Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
File:                     1598b683-29fe-322e-b9ed-c596ea5defc5.roa (raw, json)
Hash identifier:          G1BDxgF7KOb/g7sZKJYXek7kLB6Vxvqaz7DOGtG3Cz0=
Subject key identifier:   8A:92:23:C4:29:82:E2:47:58:0A:F3:C3:BD:4D:81:FD:58:D9:65:93
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584E97B5059D6C28401606035A80
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     4540
IP address blocks:        69.51.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:05:9d:6c:28:40:16:06:03:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=976ea3aa-5112-49e0-bf06-caaa6fb2014f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:8e:ef:e3:6d:28:90:a0:de:b9:55:8a:13:
                    03:18:7a:f6:fc:ef:5a:72:37:f7:e6:e0:6e:75:3c:
                    93:ec:6f:da:2d:71:67:43:f8:b2:f5:05:db:5a:1c:
                    dd:37:1b:d3:f7:35:3d:ee:16:5e:20:b4:44:c2:5b:
                    7f:d8:2d:9e:58:d8:9d:b4:25:c8:06:74:5d:d9:f6:
                    11:ba:88:8d:83:ba:e1:28:d8:2e:e9:ce:71:d3:cb:
                    c5:9c:d0:ae:6f:a3:cd:e2:e5:52:ed:ab:bf:32:b2:
                    f2:c3:dc:34:11:90:d5:cf:66:fa:3d:7a:cc:21:01:
                    a0:0c:54:12:70:2d:b3:3f:f6:0b:df:7d:75:fa:17:
                    3f:fa:8f:23:c4:3a:4b:f5:2d:a9:da:04:b5:97:d0:
                    5f:27:5f:48:be:84:a3:db:ba:92:08:dd:7f:9f:0b:
                    03:b4:ce:e3:f6:ce:7f:80:42:04:34:68:df:99:9d:
                    1a:b9:63:59:a2:7e:0e:77:02:03:4c:f4:df:01:1c:
                    a2:72:8f:70:82:61:a1:b4:50:06:30:50:ec:49:a4:
                    09:00:3e:1e:5d:da:fd:b6:5d:83:4a:93:39:12:5a:
                    0d:3c:fe:e9:42:5c:3a:96:5f:21:ea:1a:d5:69:1f:
                    97:b0:63:20:6c:8f:28:c2:92:cf:d8:94:ca:88:1d:
                    54:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:92:23:C4:29:82:E2:47:58:0A:F3:C3:BD:4D:81:FD:58:D9:65:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c1:67:72:7c:30:f6:18:72:d3:89:96:8d:cf:f5:ea:39:21:
         b7:5e:92:8e:ab:37:b9:78:fd:1a:4e:0e:e5:c1:43:bb:2a:06:
         13:eb:ab:16:a8:c8:b3:cc:6c:8a:9f:bb:17:55:f1:a7:80:d5:
         5c:70:b0:2e:29:3e:a5:72:a3:29:ca:ff:ca:16:0b:0f:9d:6a:
         66:35:6a:82:2e:9f:24:0d:2b:19:86:e2:67:51:aa:df:e9:47:
         ce:6a:a4:c5:d2:e2:2b:53:28:b8:61:aa:79:2f:e0:da:a6:47:
         e8:ad:37:01:c8:90:88:05:3b:39:9a:d4:a8:9e:12:e6:ef:6f:
         de:f0:18:84:00:30:dc:b0:b7:ec:a1:89:91:42:15:96:e2:b8:
         0e:a4:40:1f:30:fe:26:c9:e7:57:ef:d2:42:87:71:e1:9f:b9:
         8f:61:e8:fc:99:33:04:c2:e3:bc:dc:0f:d6:71:02:60:0e:d5:
         f1:bf:63:56:5c:fb:e4:70:50:55:df:07:be:65:f6:66:06:fe:
         63:1d:32:d0:bb:b9:8d:7d:66:65:c5:b9:38:cd:7f:9b:cc:3e:
         2c:40:86:9c:86:ab:fa:4a:4d:73:eb:7e:7b:3a:67:a3:05:ec:
         22:84:6e:db:7f:94:37:50:46:25:a5:b6:5f:f7:35:39:0c:dc:
         d5:32:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:14 2026 by rpki-client