Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
File:                     20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa (raw, json)
Hash identifier:          k0Wj8MdkLv/mZSwDbwvjzBKKh+OWGoiqpzX7Lu0ctZY=
Subject key identifier:   53:24:57:32:54:03:05:61:13:27:21:9F:29:CC:B2:9E:49:35:1D:CE
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584E6F3A28962FCE9FF107B4D580
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     18780
IP address blocks:        69.55.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:28:96:2f:ce:9f:f1:07:b4:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=e062a4a6-66d6-485b-8f5c-ca9fbeaa4126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:17:16:02:01:b5:ba:52:7e:82:e4:74:e8:35:
                    d4:f3:c4:bf:30:24:e4:47:e3:80:d6:85:23:0e:2f:
                    c9:01:29:3d:15:2d:d8:4d:46:45:b6:99:07:27:1d:
                    b8:4a:a0:f2:35:95:89:10:d7:0f:f2:6f:67:18:e8:
                    4f:63:ba:fa:c8:a0:2e:a6:4c:9a:b4:97:3b:f9:56:
                    02:e6:71:37:06:d6:9e:9f:07:db:53:7a:51:f6:94:
                    52:97:3c:28:46:04:0e:2f:13:dc:97:d5:9d:c2:d2:
                    bc:fd:9b:d9:36:5e:41:2d:dd:e2:70:69:3e:0d:76:
                    62:aa:d9:bc:ce:6b:5f:dd:db:fb:75:5f:65:f5:bd:
                    af:4f:a8:f8:42:8a:76:de:23:68:ca:e0:24:66:15:
                    a5:fa:ec:97:c1:20:5d:c0:e1:b2:3c:2a:26:2c:22:
                    f3:5c:37:fc:e1:67:3a:8b:56:c1:60:ab:f3:c0:96:
                    2c:35:b9:5e:c9:58:d6:57:31:1c:9c:8e:52:81:e5:
                    75:45:54:2b:6e:bb:a0:8c:a9:11:8a:92:20:18:24:
                    6e:60:07:ef:11:d2:89:39:fc:57:78:8a:0c:1b:ac:
                    e9:9a:07:65:2b:d1:4a:61:1f:7b:51:41:86:f0:48:
                    bb:d5:7c:30:8c:8d:fa:bb:07:63:46:95:00:0a:d6:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:24:57:32:54:03:05:61:13:27:21:9F:29:CC:B2:9E:49:35:1D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/20e1bdbe-6cd6-3abd-bf9c-c3c30d632928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.55.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:96:02:19:7d:4a:05:43:92:53:96:f8:1a:e5:ec:d1:42:
         e2:61:02:83:72:bb:e6:29:13:39:62:df:7e:68:ad:bc:ff:88:
         02:72:76:e2:89:6b:97:7f:b8:08:9e:74:ef:86:20:f0:d7:7b:
         f3:ba:63:0b:58:8e:55:7b:ec:69:f7:d3:29:0e:52:d8:0f:45:
         cc:6c:5f:e7:9b:46:6f:c8:b5:3e:9b:e2:08:00:39:66:fd:4a:
         9e:cf:23:17:40:2c:d1:c8:83:6a:e4:a4:50:21:0d:be:6d:8f:
         61:55:1c:70:c1:01:e5:d5:fc:f3:70:99:fb:76:f3:3c:e0:7f:
         39:9b:ac:fc:2a:92:1e:8e:a6:48:df:2a:f7:bf:09:05:e1:eb:
         39:f6:82:49:20:70:c7:42:5f:3b:0e:b5:0f:92:7c:1d:fe:96:
         df:c4:7d:97:51:d2:46:05:fe:2e:8a:93:61:7d:3f:ac:5e:62:
         88:55:14:08:69:ef:56:69:ec:9a:5d:36:7e:43:c5:be:3b:04:
         a9:a5:12:9d:cd:65:47:bf:e9:67:25:dd:a3:61:47:37:7b:4d:
         27:b1:a6:3e:12:0e:0e:cc:47:e5:64:f0:d6:53:ce:6d:80:d1:
         34:b0:63:63:a5:b8:8b:ef:f5:d5:0a:9d:15:f8:bd:54:66:54:
         a4:75:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:39 2026 by rpki-client