Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa
File:                     54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (raw, json)
Hash identifier:          RK1qGi1eQUiv29yj9dG4x8H/WVIlvnQze9g2QGgpAgA=
Subject key identifier:   00:13:F2:A6:3A:41:03:89:9B:79:CA:B7:5B:AA:BA:AC:37:A2:8B:51
Certificate issuer:       /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
Certificate serial:       010D0C9F4328584E2D9F411900D12EF004F9DBC0
Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     395153
IP address blocks:        69.12.96.0/24 maxlen: 24
                          69.12.97.0/24 maxlen: 24
                          69.12.98.0/24 maxlen: 24
                          69.12.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:41:19:00:d1:2e:f0:04:f9:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=13b7494b-4e1d-4063-8acc-a8da2c236bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:9f:70:71:d6:3a:26:91:39:e9:df:c7:9b:
                    a6:50:7a:9a:08:e0:7f:0b:75:6c:17:22:d2:aa:cb:
                    14:87:de:b6:62:ef:7a:36:0f:e9:18:e3:95:11:0f:
                    41:6a:8d:0c:40:2a:5b:4f:d9:f3:47:bb:b7:ea:36:
                    2c:1d:3b:98:1d:0d:58:31:b8:62:d5:97:e4:1c:c8:
                    a3:4f:a2:a3:c2:cd:f0:24:7e:b6:48:aa:63:cb:61:
                    2f:c6:f2:b0:dd:3e:51:42:86:bd:5d:2a:21:85:e9:
                    23:3a:f2:8b:54:7d:01:31:26:9d:28:21:ba:3e:73:
                    14:45:e6:c2:12:5e:d7:2e:7a:33:fa:53:12:41:5b:
                    25:0d:c7:a3:60:b7:82:5c:49:13:c0:c9:ab:58:7c:
                    a5:4e:b8:27:3a:39:5a:96:0b:96:85:97:cd:83:5e:
                    c3:e7:f2:7a:5f:94:1e:ca:f0:45:0b:5a:53:84:a7:
                    af:5c:43:28:47:b3:52:67:be:c0:b5:ff:5e:f5:ac:
                    c0:69:67:13:c7:8e:e9:dc:fc:f0:6c:81:04:f9:a4:
                    ae:01:22:eb:66:78:0b:46:6d:f1:53:e2:b0:e7:17:
                    12:12:ad:0b:07:90:a7:b1:c4:f6:ec:86:15:e2:ff:
                    3b:c9:ef:0f:d5:30:a8:9b:42:c6:12:53:9a:6d:42:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:13:F2:A6:3A:41:03:89:9B:79:CA:B7:5B:AA:BA:AC:37:A2:8B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl

            X509v3 Authority Key Identifier:
                keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:fe:3c:0c:5b:a8:b9:d3:2d:c7:fb:29:a9:34:d8:aa:90:
         69:37:97:52:55:49:cd:44:87:99:35:26:96:99:42:44:b3:b5:
         13:d9:c4:25:28:c2:d3:0e:9f:87:7a:06:c7:84:cc:5e:f5:3c:
         6d:7d:80:85:1d:df:2c:e8:49:b9:b8:c0:75:74:2b:9f:a7:31:
         2a:2a:ea:1d:c8:5b:c2:38:5c:d7:84:cc:7a:8b:5c:ed:92:de:
         18:19:74:41:cc:2d:b8:eb:39:94:61:27:48:5d:ce:c3:95:1d:
         ca:0b:88:cc:cf:e0:af:b9:25:9c:a4:b5:aa:4a:fe:91:a0:19:
         84:db:18:c8:c5:75:39:5a:48:71:ba:99:50:15:a2:fe:94:bc:
         42:7a:f2:9b:7a:ad:16:e4:86:65:de:48:dd:da:c0:f1:10:4d:
         30:01:3f:50:d9:b3:e2:71:be:6e:47:28:14:c9:52:ea:f9:38:
         fd:01:80:98:19:66:48:94:5b:14:35:f0:c1:e6:7c:72:4d:a6:
         90:f4:af:1c:78:79:ad:8a:53:76:4b:9a:63:0f:a8:7f:72:e0:
         2d:e9:65:f6:43:cd:27:5f:3b:07:31:1c:70:b2:44:de:3c:ed:
         9a:dd:66:2d:bc:b9:e0:28:c6:9f:75:4f:ea:b8:0b:fe:aa:62:
         e8:e9:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:39 2026 by rpki-client