Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa
File:                     97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa (raw, json)
Hash identifier:          dc/KNDdVhD9gl7AF8muKXBvzMbxFGXAyCusFGIkMzTI=
Subject key identifier:   4A:F1:46:0E:98:8D:BC:A5:3D:A2:9D:29:A1:AE:EA:C4:3B:68:CB:40
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F549D69BEDE5E1380923B1540
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     11260
IP address blocks:        173.212.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:69:be:de:5e:13:80:92:3b:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=1897b3be-b6d0-46ad-ada3-d7efde4c050b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:09:ba:58:23:9c:e8:74:b3:f4:4f:b5:55:
                    6d:7d:fa:f1:d5:16:c7:a6:60:3a:5b:d3:f5:99:d2:
                    73:50:3e:87:16:59:2d:b8:3a:84:88:69:79:25:ca:
                    af:3c:36:2b:7d:d9:1f:22:ee:08:13:32:7d:75:79:
                    66:c7:8a:e2:73:50:c3:a1:f4:58:44:93:b5:f3:e9:
                    81:f6:e8:b5:e8:99:1b:9e:9e:ea:c1:9c:cb:44:91:
                    70:0a:a0:62:84:12:66:bb:53:13:c9:d5:2d:03:12:
                    9c:9e:a2:23:12:96:96:0e:59:3d:f5:05:7f:8c:f0:
                    af:fd:5e:d6:b7:9d:92:42:0e:52:6f:05:33:d5:1b:
                    9d:d0:f9:86:d0:43:8b:03:d6:ef:8c:77:b9:f8:13:
                    39:48:ec:26:75:13:20:15:64:4d:c0:dd:a4:68:d5:
                    eb:13:ee:cb:46:04:ea:d8:f5:c9:c5:84:32:2f:b4:
                    07:69:6d:59:62:78:02:22:ca:82:e3:0a:37:41:4e:
                    8f:c8:fa:a3:43:7a:e0:24:b0:bc:88:dd:30:4e:94:
                    75:31:9f:08:37:4d:d5:5d:1b:3c:99:4f:4f:34:30:
                    3c:6a:d7:0a:70:fa:a5:e4:59:36:a9:bf:1d:ee:47:
                    52:11:e8:7a:cc:1d:c3:d8:a6:e6:ee:56:78:e7:fe:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F1:46:0E:98:8D:BC:A5:3D:A2:9D:29:A1:AE:EA:C4:3B:68:CB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/97c13dcb-2696-3af6-991a-fcc53cd55b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.212.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:88:d2:b6:1d:0d:1b:8b:a0:a9:d4:c3:d4:f3:65:c3:dd:
         7b:99:a1:37:78:10:e6:d5:44:17:ac:19:52:65:dc:f6:06:13:
         1c:7f:b5:f3:80:31:0a:db:19:20:98:9e:8b:43:7c:12:02:9d:
         1b:83:4d:e0:68:2f:1f:5e:ed:bb:75:49:21:14:1b:cf:0d:91:
         74:c3:af:ab:7d:af:ba:7b:77:53:44:fa:da:00:83:10:dc:e0:
         4e:c8:7a:88:50:ce:32:0a:3f:63:8c:31:70:c7:c0:51:cc:23:
         e7:32:10:30:da:68:0e:a9:69:54:57:44:d2:74:5e:5d:c2:73:
         35:fa:fc:b3:36:4c:75:0f:6d:51:f3:d1:df:b4:71:99:80:8f:
         a2:94:8e:2c:34:ae:33:30:71:ba:91:ed:da:b2:1a:bf:cd:9b:
         5d:d7:f2:9f:06:05:25:eb:40:0e:be:c4:c2:1c:4c:df:61:7a:
         a1:52:5a:f0:91:ea:65:13:b8:61:91:a2:b2:b8:c3:cd:80:0b:
         df:e9:34:4a:65:9d:0a:c7:ff:51:62:49:79:91:37:99:b2:94:
         ce:93:73:08:57:15:ca:3a:d8:5b:cd:49:37:f8:c6:b6:dd:69:
         04:c9:46:0a:1d:e6:13:a5:93:37:bb:1b:ea:87:7b:6c:d9:e0:
         d3:71:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:17:53 2026 by rpki-client