Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa
File:                     2026f06e-1431-31e6-8460-5ff177b4b260.roa (raw, json)
Hash identifier:          iG/eFsA12jC8vQGMg1s+1B6vIz7kf3XsnuGJ6o3MuCo=
Subject key identifier:   EA:DF:8C:5F:AD:7B:85:8B:94:02:36:58:EB:AB:65:53:C3:3D:B1:99
Certificate issuer:       /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Certificate serial:       010D0C9F4328584AB220CC9644BC8EF6D29949D0
Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        68.70.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:cc:96:44:bc:8e:f6:d2:99:49:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=51ceaf1c-6af7-4ff9-9913-2cd605ac280d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:61:f7:83:6f:3f:39:52:a7:cd:65:3a:c1:
                    1b:ca:a2:a6:14:cd:12:7e:c0:03:a9:d1:f1:10:f8:
                    3a:b5:ab:8f:e4:3b:9b:a0:14:8d:1f:63:8b:82:9b:
                    23:b6:00:7f:28:ec:6a:5d:6b:04:b7:5d:71:09:98:
                    ad:3c:be:ec:20:10:b4:57:4e:4e:fe:67:43:da:d2:
                    c6:10:dd:b8:1a:19:e4:fc:e8:f5:b1:d0:7c:97:e0:
                    65:a3:45:1f:0f:02:2f:12:b1:a8:0e:77:f6:e0:69:
                    05:d6:4b:95:97:0d:92:1b:8c:25:93:5b:d4:71:27:
                    5c:9e:52:17:25:24:45:53:bc:22:28:93:e7:ee:85:
                    9b:5a:97:15:76:9b:34:96:7a:ec:f3:e5:91:14:51:
                    f4:cc:35:78:10:2c:b5:71:2c:36:b9:73:fc:c6:08:
                    b9:6f:b3:d8:57:57:42:01:51:e9:af:25:17:f3:11:
                    a7:7c:7c:e4:eb:62:ad:59:25:04:dd:c2:7b:08:f3:
                    89:be:bf:37:e7:f1:38:d5:4a:0d:36:79:dd:8d:e5:
                    89:e7:b1:aa:30:0a:0c:0e:81:c3:67:b2:e6:61:83:
                    4b:69:e1:c9:e4:0b:a9:6b:c3:57:48:a5:06:8a:68:
                    79:c5:be:c2:69:ab:15:60:fe:d8:4f:89:8c:a9:29:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DF:8C:5F:AD:7B:85:8B:94:02:36:58:EB:AB:65:53:C3:3D:B1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/2026f06e-1431-31e6-8460-5ff177b4b260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl

            X509v3 Authority Key Identifier:
                keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ec:00:86:d1:ac:3a:c6:d8:4a:f9:6f:fb:3e:08:81:e5:fd:
         4b:f6:bc:14:27:a0:52:82:55:08:35:28:50:90:d3:72:00:4a:
         ed:8c:4c:f3:fc:4b:a7:92:c8:6b:ab:d0:c1:03:b9:9a:c8:8c:
         af:5a:d8:e8:e4:ac:50:48:80:fe:74:a9:57:69:e1:83:bd:17:
         0e:c1:5f:10:0e:44:a0:55:ec:43:2b:1e:d7:06:a1:21:2b:1d:
         a8:58:b8:fe:69:ae:f0:00:98:6f:5c:d7:13:ee:bf:35:70:9f:
         8f:5d:50:55:32:22:ad:e5:c6:33:80:b4:cc:e7:93:0f:a1:5d:
         00:47:c5:b0:0e:ad:8a:41:41:e3:73:20:c3:bd:a2:c4:dd:ff:
         5e:25:28:31:cf:06:d0:45:62:3b:14:31:b3:a4:ea:52:5a:50:
         b2:50:47:b1:c0:aa:ec:d9:f9:b5:1a:2c:fb:8c:61:8c:65:37:
         7c:07:41:70:02:ff:f0:fb:8c:44:c2:15:51:c4:b8:27:af:3a:
         2f:e3:01:08:c8:5d:a7:a0:c5:a0:68:8a:5d:91:72:25:51:9b:
         b8:c4:b4:46:bb:2b:86:b0:71:03:0d:88:67:8c:6d:e9:07:00:
         1f:e3:03:73:cb:07:89:33:b6:b0:c7:f1:a9:40:92:c6:28:dc:
         51:70:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:52 2025 by rpki-client