Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa
File:                     353f8b3e-d000-3445-8659-f5bf019cb547.roa (raw, json)
Hash identifier:          G5TIXfnNBSe7grKMK6rL+aGRLREfXrV69t9RoyvqrAg=
Subject key identifier:   8F:78:3C:06:B6:88:58:BD:6F:CC:2C:DC:8B:41:D1:3B:FC:19:CF:35
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584F3A17D2BDA059D4C39A736D00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     4540
IP address blocks:        69.51.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d2:bd:a0:59:d4:c3:9a:73:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=03859c74-2c75-40a8-951a-a4768cd7e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:5c:0f:79:8f:f2:b5:4e:eb:70:33:18:74:
                    5d:79:db:15:bb:92:f2:68:3a:de:51:85:0e:e3:57:
                    db:6f:69:c4:26:78:95:38:a2:99:2c:eb:20:00:0e:
                    3d:31:7c:16:66:3e:e5:99:ef:f3:f2:64:5f:55:7b:
                    58:a9:65:47:a7:58:5f:6c:92:80:ba:9e:2c:f1:f5:
                    75:6d:b4:17:db:6d:d9:7a:1e:da:13:78:b2:03:04:
                    4e:c2:85:7c:32:f5:eb:cf:c7:e7:71:93:7e:2c:58:
                    49:40:d3:65:5b:48:b4:78:3f:f3:06:1f:39:4f:f3:
                    f8:29:43:73:5c:23:8d:00:ea:d1:9a:79:78:8f:85:
                    c4:67:01:bf:7d:8c:19:1e:09:cb:93:04:5e:1b:06:
                    bf:b8:8b:7f:66:8c:58:bf:71:08:7f:bc:95:ff:e5:
                    20:08:c8:97:bf:ef:f1:a8:a3:de:22:7a:e8:50:f2:
                    61:11:35:02:93:26:45:36:a3:ad:d3:40:64:4c:15:
                    9b:9c:f8:f4:14:50:b1:92:58:07:13:e2:e7:bf:d4:
                    63:f5:e2:95:e1:49:37:38:42:30:b3:72:e9:81:3c:
                    24:92:23:f1:a5:dd:94:6f:f0:0f:63:b6:9d:93:ed:
                    0b:9f:53:35:ee:ea:25:05:12:ee:70:d5:7e:47:ad:
                    c9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:78:3C:06:B6:88:58:BD:6F:CC:2C:DC:8B:41:D1:3B:FC:19:CF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/353f8b3e-d000-3445-8659-f5bf019cb547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:21:1c:b3:05:39:54:01:89:a4:6e:67:9c:8b:f8:52:02:31:
         fe:2b:52:0a:f4:95:ec:d7:c1:74:ac:fe:fc:84:30:75:de:08:
         cf:e8:54:e8:ef:0d:1a:d9:f6:cc:9a:7d:06:60:d0:5f:0a:29:
         f8:c4:8c:15:d9:6d:38:db:eb:a9:3d:62:7e:73:b0:5d:0a:9e:
         b5:a1:c5:22:e6:48:dc:16:c6:ed:4f:7e:81:59:ea:97:9b:e6:
         72:f6:aa:e1:84:43:92:99:e7:4a:e0:0e:b6:30:9b:3e:ca:71:
         23:a9:35:0d:d1:d3:2b:69:7e:c0:56:d3:ad:f8:98:a4:03:f4:
         32:13:64:f5:e7:2a:54:e5:bb:bf:b3:ad:8f:b1:b6:a8:c9:79:
         48:22:66:61:b7:f1:ab:86:45:74:ce:d9:e4:9e:63:c3:44:c2:
         70:59:21:ec:16:a0:b6:d9:42:06:2c:65:b8:03:e5:bb:ee:c9:
         25:4e:b6:dd:55:10:dd:3e:17:ef:7a:04:fa:a8:a7:98:c2:4f:
         82:f6:ec:1f:db:53:fe:ad:99:06:39:51:ac:90:13:c3:cb:d0:
         e7:1d:9d:6e:e7:df:18:30:f2:68:f9:fa:0a:0d:6c:fd:3d:1b:
         4c:2f:7b:cd:34:e1:2c:ce:13:3b:6c:77:b8:d7:3a:56:4f:96:
         fe:57:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:09:59 2026 by rpki-client