Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/70b7f886-1055-3d7a-b2fe-fda7700d679a.roa
File:                     70b7f886-1055-3d7a-b2fe-fda7700d679a.roa (raw, json)
Hash identifier:          64Absj5UYtLfKdrRZnz0SVL7XEzQB8uBJoExjHUQcM4=
Subject key identifier:   1D:17:E5:A3:DB:80:67:D8:89:DB:5C:41:6F:2A:4B:1E:87:E0:59:41
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584EA799C74FBC502D949074C780
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/70b7f886-1055-3d7a-b2fe-fda7700d679a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209341
IP address blocks:        209.124.66.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:c7:4f:bc:50:2d:94:90:74:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=134f506f-2836-428e-9637-c2e76dd186d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:e7:39:8d:b2:52:2e:94:e4:b1:ea:f8:90:
                    96:80:6f:d4:fc:86:31:f4:32:5f:fa:ef:06:f1:11:
                    d3:ba:93:24:e3:01:85:b3:8c:2d:15:2d:94:4d:a0:
                    89:a6:ed:a6:56:bd:2f:03:17:5d:21:73:6c:5f:4e:
                    2e:e5:9e:55:6f:5b:e6:dd:f4:2c:ad:01:c6:95:60:
                    2b:30:e2:6d:52:43:33:6c:ef:c1:0e:bd:c7:4d:50:
                    64:d0:67:a5:d4:cf:41:56:3f:2e:1d:82:e4:74:44:
                    8e:72:f9:58:62:07:21:6a:a5:95:8b:72:4e:b0:7c:
                    39:3f:4d:02:cb:e3:af:2f:20:38:74:09:44:dd:43:
                    f6:1e:57:1f:57:61:45:89:0d:c0:fd:37:b5:ad:79:
                    31:6e:b4:83:c0:2d:dc:a1:86:1e:26:24:04:27:5f:
                    44:a7:cb:a4:44:2e:a9:08:ba:20:7f:a9:dd:c8:ce:
                    64:e7:51:06:30:b7:bb:53:0d:73:6e:1d:06:69:99:
                    3b:d5:74:1c:88:30:60:ec:6e:d0:7c:a4:b5:52:48:
                    a1:c1:26:dd:87:53:69:29:10:aa:d3:b5:42:a8:15:
                    94:1f:40:8e:27:6a:d5:4c:36:7e:ce:b5:17:ca:66:
                    0e:36:6a:13:d3:1f:12:38:38:0a:3c:b9:43:6f:4d:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:E5:A3:DB:80:67:D8:89:DB:5C:41:6F:2A:4B:1E:87:E0:59:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/70b7f886-1055-3d7a-b2fe-fda7700d679a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:58:d9:0e:d9:08:57:e6:f2:de:90:8e:50:ec:22:ef:4a:
         73:ab:16:db:0d:70:98:27:78:a1:57:c6:ec:8a:e8:c5:29:d4:
         15:65:e3:31:06:b9:eb:5d:ea:b5:60:1c:8f:fa:08:88:0f:c4:
         2d:48:8e:f0:cc:32:20:9e:14:30:7b:5d:79:64:17:5f:6c:00:
         f7:33:6f:c9:d7:68:b6:f1:66:7d:41:a4:f5:2d:be:0a:8e:6a:
         a7:aa:06:e4:f2:46:03:01:9e:7b:b9:26:43:ab:b8:8b:e5:d5:
         9d:59:e7:f9:41:45:7f:a1:32:4f:e0:4f:d7:40:a5:63:a5:c8:
         28:10:e3:bc:7f:16:60:1d:0e:43:06:3c:e5:56:3d:87:98:47:
         d7:cc:69:0f:a8:47:35:a2:aa:f0:23:38:5b:44:67:a5:d3:c2:
         83:b6:74:0c:87:7b:1c:54:c8:eb:82:21:86:d1:3e:af:24:34:
         67:af:27:85:b9:58:ba:31:29:8a:16:df:c5:36:10:aa:dc:49:
         31:df:40:22:fb:39:78:66:65:8c:1c:f9:c9:4a:b4:52:bd:b0:
         ca:1b:fd:0e:0a:e4:fc:d0:fb:8b:c6:d0:ef:23:3a:8d:c8:e2:
         ce:39:78:c7:93:c3:cb:4b:8c:57:65:d4:9f:7d:aa:32:ca:92:
         de:87:3a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:03 2026 by rpki-client