Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/b5917148-b0c7-3215-ada0-6bfc04d5fc6b.roa
File:                     b5917148-b0c7-3215-ada0-6bfc04d5fc6b.roa (raw, json)
Hash identifier:          YYCGSbFyCweOCVfwmI5k6f+JfX4evgg6jP2TcupsAqc=
Subject key identifier:   B6:E0:28:87:FF:70:10:E3:C8:95:21:89:A7:A5:6E:F8:A7:98:44:5E
Certificate issuer:       /CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
Certificate serial:       010D0C9F4328584D23ADDB9D1A905C12A7A2A800
Authority key identifier: B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/b5917148-b0c7-3215-ada0-6bfc04d5fc6b.roa
Signing time:             Thu 12 Mar 2026 02:45:10 +0000
ROA not before:           Thu 12 Mar 2026 02:45:10 +0000
ROA not after:            Wed 10 Jun 2026 02:45:10 +0000
asID:                     6364
IP address blocks:        69.28.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:ad:db:9d:1a:90:5c:12:a7:a2:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
        Validity
            Not Before: Mar 12 02:45:10 2026 GMT
            Not After : Jun 10 02:45:10 2026 GMT
        Subject: CN=1629ead7-9103-4573-934e-86cccfa4fe0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:96:98:4c:ba:76:39:6a:7d:4b:1b:f8:bf:d6:
                    e8:de:bc:71:b5:8b:8b:ee:7c:4e:b4:90:28:78:0e:
                    c3:22:1e:e5:2c:64:85:6f:ae:05:ae:e3:dc:69:27:
                    f3:1c:44:5b:2d:7c:2e:86:9f:a4:26:8c:2b:92:b3:
                    3f:77:5a:30:1c:42:68:d6:55:c7:49:e8:25:c1:39:
                    25:f0:45:a6:71:00:4d:f4:5b:a8:72:1f:6f:0a:d9:
                    52:23:62:80:cc:7e:35:bd:9d:e3:43:3d:d9:7c:cb:
                    ec:92:c4:97:66:63:9e:d3:8a:bb:a7:12:c3:d9:06:
                    96:5a:ce:74:f8:df:e3:3b:e2:91:90:a1:7e:65:7a:
                    3a:92:63:17:53:51:13:f6:b2:19:ec:50:53:9e:d0:
                    ac:62:e1:f8:d1:a6:50:a4:7c:f5:91:b0:ad:d7:c7:
                    2c:17:6c:5a:33:ef:05:26:93:9c:f9:40:d0:2a:25:
                    a6:2f:55:41:7d:d1:ef:e2:ce:ba:67:2c:c5:39:3d:
                    72:63:55:5b:76:25:19:ca:2b:3f:1b:15:a4:6f:c0:
                    59:59:58:b3:5b:dc:9e:20:47:31:e2:2d:b3:0d:61:
                    31:9e:0d:f0:ba:68:bb:c3:c6:cf:1c:f0:41:97:89:
                    a7:2d:0b:bc:bf:1d:2d:10:bb:1c:87:71:f1:90:6b:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:28:87:FF:70:10:E3:C8:95:21:89:A7:A5:6E:F8:A7:98:44:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/b5917148-b0c7-3215-ada0-6bfc04d5fc6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:fe:67:92:93:5f:b4:e1:e1:08:4d:28:6e:0b:95:1b:31:
         18:7e:ed:6b:a1:53:c2:d6:39:4e:a6:6a:52:c8:87:3d:31:03:
         d2:47:be:af:6d:f7:0b:c6:72:c8:aa:c8:98:21:08:70:6c:df:
         b5:05:a4:de:01:2f:ea:f7:45:2f:53:57:df:d8:58:14:02:0a:
         6d:35:00:ce:c3:65:9a:26:0c:ea:5c:29:40:54:06:f5:6c:f3:
         70:85:a1:06:04:04:ec:0e:c3:86:27:ec:3e:18:44:50:5e:4a:
         25:9f:36:c3:94:0e:54:9d:f8:3c:f6:c0:a1:31:64:da:c1:e8:
         68:c3:3b:f2:0b:c0:d2:cd:be:bd:70:e1:a7:78:0a:3c:e6:b7:
         da:14:26:95:f8:03:8b:0c:b3:b3:e8:e7:32:b6:d3:3c:54:5c:
         c7:88:fe:d2:95:f8:74:f8:9c:37:74:e7:71:bd:3e:0e:b0:aa:
         38:ff:1c:58:e5:58:61:94:76:09:0f:e6:a6:cb:a7:0c:66:66:
         9c:df:a3:d0:9e:56:7a:60:b0:c9:eb:be:be:19:08:1c:ad:0e:
         e7:60:f7:e0:d2:8e:2e:06:40:1c:9c:7d:53:e3:95:d2:b3:3c:
         97:c9:ef:cd:5a:a4:0d:b9:d4:ff:8c:ee:0b:22:c3:a6:dc:56:
         5c:92:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:27:00 2026 by rpki-client