Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e6917225-642d-3273-a2a6-a6004b20848b.roa
File:                     e6917225-642d-3273-a2a6-a6004b20848b.roa (raw, json)
Hash identifier:          ZEqvhPl5kEUx0QPb+baW2liMzy/9vgxNRzrhTFSUfYI=
Subject key identifier:   5A:69:07:F8:94:4D:F2:C6:D4:47:C6:83:3C:9B:E9:44:52:58:1C:A9
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584F497409D5DA6B13627A94EC40
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e6917225-642d-3273-a2a6-a6004b20848b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401307
IP address blocks:        69.58.54.0/23 maxlen: 24
                          69.58.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:09:d5:da:6b:13:62:7a:94:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4b346872-a58c-4ae2-ba32-5a89739fe197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:07:7c:a8:e8:6d:63:ff:c1:c1:42:d9:58:
                    87:6d:76:5b:a5:e1:64:1c:35:1c:77:f3:32:ba:0c:
                    85:56:21:e3:2b:38:b8:43:87:f2:81:fe:1d:9e:25:
                    d9:c5:8e:13:1e:3a:82:86:f1:99:04:ec:31:e7:ce:
                    a8:f6:50:f0:d3:80:b8:34:fd:73:79:fe:7b:56:88:
                    39:7a:8c:8a:4d:bb:a6:60:78:15:36:c1:7e:1f:c5:
                    a5:dd:02:60:0e:72:d5:9f:6e:d2:b6:39:f6:d2:1e:
                    7e:6a:a8:00:9f:2a:a8:bf:c9:6a:8f:97:85:1b:2a:
                    62:93:68:cd:f9:53:7d:9c:2d:40:5e:b5:53:5c:7c:
                    e7:82:a5:79:d7:9d:bb:52:cf:ae:0d:6b:08:bf:24:
                    df:43:6e:ec:16:0a:67:3e:43:51:92:db:b0:52:89:
                    d2:3c:51:4e:c0:d1:ba:97:73:c4:c7:56:d3:72:18:
                    87:2b:e5:2a:72:93:bc:40:46:93:ff:ab:0e:23:aa:
                    24:5e:4a:7a:9d:6a:73:e2:3c:74:4a:77:17:e1:6a:
                    40:05:8f:f8:ba:8b:af:b8:70:26:5e:52:58:40:03:
                    bb:4a:7f:81:1c:4c:72:49:e4:27:d8:13:68:0e:5c:
                    92:65:7f:a4:84:4a:0e:60:eb:51:10:44:3f:db:e1:
                    b4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:07:F8:94:4D:F2:C6:D4:47:C6:83:3C:9B:E9:44:52:58:1C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/e6917225-642d-3273-a2a6-a6004b20848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.54.0-69.58.57.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:e8:4d:b6:88:d8:3f:84:bc:e5:03:d3:ce:91:4e:bb:4d:
         ac:14:39:c1:f1:47:28:a5:cc:b8:64:44:8c:d0:ce:88:b0:7d:
         8a:e9:d4:11:3f:2f:4f:2b:33:1e:57:f2:86:aa:90:5f:82:65:
         b5:64:12:06:6b:2f:1e:47:c9:96:09:35:72:f3:7c:2b:6d:de:
         53:f0:43:0c:ae:97:eb:ea:a4:83:fb:93:cc:eb:a4:87:39:77:
         3e:eb:2c:94:93:9b:f9:85:2a:f9:37:62:b8:8b:15:7c:dc:e8:
         89:00:09:e4:d8:50:07:1d:6c:77:5d:df:55:b6:54:bc:e3:53:
         66:84:8c:e6:71:48:2b:3d:5d:5b:4e:76:75:b2:a4:1a:fe:eb:
         66:f7:fe:a0:24:4d:c2:79:9b:1b:66:d2:62:b2:77:b3:a8:c2:
         34:d3:1a:f3:b9:77:ee:04:37:14:9f:87:b0:a3:d2:bc:5b:ab:
         d7:7f:e1:fc:7f:08:59:6f:68:d9:2d:af:f7:66:9e:8c:ad:9b:
         7b:c9:b6:f6:2d:43:d1:0a:6e:e3:fe:37:1b:0f:4c:53:a0:a4:
         74:42:5a:38:3b:8d:1f:45:45:59:ef:d1:02:5e:f7:06:a4:c9:
         fc:2e:20:5d:a7:3c:a2:9e:7b:df:bb:3c:01:93:8a:12:d6:b7:
         c7:42:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:50:32 2026 by rpki-client