Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa
File:                     8b239c89-4c84-3291-ae22-3e63274d32c7.roa (raw, json)
Hash identifier:          z6qVMhcpiHY13fY3d+AOPRNd9AgxhzZfkRncOTsnxWQ=
Subject key identifier:   BC:67:D1:B2:7E:01:AF:1C:6F:E0:64:60:52:1C:CF:D4:E9:6F:71:E1
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584F4F081399F9D2594DF41E6C74
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     55293
IP address blocks:        69.48.162.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:13:99:f9:d2:59:4d:f4:1e:6c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=5c2bbe6c-32dd-435a-aac4-cd8426510673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:4f:c9:9c:39:c6:09:5f:1e:71:3d:3f:1c:
                    6f:f3:4f:d2:fb:12:c3:94:69:5a:8e:cd:43:ea:a1:
                    9d:3f:91:76:4c:3a:53:78:e0:28:d6:4e:17:13:13:
                    11:55:92:1d:d2:5b:66:11:fb:95:c9:8e:78:a0:df:
                    f1:ed:4e:a8:26:78:4c:58:06:71:7a:98:db:49:96:
                    11:51:20:56:0a:a6:21:01:9f:21:36:f9:b8:4e:13:
                    e9:3b:3a:6a:de:99:a9:e4:4d:56:cb:80:9a:4d:e4:
                    be:2d:b2:10:ec:55:c2:54:e1:01:6a:ae:17:37:0d:
                    ad:2b:c9:71:fc:73:5d:b3:bd:a6:e1:2d:b0:77:5d:
                    8c:b5:45:fe:8a:cc:18:fe:d2:03:ea:ae:bc:1b:ac:
                    11:f6:a7:b4:fa:68:93:5e:8d:3f:bb:b2:0a:49:ed:
                    ee:9a:73:e1:de:c2:61:a9:f7:44:cc:36:a5:0d:e3:
                    b9:d5:2b:0b:7c:a2:b9:0e:ea:4d:96:93:1e:62:c0:
                    76:c0:21:8d:53:64:b4:8b:97:e4:68:5f:5c:eb:e9:
                    f8:d5:19:14:94:c4:3d:30:ab:6f:de:d2:24:e7:b5:
                    93:3b:15:d2:aa:2f:80:7c:b2:ac:80:e1:fa:d7:db:
                    3d:8a:6a:72:72:11:84:a9:0f:95:cf:c6:28:df:05:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:D1:B2:7E:01:AF:1C:6F:E0:64:60:52:1C:CF:D4:E9:6F:71:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8b239c89-4c84-3291-ae22-3e63274d32c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:05:c5:44:53:c6:72:e1:d2:42:79:01:e4:58:ff:be:f7:
         6c:b6:6f:68:6e:37:0d:62:d7:8b:04:85:d9:5f:9d:b9:9b:49:
         3d:b6:70:3d:d0:c0:de:fd:b2:aa:3b:bb:4a:bb:05:7b:31:43:
         27:e5:3a:d3:8c:31:42:9e:d0:c7:f3:37:77:84:86:df:82:40:
         eb:1d:24:d0:81:3b:5a:3b:51:6a:5f:33:c5:09:23:3f:53:1e:
         c1:59:9d:62:a7:0a:01:41:58:5e:c4:85:69:5e:c5:ca:e1:e6:
         bf:ca:e4:03:e6:04:4a:bb:2b:96:d2:08:dc:29:61:df:c2:26:
         d9:4b:45:0e:15:39:1a:4c:5f:15:98:e5:a4:d2:98:ed:4e:6f:
         8b:da:a0:c5:e1:fc:cc:be:27:65:5d:13:84:e7:7b:34:ae:5b:
         08:a6:66:b3:df:50:e7:0f:9c:13:0a:a1:ac:75:5a:dc:aa:6a:
         1f:c2:44:41:a1:12:64:1d:bc:39:c8:65:d1:46:0c:30:6c:fc:
         8c:72:fa:6e:01:0b:5a:9d:f1:ca:83:cd:96:ff:19:3b:8f:8d:
         ff:9d:92:35:d4:b9:72:62:84:9e:a7:52:e7:5b:f7:ee:46:1d:
         87:b1:dc:4d:9f:1d:10:0c:26:9f:fb:85:77:17:90:e7:d7:59:
         eb:08:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:40:47 2026 by rpki-client