Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
File:                     1e6d92e5-d123-30be-b170-e56ac208e478.roa (raw, json)
Hash identifier:          qy3nrP8PuDIgW1eLk19AvZiKvKOOIm/4J1bfJqh4oL0=
Subject key identifier:   3F:03:C8:04:6D:A6:39:D8:13:D0:90:C4:85:37:D6:2B:6F:4E:4C:AD
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584CCD0CA513EA1E127C49FC8480
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     20473
IP address blocks:        70.34.192.0/19 maxlen: 32
                          70.34.240.0/20 maxlen: 32
                          208.72.152.0/22 maxlen: 32
                          208.76.220.0/22 maxlen: 32
                          216.238.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a5:13:ea:1e:12:7c:49:fc:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=8ef0806e-1154-465e-acda-8d448d416e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:b0:45:bd:5c:69:86:cd:8b:49:6d:cf:c7:
                    9c:36:61:01:c1:d0:c9:3d:b5:f4:46:b6:c2:47:9b:
                    72:46:84:b2:6c:0f:79:03:55:40:1c:db:c0:17:12:
                    17:26:93:ce:20:d0:96:30:11:3a:5a:ae:03:eb:f2:
                    5f:57:5c:1b:12:4e:54:a2:49:39:e2:08:f0:82:02:
                    dd:45:21:67:dc:71:4c:73:4f:14:52:8b:d9:47:44:
                    80:5b:72:64:b4:74:76:65:39:06:2a:be:db:75:b1:
                    2f:37:ea:7e:17:3c:3e:cf:3c:92:9e:df:f2:61:45:
                    4d:38:57:ab:ed:e9:5f:4d:53:bc:22:4c:43:82:9c:
                    33:ae:bf:af:09:f4:56:bb:c5:35:ba:ae:fd:e6:42:
                    f9:a7:57:cd:7b:e7:59:a5:c2:19:1f:91:cd:bc:56:
                    88:89:f7:45:29:2b:80:2c:49:78:29:a2:a5:d2:9f:
                    01:50:83:a6:c9:b3:fc:5a:e9:cf:a3:4e:59:60:b4:
                    d1:91:30:b0:6f:59:f9:d9:af:74:56:bf:0d:17:1b:
                    2e:03:15:d8:1b:c6:b6:09:be:7d:3a:a7:55:b0:81:
                    86:7e:7c:a3:54:b0:a9:67:80:ff:e4:a0:b9:e4:44:
                    b0:19:bc:36:9c:fd:aa:dc:b5:79:cb:5c:fd:0e:71:
                    38:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:03:C8:04:6D:A6:39:D8:13:D0:90:C4:85:37:D6:2B:6F:4E:4C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/1e6d92e5-d123-30be-b170-e56ac208e478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.34.192.0/19
                  70.34.240.0/20
                  208.72.152.0/22
                  208.76.220.0/22
                  216.238.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:8a:dd:ba:e2:85:9f:aa:6d:f2:26:11:ef:7a:9c:fc:52:
         c9:84:57:9d:b7:09:32:77:a1:06:dd:db:0d:30:4a:f9:06:ec:
         13:99:07:3b:ad:45:87:f2:e3:ee:ff:68:77:a9:17:91:ae:b7:
         2a:6c:f7:33:db:d3:c5:a2:ac:de:5c:93:76:84:ef:b8:ce:7e:
         6c:e1:2d:cd:04:91:02:82:00:6a:b6:56:05:ea:39:f0:b7:23:
         62:58:49:79:9a:42:47:2e:29:6b:1b:75:9e:01:43:a5:c8:5d:
         66:8e:73:7b:8c:ee:26:3b:e1:98:12:13:77:6a:a0:9f:2d:35:
         8e:32:51:2c:9c:29:77:90:02:81:30:f1:eb:fa:1d:c2:a8:24:
         27:75:e7:f4:84:5e:48:df:15:44:fa:5c:be:3f:b0:9e:29:ab:
         f6:70:35:ad:94:24:77:12:a1:69:16:a7:22:55:b7:63:03:8f:
         5a:d9:bd:69:eb:77:52:05:3b:8b:c9:c8:07:a9:08:b5:d4:15:
         e0:56:05:70:e7:16:a8:26:ad:b7:c9:d7:e9:01:f4:9c:21:e0:
         99:9c:8e:32:8b:2a:62:c7:ce:e0:eb:d4:2c:44:c4:14:c7:2d:
         40:5f:f1:6f:7d:d2:a3:0c:31:94:52:a3:f9:03:cc:7c:71:aa:
         6e:a0:80:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:22 2026 by rpki-client