Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa
File:                     bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa (raw, json)
Hash identifier:          K0OwdElyQOEzl5ybyPMi37cU2c/+eWQEFARSQ2kmwHQ=
Subject key identifier:   29:F3:43:42:22:B9:74:EB:73:1E:D9:5C:3C:C6:05:E8:9A:42:A1:6E
Certificate issuer:       /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
Certificate serial:       010D0C9F4328584E4DB9DD38C0026ECC18BF1F80
Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     22987
IP address blocks:        68.209.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:dd:38:c0:02:6e:cc:18:bf:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=b9c035ea-1223-4df3-bcc9-a8d610d252f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:14:01:e1:2b:cf:be:6b:85:26:0d:c1:d8:
                    b8:f8:39:ad:a5:56:69:55:43:6f:08:6c:9e:28:94:
                    ae:b2:f8:51:b5:ac:85:55:68:41:24:bf:59:9d:dc:
                    57:84:d7:33:51:a8:51:dc:b6:4c:55:41:db:a6:bd:
                    65:4e:8e:83:f9:9c:14:93:ef:ba:bc:74:10:e6:7b:
                    e7:2b:43:a8:0e:6e:18:81:8c:bf:84:72:58:45:3f:
                    ec:f7:f1:d8:27:98:65:dc:65:fe:29:68:22:41:99:
                    de:72:91:2c:10:c1:6d:ba:9b:7e:a6:77:2e:e9:3f:
                    d3:7f:a6:07:a5:72:af:78:13:e8:91:79:b9:70:a9:
                    3d:12:10:b1:b9:92:b4:92:86:d7:c6:4b:26:4c:1b:
                    59:43:45:8c:07:d2:e4:02:66:98:ec:07:cf:2f:54:
                    8e:7d:f7:a9:c9:0e:ed:eb:c6:66:5c:b6:0f:77:0a:
                    2d:e1:9a:e0:2a:98:ee:df:56:a4:40:ac:1f:07:85:
                    a1:fe:81:b8:42:d8:5b:82:15:4c:52:27:89:a6:4c:
                    4d:ee:0a:25:d8:92:d8:2d:74:62:ef:e4:8a:ac:14:
                    49:51:9b:9b:b7:85:f4:49:6b:0c:47:5c:3e:dd:7f:
                    7f:ad:8c:3c:2b:5d:b0:4b:a2:39:05:6f:f7:6a:c9:
                    a2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F3:43:42:22:B9:74:EB:73:1E:D9:5C:3C:C6:05:E8:9A:42:A1:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/bf834f19-14c8-34f2-bf95-b3797bd96d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.209.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b0:1d:7d:9b:18:5a:79:71:c0:a1:25:70:b7:a3:70:cb:b1:
         41:1a:46:52:29:8b:6c:74:b7:a9:32:bd:1c:75:75:bb:e2:8c:
         ea:88:26:d7:1b:e7:9a:9b:3d:0a:d9:66:5d:6b:4e:2c:74:8f:
         de:fb:02:cd:78:e8:28:1f:70:88:5d:60:e8:3b:bf:54:99:ab:
         67:18:e6:71:1f:d8:5c:b8:3c:4f:ff:d9:2f:c5:3a:bc:a5:cc:
         64:3c:ee:12:e4:15:20:e3:84:43:19:47:be:1b:b0:90:bd:4c:
         5e:a9:d5:21:a3:76:5e:26:b1:20:52:c1:8d:2e:b4:fa:82:8c:
         dc:e9:51:f9:f1:85:a4:2f:d9:1b:94:77:1d:d6:ca:4a:70:e4:
         92:a5:1d:b3:44:0c:55:0a:b3:4a:79:72:72:2b:ec:b5:92:57:
         5b:12:a5:94:4d:6e:68:c3:02:fa:fd:3d:b3:12:fa:02:c7:15:
         54:1e:83:e4:a6:50:97:92:65:3e:a0:c0:fc:1f:e0:5c:88:6b:
         c9:9b:f5:bc:a1:07:28:28:ae:07:8c:56:27:eb:48:1f:c7:63:
         fe:05:8f:36:9d:bf:c2:56:72:de:64:37:00:bb:1c:1a:2d:7c:
         ab:72:f4:fa:38:b3:13:67:33:af:86:fe:e9:6e:4e:ef:cb:87:
         c4:81:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:10 2026 by rpki-client