3:a2:c7:fe:bb:95:13:5d:ce:e7:5a:3a:5c:09:89:c3:
         44:7b:85:e3:74:de:07:28:1e:9d:2e:43:86:34:fc:3f:7c:5e:
         62:4d:9c:0d:a9:c6:4f:6f:fa:7d:a3:d6:da:cc:b0:81:4e:ee:
         ae:76:b9:f6:be:10:0c:11:84:e7:3b:1c:18:c1:7a:d9:ca:9d:
         48:d3:96:45:a8:55:bf:cd:a6:79:13:e9:d9:0f:b9:e9:3f:9d:
         ac:ac:e3:62:c3:3e:1e:65:9d:28:e1:85:b2:85:f9:5c:6f:c7:
         19:ea:be:86:d7:22:eb:be:be:7c:2e:f0:dd:9c:59:45:9d:00:
         1f:fe:5a:2a:14:ce:43:de:23:01:4e:06:45:07:c4:ef:42:b1:
         e2:88:be:36:3b:b6:7d:35:cd:ec:1b:1e:0f:c0:e2:55:34:b9:
         ec:67:2d:47:1f:84:d8:a9:ae:d6:01:2a:39:e6:8a:2c:cf:66:
         17:0f:ce:99:00:7d:1e:e1:51:d2:9c:13:90:cd:23:b8:5c:7e:
         d6:19:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:53 2026 by rpki-client