Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/c2695bc1-2ea5-3610-9082-0f23909f3562.roa
File:                     c2695bc1-2ea5-3610-9082-0f23909f3562.roa (raw, json)
Hash identifier:          7M4vBY976iBLRJhbTkVCQ+h+YgQNMEpIrvPT2ZKs83s=
Subject key identifier:   2F:FC:16:66:54:8B:72:75:0A:14:4E:24:FE:65:BD:4D:D9:C3:C0:5C
Certificate issuer:       /CN=360964b0-1eb6-4597-8231-2e448a53e152
Certificate serial:       010D0C9F4328584E94EA54C765CC8A17B0CA6700
Authority key identifier: BD:07:97:1A:0E:2D:23:05:3E:86:63:A6:F6:16:95:1A:F2:64:A9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/c2695bc1-2ea5-3610-9082-0f23909f3562.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     401493
IP address blocks:        69.67.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:54:c7:65:cc:8a:17:b0:ca:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360964b0-1eb6-4597-8231-2e448a53e152
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=ce702855-8003-4725-94ad-cc10c7414a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:40:85:eb:5f:90:c9:52:24:34:cf:00:c0:
                    a8:dd:f6:44:76:89:be:ce:27:b8:6b:e0:09:bc:e2:
                    91:9c:fe:e6:69:db:6a:44:47:f2:df:02:0c:ef:c2:
                    7d:31:4c:ef:4b:47:4c:ab:4b:70:91:ec:bd:8f:e5:
                    5d:ed:11:ee:e8:25:d6:f4:49:ff:72:82:2b:e2:f9:
                    1a:ec:32:dd:d2:c2:84:78:12:f2:26:ba:75:d6:3e:
                    a4:08:ee:67:03:da:71:4d:78:76:a1:be:21:c8:ee:
                    ae:80:64:aa:a7:51:e1:92:80:83:5b:08:b4:0f:a6:
                    e6:5b:37:fe:00:cb:35:18:80:cd:f1:08:ab:30:c9:
                    77:df:01:70:d0:1f:ef:57:68:f2:03:92:70:63:4b:
                    40:3d:70:66:41:b5:3d:46:aa:0a:b2:ea:85:fd:f5:
                    8b:ae:27:13:26:14:96:61:6a:83:da:40:66:19:a8:
                    6d:6f:10:52:eb:29:3f:cf:49:ff:e8:f8:fb:2b:6a:
                    58:4c:46:c7:4c:cf:b6:66:85:aa:b2:d0:cd:7b:f1:
                    0b:b8:71:7a:9f:e1:0e:b4:80:a6:3b:14:4d:d8:7d:
                    80:25:f0:e7:5f:88:b1:f4:e3:03:da:48:7b:99:17:
                    5a:d0:00:5f:00:b3:33:8b:df:2c:9f:b6:c7:81:38:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FC:16:66:54:8B:72:75:0A:14:4E:24:FE:65:BD:4D:D9:C3:C0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/c2695bc1-2ea5-3610-9082-0f23909f3562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152/360964b0-1eb6-4597-8231-2e448a53e152.crl

            X509v3 Authority Key Identifier:
                keyid:BD:07:97:1A:0E:2D:23:05:3E:86:63:A6:F6:16:95:1A:F2:64:A9:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/360964b0-1eb6-4597-8231-2e448a53e152.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5b:3c:db:46:48:7a:e6:23:b9:22:19:da:b5:6a:42:ec:7c:
         9d:89:ed:06:c1:0c:e7:27:e2:88:ca:19:04:27:34:15:a4:71:
         4d:1f:5c:e0:48:11:27:85:4b:d2:83:95:3d:d2:fe:83:41:5e:
         f4:68:2c:e4:c2:00:d8:ff:f6:24:dc:ca:55:43:87:4a:b0:60:
         46:9a:f0:83:f0:1b:06:d4:f5:db:cc:3d:b2:32:67:c0:76:d2:
         c2:bc:a6:64:c4:3e:4e:7b:53:6b:8d:d5:a5:73:5e:7b:fb:78:
         23:9e:1f:5b:e4:a1:d5:ca:84:7a:2c:a5:8e:e9:46:43:50:f8:
         c8:a0:23:5b:a4:fc:f6:47:3b:d9:28:19:1c:4c:4c:66:c3:ff:
         92:1d:bf:88:3a:95:18:92:c5:a1:8e:d9:a3:5d:29:3d:59:1e:
         e6:94:86:4e:41:da:80:67:dd:16:c7:9e:28:e9:a3:d6:b0:04:
         87:a3:e7:b1:5b:3c:23:5c:a5:9c:39:98:b9:38:87:28:8d:1f:
         6b:54:1c:29:f0:ea:f5:f3:db:91:8e:59:d6:3c:ba:71:85:c8:
         dd:c4:9a:ea:e9:74:ff:99:2d:15:2b:18:50:79:ca:78:6e:85:
         75:3c:73:3b:e5:d3:b7:48:ad:b6:1a:d0:8f:0e:52:42:08:29:
         0a:6a:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:38:06 2026 by rpki-client