Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6091a33d-f6a7-394e-a045-d7ee16b46e15.roa
File:                     6091a33d-f6a7-394e-a045-d7ee16b46e15.roa (raw, json)
Hash identifier:          PVjIvtZf4jb0dn2TZcocsEqOigxUgCNYXmN+5SIh/rs=
Subject key identifier:   4D:CB:59:A4:DC:0C:BE:3C:53:EA:D3:DA:E1:32:99:F6:D5:95:32:EB
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F4328584E5FDF5BA0CC0F9D9FDFADBF80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6091a33d-f6a7-394e-a045-d7ee16b46e15.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     14813
IP address blocks:        69.73.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5b:a0:cc:0f:9d:9f:df:ad:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=ee85cf37-ab5a-4c1b-abb3-a45de3fb13bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:b1:a5:59:c8:cd:ae:1c:47:4a:d0:76:45:
                    de:7d:93:32:21:dc:e3:f3:63:40:8c:47:a8:f1:0e:
                    e2:6a:e1:8c:c7:64:2c:00:ff:90:9f:19:5d:c0:81:
                    b2:ea:71:20:51:c8:57:66:2f:cc:62:ad:cb:ed:bc:
                    c0:7a:9b:19:60:d7:e3:c3:17:3c:1f:2a:f4:08:61:
                    22:23:10:fe:19:a8:7a:06:66:c6:a2:c0:ab:ff:fa:
                    bd:cc:49:25:3e:e3:43:0b:5f:3f:2b:db:12:4e:c0:
                    17:1c:c0:1e:7f:8c:71:db:25:ec:78:f8:0d:be:bc:
                    dc:63:90:48:86:45:96:05:35:3e:06:13:34:e1:7c:
                    73:58:c3:6e:c3:2d:98:20:a0:74:26:1c:b0:69:ac:
                    e8:7f:74:92:96:2b:bf:db:d6:c9:0a:7f:f2:84:0c:
                    7d:58:87:dd:cc:f9:32:c2:03:8b:99:be:e1:d7:2b:
                    68:1f:66:8d:bc:79:88:6d:63:f2:77:e5:24:18:d2:
                    47:97:68:ed:fe:b6:81:c4:84:72:19:3e:4f:fd:99:
                    2c:9f:b4:6f:da:50:47:2a:17:a2:9c:47:26:80:a6:
                    d3:81:58:cf:1c:7c:a9:16:c0:a2:a5:af:36:47:e1:
                    aa:1d:4e:a0:13:9a:57:21:aa:28:7c:ce:30:88:1f:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:59:A4:DC:0C:BE:3C:53:EA:D3:DA:E1:32:99:F6:D5:95:32:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6091a33d-f6a7-394e-a045-d7ee16b46e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b9:15:02:6d:12:c6:ab:f7:b8:39:21:aa:58:05:99:14:49:
         1b:5b:82:f0:de:76:a5:ae:7c:1f:fd:75:f5:d4:1d:87:bc:d7:
         24:09:86:b1:d9:8a:f7:45:35:ca:d9:5d:74:cf:97:a1:50:13:
         85:94:7f:cd:d6:88:cd:62:35:49:67:e0:60:c6:da:cf:9d:99:
         6b:ea:cc:81:6f:44:ea:e4:76:6c:ca:5d:fc:43:57:4f:d9:1f:
         f4:ae:aa:60:54:e4:98:9b:28:26:75:38:1d:cf:14:56:b2:73:
         ae:1f:6c:78:ff:f3:d6:5b:de:e8:0c:f3:3e:24:d1:05:fa:d3:
         1e:f6:96:d5:95:dc:5d:37:0b:ee:19:94:86:24:86:75:81:e6:
         21:db:37:d0:9f:59:3b:57:a6:b0:37:ee:dd:26:b1:d7:88:34:
         60:25:1f:d6:f2:3d:d9:1a:c9:15:34:15:49:4a:a5:d0:87:9c:
         35:7c:a0:3f:76:ed:19:db:b7:5c:ad:b8:2e:2b:50:67:61:94:
         bd:6c:9c:69:ce:9a:b1:45:ec:8e:b8:4d:1d:41:f1:f7:09:1f:
         0f:94:6f:ae:cc:b8:99:ee:a9:d3:dc:60:03:bc:4d:73:40:ea:
         ed:87:79:46:d1:c5:65:eb:12:ce:70:73:32:52:df:97:09:60:
         13:a4:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:49 2026 by rpki-client