Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
File:                     1598b683-29fe-322e-b9ed-c596ea5defc5.roa (raw, json)
Hash identifier:          1qGmNfuRJINtgCJ3KLyAlGiEE4PBGEK+GufWCA2NiYg=
Subject key identifier:   A0:02:CD:97:1A:C5:DE:EA:F3:85:94:11:CE:25:C0:F5:1D:94:D3:64
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584DB7703271C953272EFC6C0180
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     4540
IP address blocks:        69.51.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:32:71:c9:53:27:2e:fc:6c:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=3dd2d766-c9d4-4a74-91c3-e62b09264cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:97:f3:cb:68:1e:9d:02:6d:3a:6d:01:14:
                    09:12:88:f0:2c:a7:fe:2c:90:52:d7:b3:d3:f8:af:
                    d1:41:20:9e:de:d4:db:a8:f5:c9:d3:84:4d:cd:99:
                    c4:9e:fa:4d:57:f2:16:14:8a:57:b7:c5:a8:2b:54:
                    72:bb:3b:27:7c:f7:23:d1:99:b3:84:0c:3c:06:e1:
                    77:55:dd:c6:17:9e:c3:93:76:40:1b:ad:6c:6b:88:
                    7d:06:93:5b:d0:1b:d3:db:0e:ac:12:fa:46:87:c3:
                    db:02:42:1a:dc:6d:d2:99:c2:16:c4:1a:49:b9:70:
                    10:22:82:51:43:9f:55:ea:c5:35:68:2f:7b:96:f2:
                    97:22:c6:a7:ef:f7:98:28:ad:87:77:d3:02:c1:32:
                    36:a2:43:4c:14:14:fe:a2:09:85:03:37:c9:d3:a2:
                    a0:90:66:78:1a:6b:4f:1e:17:a5:63:f0:d6:df:66:
                    1b:ed:8c:25:c9:c9:93:9f:24:c5:ad:f6:4a:e8:d3:
                    1f:22:f1:9b:e2:b4:71:1a:82:de:ba:38:a2:a4:6c:
                    ab:29:d3:a5:25:7f:1b:5c:81:8a:ed:25:9f:4c:1f:
                    6c:8f:ab:61:98:43:de:fb:fd:5d:95:c9:ea:b9:d0:
                    12:28:0c:9e:4b:6a:39:9f:67:97:82:b0:ef:f8:fa:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:02:CD:97:1A:C5:DE:EA:F3:85:94:11:CE:25:C0:F5:1D:94:D3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/1598b683-29fe-322e-b9ed-c596ea5defc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:79:23:9c:a4:f2:d1:06:1d:76:6d:dc:83:aa:fc:61:98:
         9d:2c:0c:97:cd:a2:fd:8d:1e:c0:92:c2:b4:0e:89:ad:2d:50:
         6d:0c:dd:66:ab:15:b6:2a:a5:2d:0d:bf:5c:bc:61:10:02:ab:
         60:c6:01:6e:89:9c:41:28:9f:6e:6b:ab:57:c2:fe:8e:15:9a:
         14:92:6e:4f:63:e3:c0:24:b6:17:83:8a:c8:1e:76:0d:8f:6e:
         01:b1:f3:20:9b:d7:a1:06:8e:d6:76:45:fa:61:e2:d4:78:e8:
         0f:cd:62:b8:0f:b9:c8:32:9c:f3:18:4b:47:3a:4e:91:7f:a1:
         c7:98:c5:9f:c9:7f:c1:0e:bd:94:0e:81:da:8a:55:a1:52:0f:
         ee:6b:08:79:ae:7b:89:60:4d:a9:77:bd:bc:98:5d:4e:f9:4b:
         d9:fd:e6:ad:70:48:77:bc:70:f4:27:1b:43:55:f9:0b:05:b1:
         3a:5f:34:4e:86:6d:11:3e:3a:f0:a2:c1:e5:03:20:ce:fb:3a:
         56:25:d0:16:ad:ba:9b:da:90:25:e5:75:79:86:7f:cc:f5:16:
         9a:a6:19:df:ad:25:c9:28:1d:39:01:83:71:fb:47:a2:cf:ea:
         c6:5a:f6:16:bd:ae:1e:9f:55:86:f5:f8:0d:0b:be:c7:39:e7:
         af:d6:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:48:36 2026 by rpki-client