Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/7ae2072a-a173-344e-8440-72693836ef44.roa
File:                     7ae2072a-a173-344e-8440-72693836ef44.roa (raw, json)
Hash identifier:          Dm51jWkms7jrHTQcj1p+4e+iRSpqq99hmVJDD8VNd7s=
Subject key identifier:   01:9D:A5:10:9F:9B:88:F2:94:52:6D:F2:0F:21:71:A7:F7:6F:6D:4D
Certificate issuer:       /CN=4fa8d320-d449-4e92-b9cc-502f6f725a0b
Certificate serial:       010D0C9F4328584F1037A0528DE06B88EEBEDA00
Authority key identifier: 6F:D1:B4:14:9F:83:AC:05:DB:92:A9:58:10:C2:AC:B6:39:F7:60:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/7ae2072a-a173-344e-8440-72693836ef44.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     16857
IP address blocks:        69.7.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:a0:52:8d:e0:6b:88:ee:be:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa8d320-d449-4e92-b9cc-502f6f725a0b
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=44040b36-738f-4056-8f70-9cb1db52532e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:bf:27:9b:63:95:d7:18:37:e3:db:ca:1d:
                    66:42:83:97:ca:70:de:e2:30:17:ff:29:1c:a0:9f:
                    3d:5a:5a:7e:e9:16:93:ed:66:36:2d:72:8c:20:c1:
                    8b:b7:a7:79:f8:2e:39:af:1e:fd:84:4e:db:7d:82:
                    0b:2d:96:f1:9a:5f:08:96:78:2d:74:eb:a3:a4:47:
                    e1:f2:53:69:8b:f1:22:80:02:eb:a5:e5:ce:bd:e9:
                    ba:11:6c:95:c9:b9:e2:65:b7:8d:11:be:57:ed:7d:
                    06:23:a6:0e:ff:8c:8d:b8:59:6a:eb:11:bd:69:ca:
                    d8:87:b6:84:4c:a7:8b:1a:b6:92:65:0b:7e:e6:61:
                    e6:11:03:97:e6:6c:30:11:d4:d7:e9:6f:42:0b:26:
                    8f:d2:d1:f4:09:fc:8a:f7:ce:87:35:51:4c:a9:93:
                    c7:32:2a:71:af:38:9d:57:c9:b1:af:bc:4c:f1:10:
                    ff:c3:90:0a:ac:fd:66:25:05:73:c7:9b:a9:e4:19:
                    6e:a7:d9:13:80:8b:35:ab:4e:ac:ab:af:8e:14:85:
                    de:89:d5:6c:a8:d9:90:1e:00:40:cb:87:db:6e:a2:
                    3a:ee:62:eb:bc:db:3c:c3:17:25:b5:33:2a:cb:fc:
                    df:5f:58:65:f1:fc:d4:0f:68:52:fa:51:83:a0:45:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9D:A5:10:9F:9B:88:F2:94:52:6D:F2:0F:21:71:A7:F7:6F:6D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/7ae2072a-a173-344e-8440-72693836ef44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b/4fa8d320-d449-4e92-b9cc-502f6f725a0b.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D1:B4:14:9F:83:AC:05:DB:92:A9:58:10:C2:AC:B6:39:F7:60:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fa8d320-d449-4e92-b9cc-502f6f725a0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:2e:20:e4:2f:b1:c0:c6:a4:bf:c3:64:79:ab:67:02:56:8f:
         96:b3:ec:e2:8b:4c:a5:b7:f3:1f:b2:8c:35:db:06:08:ca:e3:
         1e:58:0e:19:64:ce:e7:71:60:ed:9a:39:8b:2f:ab:05:ff:bb:
         c3:05:10:e4:4a:bc:ab:5e:6f:1f:31:8f:67:98:0a:6d:95:8b:
         e0:20:d4:17:bb:f0:a9:c7:d9:9f:e7:4a:2f:69:08:73:44:df:
         01:ab:04:78:6b:25:cf:90:94:88:90:68:01:d8:cb:d2:03:c9:
         6d:ee:47:3d:8a:0e:98:ab:94:08:5a:7e:65:8b:98:26:66:b8:
         8e:7d:6d:06:db:2e:eb:22:4a:60:56:f1:3f:c1:2a:75:16:0a:
         6d:1c:77:4a:14:4e:5d:ef:79:38:06:9d:8d:e1:e3:89:c9:22:
         d1:73:25:90:2b:80:d5:61:e6:81:16:f2:8a:34:42:03:6a:8f:
         e7:79:4b:e5:bd:e3:ab:06:a6:3f:f4:fa:6a:36:60:2c:8f:19:
         fc:01:17:f5:e1:a8:7b:2a:e4:80:06:4e:d0:bf:27:be:44:73:
         32:21:e0:75:23:ca:24:d5:3c:c6:7f:de:aa:36:2e:ef:72:67:
         d2:38:c3:27:99:48:3a:ed:40:0b:00:23:ec:11:51:be:b4:76:
         fd:d3:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:34:27 2026 by rpki-client