Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa
File:                     0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa (raw, json)
Hash identifier:          nah34pJVCQRAVtFHr1ZVOeAda1vk/rHxB1n0pwPeX7U=
Subject key identifier:   26:9E:83:17:C3:1F:34:14:6A:F1:C5:5C:E6:24:A1:C0:9B:1D:E5:B5
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584D6515197BC6955894C6A42880
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     11260
IP address blocks:        24.222.0.0/24 maxlen: 24
                          71.7.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:19:7b:c6:95:58:94:c6:a4:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=b66739ac-b0c0-4db6-897e-399ee7294da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a1:05:60:91:ae:7f:67:a0:d0:34:ae:e3:d8:
                    57:f5:3a:61:a2:05:fb:b6:60:95:c6:8a:83:a2:79:
                    c5:56:e2:28:e8:be:39:87:ae:2e:24:5e:d2:fd:e8:
                    a7:ae:b4:d9:34:be:ce:50:28:29:30:11:25:80:e8:
                    0c:8b:b2:bb:95:5d:16:35:e3:f8:49:f6:b1:78:6f:
                    d4:99:9b:7a:3a:b5:db:6e:75:48:c0:59:a6:30:11:
                    6c:78:49:e7:be:ae:40:22:9f:21:b2:d7:29:ad:3e:
                    8b:fe:c9:b9:61:81:2a:b9:62:63:94:3e:65:18:48:
                    cd:27:7d:2f:7f:48:64:93:b5:34:a5:31:2c:c6:cd:
                    47:4d:8f:85:ae:d4:39:fa:c8:61:a6:9a:90:c6:18:
                    f5:43:46:d5:18:c4:5f:6d:32:4c:06:31:f5:94:26:
                    d4:50:eb:eb:c8:17:24:f0:8d:cf:45:8e:26:40:8b:
                    43:55:aa:66:30:2e:65:91:ac:56:ab:06:3b:15:90:
                    70:d4:cc:8b:86:00:c7:5d:01:10:a1:2b:8c:d7:70:
                    a5:93:2a:4a:03:96:65:a8:ed:b3:44:52:1c:24:84:
                    e7:26:ff:82:8d:40:2e:f0:1a:b1:2e:cd:7b:41:1e:
                    33:75:76:32:08:40:ac:1c:dd:c5:b4:a5:e8:8a:5f:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9E:83:17:C3:1F:34:14:6A:F1:C5:5C:E6:24:A1:C0:9B:1D:E5:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.0.0/24
                  71.7.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2a:3a:ce:42:fb:95:39:8d:08:9e:a9:32:51:33:98:7a:08:
         3e:7f:eb:b3:e9:06:5c:d6:8c:9f:7d:cf:79:fb:99:e3:ad:f4:
         13:15:31:eb:f7:4e:94:3b:8f:bb:da:07:7d:41:20:d9:37:22:
         d8:46:4d:6d:ce:f1:7e:e9:f6:15:f9:19:33:50:a1:dc:53:4a:
         b5:8b:24:ad:18:1a:24:a5:91:c5:56:bb:80:17:2d:d5:65:d9:
         b4:ae:b3:ed:11:97:0f:01:52:bb:7b:79:dd:cd:bb:ca:cc:be:
         50:6e:7d:38:15:9a:fb:1f:4a:f2:d0:7d:f3:4e:ca:c9:6c:ca:
         9a:89:d2:85:16:64:bc:b2:af:8b:59:8e:d4:55:29:c0:10:f8:
         19:fa:c4:6c:ec:45:18:74:3c:c8:b7:df:0f:b4:41:61:32:ee:
         ca:d5:6e:74:3c:e5:39:9c:0e:37:8b:d5:4f:79:e5:5c:ba:9c:
         9a:02:dc:b6:e9:92:be:cc:b1:f0:4e:b0:86:42:d4:b0:62:f2:
         c4:0a:ed:d4:f2:72:d6:2b:e8:27:e9:62:af:b4:66:19:2c:6d:
         75:93:2d:20:0a:49:61:55:8d:68:a3:e7:b4:a9:6e:71:ad:b6:
         6a:84:5e:a5:79:2d:33:eb:5b:25:9e:84:74:ea:80:5b:40:13:
         41:b2:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:44:01 2026 by rpki-client