Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa
File:                     56fba18c-c21c-3132-b5f6-e8845f92eb43.roa (raw, json)
Hash identifier:          yQ8mEoj0ALKX4JJO5RiGZfwpP7ExIZiQy93pDjYvaPs=
Subject key identifier:   D3:75:7F:12:A5:10:B2:05:36:3C:69:F2:B4:E0:70:2E:65:EC:17:75
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584DE58081E49FB98C2CD9FB7300
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     2914
IP address blocks:        70.39.128.0/24 maxlen: 24
                          70.39.130.0/24 maxlen: 24
                          70.39.131.0/24 maxlen: 24
                          70.39.133.0/24 maxlen: 24
                          70.39.134.0/24 maxlen: 24
                          70.39.135.0/24 maxlen: 24
                          70.39.140.0/24 maxlen: 24
                          70.39.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:81:e4:9f:b9:8c:2c:d9:fb:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=3cf6b3ee-81ba-4ddd-b623-910cc0adf1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:f2:30:40:a2:38:54:49:a3:ca:dc:15:d6:
                    6f:48:d1:6d:90:89:ea:e5:cf:d7:85:8d:00:b9:78:
                    c3:2e:bc:e2:06:de:27:40:07:c9:be:ff:9e:4d:4a:
                    1c:91:69:c7:25:ce:c7:41:94:f9:28:89:dc:43:8e:
                    6a:94:5a:39:11:fd:14:a4:ed:ff:6e:ca:c1:17:af:
                    f5:b3:2f:58:34:cf:1f:00:49:5e:2b:81:ef:99:bf:
                    2b:c8:b5:20:ed:dd:49:31:19:45:4a:be:b0:f8:c2:
                    d3:d9:e0:b6:76:52:22:ec:e6:65:2f:06:e7:ad:f9:
                    f8:db:06:f2:f3:53:e1:51:6f:bc:04:9b:33:17:d9:
                    1d:b8:c6:0b:3f:e8:56:36:06:56:b7:0a:b9:e8:3c:
                    61:d9:e9:94:0d:31:ad:4e:e2:0a:20:e7:5e:f3:9e:
                    0f:8e:32:18:23:32:de:23:92:92:ad:1b:88:e9:a2:
                    b1:47:07:2b:42:5d:4b:fc:a3:40:5d:66:0a:72:51:
                    3d:3d:16:f4:6a:c0:37:c7:b3:34:02:07:71:b1:b5:
                    fc:e6:44:4d:4e:47:f6:19:2b:35:4e:a5:5f:43:6e:
                    41:e3:e0:b2:d3:ef:83:a9:98:57:9e:5e:45:d9:1f:
                    31:18:62:33:c4:9b:52:a4:48:ba:ad:16:60:f2:a5:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:75:7F:12:A5:10:B2:05:36:3C:69:F2:B4:E0:70:2E:65:EC:17:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/56fba18c-c21c-3132-b5f6-e8845f92eb43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.128.0/24
                  70.39.130.0/23
                  70.39.133.0-70.39.135.255
                  70.39.140.0/24
                  70.39.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ab:40:73:9a:d7:1a:4d:9d:50:b8:ce:52:e3:2b:5f:e1:d2:
         f3:52:56:5c:fd:62:36:15:6b:17:0c:ef:5b:26:ed:85:96:06:
         56:72:6b:6c:0a:cb:20:be:f8:02:f0:c9:43:b8:5b:4c:eb:a9:
         4a:fb:69:25:be:f4:4d:9d:26:1f:54:84:20:da:1f:ac:7e:17:
         6b:00:02:43:3f:67:4e:b8:20:12:8f:74:92:c6:0e:5f:b1:eb:
         4f:fa:cb:f0:5d:85:90:1a:32:2b:09:80:1a:d0:2d:21:ca:3b:
         ce:f1:98:ff:9e:38:9c:19:4e:79:b3:78:1b:73:59:1f:44:83:
         9f:bf:16:19:5a:1b:c8:8d:fe:20:49:98:1a:1d:2a:05:a7:5f:
         38:cf:9b:88:80:27:99:22:c4:ae:e2:ea:69:56:ee:9d:1c:0a:
         22:54:a4:d9:c1:58:37:c3:08:b0:7f:65:35:36:3d:ba:af:2a:
         f4:cc:1a:7f:54:80:6f:a1:59:56:71:6b:40:cd:f6:69:37:e7:
         fe:c9:04:c4:e9:14:70:42:dc:ae:4a:9f:5b:bd:44:cb:7c:e6:
         7e:85:74:3e:99:5b:eb:8e:41:ce:91:0a:2f:dc:b2:c1:66:36:
         2f:fa:3e:ee:e1:95:42:b4:24:e1:27:58:b5:fd:fd:4f:63:32:
         90:53:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:42:46 2026 by rpki-client