Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
File:                     ce268d52-bc78-36a5-a64e-f76a492c0e21.roa (raw, json)
Hash identifier:          9QbtXtQIpdQvIz8Pn+ZvdgkJWy5zYEWFI8WsLXGf/Sw=
Subject key identifier:   DB:5B:92:DF:4E:25:E7:11:DE:DB:72:BE:78:B2:CB:8A:08:9F:AC:84
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584E885A4BA37FA6A0E8D79E4F00
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     6954
IP address blocks:        69.4.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4b:a3:7f:a6:a0:e8:d7:9e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=f4fcefe1-4b7b-4830-8291-6fff95b5c628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:6b:9d:3e:f9:30:cd:d7:36:03:96:c0:8a:
                    c2:c1:85:30:4e:61:aa:db:3c:ad:93:6b:75:f7:67:
                    d9:5b:b5:4b:cb:9e:c4:f9:b3:95:21:37:4c:63:07:
                    f2:d8:87:67:ff:03:64:f2:e0:89:8a:b2:dd:44:fc:
                    a2:a1:ba:f8:64:15:15:62:85:ac:30:3d:ec:9f:57:
                    bc:7c:e5:89:e8:d9:7f:dd:ae:dc:a4:4f:30:f5:7c:
                    12:25:13:a3:f8:51:48:24:30:66:fd:64:d6:86:72:
                    39:c6:85:2d:b4:87:71:90:b0:4a:d6:80:2b:a8:e6:
                    9a:42:28:37:37:63:ea:8a:68:2c:4c:c8:29:99:94:
                    9f:cf:6b:e6:74:e9:04:34:5f:42:b6:51:2a:05:27:
                    aa:ce:0f:31:31:1a:65:87:dc:5f:c9:de:e8:2c:a3:
                    a7:94:4d:bb:39:fb:3f:bc:eb:a2:bd:41:1b:65:9a:
                    ca:22:0f:3b:62:7f:97:4d:19:f1:02:c6:68:f9:12:
                    1b:b9:e5:35:bb:e7:8c:7d:4c:93:38:ee:f1:48:97:
                    25:46:75:4c:f4:16:5d:db:94:70:e3:9f:ed:fd:19:
                    f6:15:f0:a8:dc:16:21:09:a6:e6:f0:e0:9e:65:dd:
                    ee:9f:f9:d9:90:d7:8d:59:59:b2:c3:dc:01:66:0c:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:92:DF:4E:25:E7:11:DE:DB:72:BE:78:B2:CB:8A:08:9F:AC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/ce268d52-bc78-36a5-a64e-f76a492c0e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d4:9d:98:ee:62:94:1c:c0:1b:77:41:cb:1a:7e:f2:a1:94:
         8b:a7:53:27:41:8d:79:e0:49:ef:eb:df:1d:7c:0b:e6:8b:bc:
         c9:88:bb:71:69:55:fe:a6:14:21:bb:6a:bf:f9:cf:02:c3:a0:
         e8:22:bc:15:62:f3:9b:0d:70:c5:f1:a6:51:0e:e4:84:dd:3b:
         16:b5:db:47:b5:e6:f0:d4:b1:b8:15:28:02:67:7b:66:46:e3:
         ce:1b:bc:21:b1:34:fe:33:bc:fd:cc:07:83:7c:e6:93:09:ff:
         b8:c3:e4:9d:a7:07:d9:f9:37:13:b1:62:32:96:cd:b6:f2:d0:
         d8:c1:3d:60:a8:f8:10:fe:51:cc:23:51:3a:b8:ac:b0:eb:dd:
         ce:81:41:ad:9f:be:54:d0:da:7b:0b:ee:60:3f:af:4e:02:c4:
         cb:94:da:af:98:9f:0e:58:fa:48:a4:b2:83:8c:6f:d0:f8:c7:
         72:03:c7:7d:8e:d4:7c:2d:42:43:c4:bd:7e:85:84:72:95:7d:
         8b:23:c6:af:00:d7:db:a7:9c:ad:54:f0:1f:df:02:0f:62:7d:
         42:0a:4d:0a:bd:4b:bd:63:46:d3:76:d3:03:3f:8e:37:fb:8b:
         b2:e8:d7:70:d8:f8:75:c9:38:ff:ba:c7:32:bb:61:07:c7:d9:
         cd:f3:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:20 2026 by rpki-client