Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa
File:                     d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa (raw, json)
Hash identifier:          Te2bLiiMejLvxqjKXxRwVfAkwnq4X7U5k6ox+wqWBPg=
Subject key identifier:   C0:4F:1D:18:BE:61:F3:18:F5:9C:48:64:A5:02:F7:C5:25:C1:4C:88
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584D386A4043B2D59556655C2D00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     19318
IP address blocks:        69.42.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:40:43:b2:d5:95:56:65:5c:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=96084317-0914-44f5-a6e8-72704d223a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:eb:ae:02:af:ae:85:4d:fc:c6:b1:82:69:
                    77:6a:d9:01:41:32:2e:07:65:03:63:8d:b9:2e:8d:
                    0a:99:cb:44:82:b7:40:7c:d4:38:ac:f2:d4:5f:2a:
                    8b:60:d0:ad:60:b6:9f:eb:a8:47:40:7f:e1:8a:aa:
                    e5:79:b1:b8:b9:18:23:b3:7d:0e:5d:ed:3b:d2:57:
                    6c:81:c8:0d:12:b1:b3:6d:e8:da:98:87:a8:19:a7:
                    85:40:7a:50:85:be:09:11:4f:18:f2:ac:e6:0d:7b:
                    c9:57:99:f4:89:db:e0:44:15:8e:d3:f3:ee:a9:f9:
                    25:65:eb:33:b1:a0:6c:f0:fc:4e:69:3e:84:68:9e:
                    13:61:19:77:94:db:32:8f:02:ce:ea:06:a8:7a:85:
                    b3:fd:46:e2:68:5e:a9:c0:e1:04:65:78:1d:6c:8a:
                    8e:2e:07:6a:2c:e5:a2:14:15:57:85:57:1f:8f:1d:
                    8a:22:ea:7e:bf:a9:ca:e6:e4:0c:e4:cd:05:85:3b:
                    34:18:11:53:3c:3a:91:6d:76:49:59:d4:f6:d8:a0:
                    8f:db:b8:f0:58:f4:c3:05:eb:07:7c:77:1a:de:14:
                    ec:fd:d1:f1:fd:82:70:61:fa:5d:6c:4a:41:99:52:
                    78:e5:99:83:15:46:97:23:40:0e:65:c3:f6:49:ad:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:1D:18:BE:61:F3:18:F5:9C:48:64:A5:02:F7:C5:25:C1:4C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/d7aea177-906f-3c5a-ae7e-8bd551fb07d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:5f:53:c8:68:f9:38:b0:64:24:31:86:3c:db:c4:64:4a:
         74:56:60:cc:e4:99:a6:09:56:76:1a:7b:a1:e1:7d:ab:a9:c5:
         9d:79:1f:29:74:f1:d2:cb:0d:b3:c8:34:56:4c:4f:72:f3:55:
         4c:63:1b:1a:b3:b8:8a:b4:6e:13:2d:39:1f:ad:97:09:41:22:
         7a:37:70:f0:0c:fc:26:30:25:cd:dc:17:fc:86:e2:9a:de:a9:
         dc:f4:a2:81:00:6e:a1:46:9f:2f:4e:3b:8d:92:1e:a7:dc:d9:
         99:d7:08:89:39:c0:6a:84:57:27:3d:a2:cb:47:7d:c6:81:15:
         39:83:75:e4:d3:3c:30:af:f2:93:ef:4e:0f:46:0f:40:c9:95:
         9f:06:37:17:79:69:8d:a8:1f:81:1d:af:10:7a:4f:d3:e5:d7:
         75:5f:cb:d3:55:f3:e4:ad:6c:31:51:e3:ce:fc:2d:72:d5:03:
         73:be:f4:22:3c:fe:a0:fd:e5:26:4a:ff:e5:7c:13:83:27:de:
         c9:33:50:e8:ce:45:48:fc:d9:6f:5f:e3:ed:e1:7f:0d:ca:09:
         23:dd:49:19:b4:ab:73:e4:07:86:cd:43:d9:10:c8:d3:a2:53:
         98:68:78:bc:77:3e:a4:28:cf:94:b4:a1:9f:c7:43:96:70:81:
         b8:e5:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:43 2026 by rpki-client