Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa
File:                     b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa (raw, json)
Hash identifier:          OeToy2jRaNiK53oKW4aIZpEqds1YtvsIWkumkZ7ro94=
Subject key identifier:   B7:38:E6:4C:38:8F:6D:4C:DB:F7:75:19:C2:5B:92:D5:56:B1:93:46
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584CC1E1CAACD02BDC8689115320
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa
Signing time:             Thu 05 Feb 2026 02:00:31 +0000
ROA not before:           Thu 05 Feb 2026 02:00:31 +0000
ROA not after:            Wed 06 May 2026 01:00:31 +0000
asID:                     16504
IP address blocks:        156.70.124.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c1:e1:ca:ac:d0:2b:dc:86:89:11:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Feb  5 02:00:31 2026 GMT
            Not After : May  6 01:00:31 2026 GMT
        Subject: CN=609f3c61-9d30-447c-9586-e5ef0d0f9bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:75:e2:b3:7a:05:99:44:52:df:71:df:d5:
                    91:3e:93:f5:36:73:4e:a3:c2:82:e6:f4:0e:fb:79:
                    64:48:20:00:9f:02:d7:2f:6a:ca:88:f5:e9:e4:ed:
                    ce:f7:10:e7:6a:89:07:9f:63:a5:34:6d:18:20:29:
                    51:2b:ae:c0:f9:25:b6:25:c9:b3:95:e7:f0:b5:c0:
                    af:87:4b:7a:b4:8a:b3:df:48:f4:01:9f:dd:22:24:
                    1d:ed:0a:1d:87:60:5e:ad:ff:7b:41:21:ac:79:38:
                    e8:4e:2d:fb:ed:44:d8:b8:45:70:de:4c:e7:f9:31:
                    ab:a5:74:19:00:3b:be:be:15:8c:34:fa:4c:1f:04:
                    83:54:59:89:8b:11:fb:da:85:d8:0d:2f:f5:31:a3:
                    1e:98:fd:b5:da:ae:bf:40:2b:cc:bb:87:71:03:4d:
                    b9:22:4e:77:81:65:d2:2f:d2:9f:d6:74:42:b8:9a:
                    03:1a:8f:6a:e2:f1:5d:75:ba:8d:a6:22:ae:60:07:
                    9f:9f:a3:16:34:b4:84:32:1f:fc:b8:ec:9b:01:f8:
                    b2:70:81:26:d4:96:6d:89:f5:58:ba:b9:d1:e5:47:
                    23:3b:c4:4e:a5:0a:e0:8e:10:ec:e0:c6:90:0d:18:
                    2e:b3:51:a5:d4:2d:96:25:01:aa:80:cc:5c:e9:58:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:E6:4C:38:8F:6D:4C:DB:F7:75:19:C2:5B:92:D5:56:B1:93:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b3055c3c-6696-3a93-b3c1-612cbdb442b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.70.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:66:f5:25:56:74:57:ce:5d:d5:f1:2c:5e:b9:c4:1d:4f:8d:
         cb:d6:eb:c8:ea:49:9e:e6:10:37:a8:1f:58:f9:d1:50:4b:f4:
         c6:d6:83:02:27:ba:e4:aa:db:9e:b3:8d:36:5b:be:e5:6e:be:
         68:0c:ac:b0:22:64:36:89:ea:83:82:68:3a:ad:ff:67:b3:d4:
         64:a5:30:60:c6:e1:0d:32:2c:d5:1e:23:96:63:e3:b9:fa:62:
         dc:97:ec:96:a5:3b:24:b7:b8:e1:af:33:da:a6:fa:20:82:5c:
         db:6e:ae:28:89:b6:77:3d:ea:c8:b7:81:96:9d:c5:90:be:12:
         ba:f7:25:c4:7e:51:f2:44:bb:fe:71:fd:5f:a5:20:03:a3:03:
         32:2a:29:5b:2f:8d:0e:92:15:a6:5b:a9:fa:36:21:c4:1a:b4:
         12:3e:df:a9:86:1a:cd:5e:25:9e:4d:91:7e:2d:2f:bf:80:a5:
         aa:66:a2:8b:6e:d5:1a:d0:c2:10:76:82:ee:41:56:50:68:33:
         b3:58:b6:b8:99:16:8f:25:d4:81:a3:77:da:5d:fc:7b:83:bc:
         7e:dc:67:d6:df:93:f0:e4:0d:06:81:c4:1b:e1:a8:39:ab:9c:
         49:07:ab:a8:53:0f:1e:80:30:41:c5:82:20:51:4c:d7:f3:16:
         d1:00:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:03 2026 by rpki-client