Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/6ec2099a-9ac6-3ae8-9ddb-0d35be0d9d3b.roa
File:                     6ec2099a-9ac6-3ae8-9ddb-0d35be0d9d3b.roa (raw, json)
Hash identifier:          S86kCHBQBVHOU872T4JDGT9SflKo0vRfRxANOaLG4II=
Subject key identifier:   E3:C8:59:36:94:07:35:35:54:99:2C:EA:E7:CC:06:10:97:1F:9E:17
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F2ABD0D966DD21B63B91E9940
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/6ec2099a-9ac6-3ae8-9ddb-0d35be0d9d3b.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     25651
IP address blocks:        64.16.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:0d:96:6d:d2:1b:63:b9:1e:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=42a3daa1-5b21-4cfd-ac65-28afd4657e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f5:a1:61:10:e3:74:68:d3:c0:a5:70:65:4c:
                    a8:83:55:11:be:a1:30:6c:87:7d:09:3b:58:ef:58:
                    51:90:47:b5:c7:47:e2:e8:39:9d:e0:93:af:99:1d:
                    cd:d5:90:64:5d:62:11:45:9e:33:0b:39:6f:86:9a:
                    90:17:52:03:21:fd:82:ab:dd:f4:31:0e:2e:54:c0:
                    51:4a:06:04:8d:96:bc:20:d7:be:52:03:28:79:44:
                    39:2c:9e:2a:a9:a9:09:8f:26:2c:e2:18:9a:d0:bf:
                    b0:c3:a2:a9:2a:99:e8:90:97:49:65:a2:2d:ac:27:
                    89:6d:a5:70:b5:db:5a:08:9f:ce:4a:7c:41:9f:78:
                    14:f9:62:ce:02:45:a8:4e:ca:1a:ba:98:51:a9:61:
                    57:63:7a:c2:a6:97:0f:a7:38:8b:7e:ae:8c:49:e1:
                    a3:aa:83:ac:a8:45:f3:bc:80:c8:57:9f:6f:98:0f:
                    09:25:78:25:95:03:d7:81:ad:77:38:df:a6:de:01:
                    fb:9e:03:d5:1f:8e:2f:93:e6:e0:91:e7:6b:65:6e:
                    30:ac:e6:8d:0c:37:2a:00:0a:fc:72:b2:13:8e:74:
                    61:a2:13:b0:c2:15:36:57:5b:7b:7d:09:88:87:32:
                    50:ab:2a:2f:f4:bc:8d:ee:66:34:45:c9:f0:1b:24:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:59:36:94:07:35:35:54:99:2C:EA:E7:CC:06:10:97:1F:9E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/6ec2099a-9ac6-3ae8-9ddb-0d35be0d9d3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:57:06:67:d2:fe:91:63:bb:18:c5:74:c7:b6:e0:b8:f9:33:
         c8:6a:76:e6:d1:f7:73:95:77:f9:de:70:02:4b:30:2c:72:5e:
         10:ba:83:d1:e7:7b:56:4e:be:24:76:01:24:9a:36:8d:fb:e4:
         e7:66:ee:8e:04:a5:fb:83:40:2a:fa:0a:59:9e:d1:4e:ad:f6:
         95:61:44:38:26:90:87:44:f1:a5:80:62:a3:99:08:f5:73:b0:
         4e:a0:b5:bf:53:7a:60:ab:25:a3:54:01:8d:cb:2d:f6:52:4a:
         c1:d0:89:be:5f:be:11:8b:d8:2e:c4:ca:b9:90:b4:c9:ce:86:
         32:f7:3a:e9:3d:cc:a3:ad:bd:9f:dd:6f:28:ba:89:37:d5:55:
         1e:5b:f5:be:48:b4:05:31:e7:f5:61:8e:85:13:6d:b9:5a:1d:
         6b:89:ee:10:54:01:c1:69:08:c2:62:7a:91:5e:b4:4b:29:44:
         8e:4d:8e:9d:19:2e:ca:30:9a:b1:e2:88:45:b1:f7:29:7f:2f:
         9d:53:9c:3e:f2:d6:c1:ed:82:3a:d9:6d:46:ea:14:a6:bc:76:
         bc:2f:62:d9:d8:5a:96:b7:8c:31:bf:44:f7:05:c7:77:b3:d2:
         3a:3e:ad:60:c1:18:37:7b:49:bc:a4:0c:33:5b:f5:f1:60:85:
         1d:81:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:28:17 2026 by rpki-client