Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa
File:                     e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa (raw, json)
Hash identifier:          YHcmOcV7xJrpwIFWr6J8VvugPwdpdQQ1tjG/OufuSPw=
Subject key identifier:   E7:F9:3A:FD:BE:72:B5:CF:8D:E7:79:E5:BB:8A:EB:A1:8F:48:DC:1C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0865EAA234008F897D246580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        70.32.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:ea:a2:34:00:8f:89:7d:24:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=86cbcf3f-f06e-4045-ab16-4058805dd2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:d1:e8:50:29:87:86:12:2c:84:a1:46:d8:
                    78:cd:31:79:8b:9d:71:51:3d:c7:24:73:1d:ac:cd:
                    9c:6d:f8:32:df:1e:a1:a4:a2:5b:ec:3a:51:23:95:
                    bc:07:4e:38:0d:f4:8f:a5:0e:d4:86:c2:ec:90:e8:
                    17:b7:e2:50:d9:2f:62:4c:90:e3:83:6d:2e:03:05:
                    fc:aa:89:7a:8c:49:87:50:ae:16:33:fa:23:5b:8a:
                    10:cf:10:79:c4:77:7d:b7:2f:ca:3b:04:d5:81:52:
                    65:1d:e4:8b:39:ac:c9:f6:54:fc:90:fb:be:ea:a1:
                    7e:38:70:40:02:a1:e5:21:bb:81:4d:7d:6f:81:2c:
                    a3:3d:0e:16:b6:6e:12:fc:a5:a6:b6:bc:a0:02:41:
                    64:1a:8b:4c:30:84:91:15:57:3b:42:e5:d9:45:8d:
                    9f:34:37:09:0b:1b:39:e9:06:87:d4:8b:8b:6f:5a:
                    fb:0f:cc:1f:24:05:3a:27:44:8d:4e:3e:83:80:46:
                    58:90:ab:1d:e2:21:a3:2d:d9:01:a7:d4:3b:e3:78:
                    f2:4f:fc:98:26:45:bb:c3:63:de:92:69:75:67:be:
                    d7:7f:9c:b0:45:0a:ce:49:1c:b9:0f:48:5d:a0:e5:
                    b3:a4:38:bd:bb:5a:32:14:ca:3e:33:ab:14:b7:79:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F9:3A:FD:BE:72:B5:CF:8D:E7:79:E5:BB:8A:EB:A1:8F:48:DC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e76ac3a4-8ced-334c-b29e-6b793b5f26d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5f:0d:25:28:0f:d8:bd:25:37:0e:68:0b:96:38:56:2e:b3:
         2e:63:6d:8d:60:fc:18:1d:6f:92:90:33:72:83:30:e1:f9:e7:
         16:59:5e:b6:da:c1:a6:b8:1d:ae:49:61:5e:77:30:c2:ce:d9:
         ed:ee:53:3a:ca:d5:2e:99:29:b5:86:41:2c:ed:39:89:56:cf:
         3e:5d:d1:19:2b:33:b3:22:87:9f:f8:88:cc:50:c6:ed:9a:d2:
         2b:db:15:eb:e1:42:8a:ba:cf:93:ef:a0:8a:e8:69:0d:b7:10:
         fa:0f:44:e4:f9:3e:be:3a:60:90:3f:45:4a:7c:e4:3a:1d:9c:
         fb:71:5a:b0:a0:b0:3e:9e:a8:03:18:8d:1d:ea:22:4a:c8:3e:
         6d:cc:c9:7b:cb:29:1d:95:ca:8d:0f:a4:27:2f:17:73:58:f4:
         6a:0b:6c:a0:9c:1b:a2:44:c9:70:62:82:26:b6:1f:5e:83:cb:
         f5:bd:d1:e6:04:af:82:c4:e2:80:37:8c:48:e1:2f:11:86:87:
         41:b9:c1:c7:85:be:e7:30:8e:a9:0c:03:56:41:16:c2:64:65:
         4a:1c:d0:b3:91:1f:8b:30:8f:8a:79:af:7a:4b:fb:b2:a5:f7:
         9b:24:a3:5a:47:05:64:56:3e:c2:ec:b2:08:98:39:9a:0d:c7:
         9d:a6:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:51 2026 by rpki-client