Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2dfc28ae-8db9-388e-b9d4-a71fd1e5341b.roa
File:                     2dfc28ae-8db9-388e-b9d4-a71fd1e5341b.roa (raw, json)
Hash identifier:          /dcMhX7c7E1u6dHOEdUKf0GZG02jdeLwAjHO1Vu5bCM=
Subject key identifier:   E0:D6:7E:C5:0C:F1:73:2E:58:FC:80:F2:AB:A5:8F:85:05:60:4E:09
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584DF958D84BCB564165A25C8A80
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2dfc28ae-8db9-388e-b9d4-a71fd1e5341b.roa
Signing time:             Wed 27 May 2026 15:36:52 +0000
ROA not before:           Wed 27 May 2026 15:36:52 +0000
ROA not after:            Tue 25 Aug 2026 15:36:52 +0000
asID:                     26721
IP address blocks:        70.102.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:58:d8:4b:cb:56:41:65:a2:5c:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: May 27 15:36:52 2026 GMT
            Not After : Aug 25 15:36:52 2026 GMT
        Subject: CN=a675d6ad-bea6-4933-95cb-f96340d1e264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:9c:2c:2b:89:c3:e2:12:2f:cf:81:8e:50:
                    07:86:66:e7:b5:58:a9:44:56:f0:ed:94:65:8f:7b:
                    0f:85:11:30:12:4a:67:0a:4e:c9:a6:c9:63:86:da:
                    2b:24:bf:fb:94:ce:8c:c7:04:68:8d:53:60:a7:2f:
                    cb:10:54:85:10:f1:e3:b5:5d:c7:f5:b5:ba:63:6d:
                    f8:7b:ef:da:67:a4:1f:0f:85:4b:2e:75:4d:86:57:
                    0c:fd:e2:29:12:a7:d0:96:fd:6e:74:58:78:95:4c:
                    99:d3:d5:6a:f7:3e:a9:94:b8:a2:bf:82:43:33:f4:
                    ec:02:4a:7e:13:b7:63:cb:84:cf:94:4e:20:14:7b:
                    78:c7:95:b0:64:22:11:e0:59:40:b1:e9:20:a6:d0:
                    72:c2:2f:5e:a3:0a:ce:ab:12:75:aa:64:1c:e8:14:
                    a2:38:10:51:a5:ff:4b:7c:a6:b8:01:ba:b0:59:02:
                    34:db:aa:4c:1d:01:6b:3b:1b:39:9a:65:12:85:b7:
                    1c:b5:1c:1e:09:22:17:db:bb:0b:06:24:3f:14:dc:
                    92:ab:a4:9f:88:c7:5d:60:ed:4e:0e:41:44:bf:33:
                    a4:52:6b:1a:c8:15:39:61:0a:f2:8d:d0:16:59:ba:
                    dd:67:05:11:94:26:04:16:51:79:eb:dd:41:1f:de:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D6:7E:C5:0C:F1:73:2E:58:FC:80:F2:AB:A5:8F:85:05:60:4E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/2dfc28ae-8db9-388e-b9d4-a71fd1e5341b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.102.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:2c:08:10:28:56:26:47:93:29:05:ad:11:39:20:c1:72:
         72:f3:d6:3c:c7:90:3b:93:db:88:12:be:ab:ed:84:19:80:24:
         8c:f4:4a:dd:e1:3b:10:35:ab:89:c5:1d:0c:73:dc:6b:48:af:
         e8:67:35:00:f8:d7:12:47:02:97:82:9a:5f:3c:12:72:c4:ff:
         e1:95:ca:eb:27:3e:fc:2d:51:ec:97:3b:ce:10:d3:c0:3d:25:
         6e:33:c6:8e:5a:f7:aa:1f:c4:03:89:c9:c9:43:26:b5:06:c2:
         fe:f3:4f:74:b3:3c:95:b2:91:f3:07:33:a6:60:93:e1:4d:38:
         5a:5f:0c:e6:bc:34:9a:50:70:88:9b:5e:22:f3:74:15:d7:99:
         2e:12:15:b7:a4:e3:3a:34:cd:26:b4:57:c7:8a:80:49:35:97:
         2a:f2:fa:f7:e2:9a:15:b6:5c:38:49:ac:a8:a9:ad:57:82:1f:
         2c:41:05:d9:e0:26:d4:c5:94:3e:88:22:e1:88:98:ae:f1:91:
         03:21:72:16:57:b6:81:19:15:3d:22:c5:32:47:65:eb:a1:db:
         d4:89:90:4c:c4:54:69:42:13:f2:73:32:05:ea:f0:9b:1d:bb:
         ea:29:d6:3d:a7:99:af:a4:43:fe:a4:90:0f:85:db:be:1d:87:
         ae:e7:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:54:24 2026 by rpki-client