Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa
File:                     8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa (raw, json)
Hash identifier:          5uNppzfWSFbjeO9desaFUNcnD4lBz1MlEFH9R/NYZQM=
Subject key identifier:   30:AC:FB:56:E0:52:C8:01:97:37:90:3B:00:32:FA:53:01:0A:7E:6C
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584E97B50ED0DB4A9DAA94DB87E0
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     14090
IP address blocks:        69.178.204.0/22 maxlen: 24
                          69.178.208.0/21 maxlen: 24
                          69.178.224.0/20 maxlen: 24
                          69.178.240.0/21 maxlen: 24
                          69.178.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0e:d0:db:4a:9d:aa:94:db:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=1bdc5170-3812-48e6-99fb-f279c949975d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:17:9a:f2:18:fe:39:41:7c:e8:6d:7d:cc:
                    9a:13:39:33:c4:cb:85:14:cb:8e:fb:ce:98:dd:1a:
                    6e:d5:4d:9f:08:7f:6a:93:8c:ba:3b:57:74:56:e7:
                    14:9a:2c:83:bc:e6:72:a2:38:3c:94:1c:6c:7a:1c:
                    40:05:29:3f:bb:30:c8:b9:e9:52:c8:1f:54:da:dd:
                    0d:af:aa:be:12:5d:69:73:f1:b8:94:96:bb:6f:6f:
                    f5:df:2b:0e:3c:33:d7:5e:5b:48:75:2d:ed:89:25:
                    dc:bc:7c:de:2c:75:8f:34:a2:dc:88:65:6d:ce:b2:
                    ad:5f:37:26:6a:66:10:f7:c0:ec:d5:ef:1c:e0:2b:
                    7a:a2:27:ed:ee:a8:4c:01:00:6d:b1:09:52:c5:02:
                    a9:ad:ec:0f:94:ec:2e:83:b6:44:d1:6d:a6:db:8d:
                    d7:db:1b:fe:18:d9:ea:74:2c:f3:21:35:66:48:1a:
                    26:05:f2:e7:0a:91:b6:74:97:0f:01:8f:38:45:6f:
                    15:de:d8:6f:69:27:61:7d:71:0b:24:88:23:fa:36:
                    31:54:35:36:98:4f:3d:3e:78:28:a2:19:08:a4:92:
                    d6:b9:da:2c:fe:8f:e3:e7:25:69:02:48:90:5e:92:
                    eb:05:b5:66:3f:c5:39:fe:8e:23:0a:2f:6d:f7:c5:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:FB:56:E0:52:C8:01:97:37:90:3B:00:32:FA:53:01:0A:7E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/8b0c5e75-7f26-329c-82a7-8581f06dd8fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.178.204.0-69.178.215.255
                  69.178.224.0-69.178.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:fd:fc:71:fb:47:6a:1a:e3:a5:9f:d9:88:b0:a3:5a:74:
         23:15:b1:08:17:38:31:ed:6c:aa:88:37:11:eb:12:1a:2f:8b:
         6b:9c:92:06:69:2a:5a:26:a5:4f:12:3b:d7:c9:23:03:2a:27:
         a7:56:be:b4:d6:b5:ac:a9:be:d2:33:93:5a:79:0c:7d:94:09:
         c6:65:4e:15:b6:af:19:f9:ef:81:2f:1d:ee:3f:04:52:05:5c:
         27:c4:19:1f:6d:71:06:19:f5:30:97:93:ca:46:0e:ca:5d:3e:
         d1:66:c8:b9:95:76:24:e5:61:58:a8:c7:81:73:47:f9:dd:17:
         e5:0b:72:bc:1f:69:37:18:53:0c:e9:a3:4b:bc:b6:f4:6c:e9:
         fa:a2:d2:bb:c7:c8:3d:f3:fd:13:04:f1:e3:88:f6:d8:d0:ee:
         a0:aa:cf:78:98:f1:05:ae:24:bf:a4:7d:b5:97:ba:9c:25:30:
         da:ac:58:e5:0a:9d:ca:52:cb:27:b5:20:e6:ff:db:fc:38:fb:
         02:b0:95:26:86:c4:16:20:bb:9a:02:cc:c1:9c:5a:5e:3e:65:
         78:63:81:63:cf:c2:8a:f0:ce:f3:ee:b4:cf:66:ad:d8:94:6f:
         77:db:51:e6:1d:6e:53:45:60:ed:94:24:2f:28:b1:02:fe:23:
         3e:76:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:18:27 2026 by rpki-client