Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6ed8670-e3d9-32cd-bec3-aca538846214.roa
File:                     d6ed8670-e3d9-32cd-bec3-aca538846214.roa (raw, json)
Hash identifier:          G7SmLlUlh8HlGavJ7G88iYZ7k0LAXoTjrdbjr3H52Ww=
Subject key identifier:   BA:79:62:ED:C5:82:AA:04:4D:E4:0C:2B:06:C4:06:8F:CA:DD:C1:EC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4972B21EB5A4FC239E051DC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6ed8670-e3d9-32cd-bec3-aca538846214.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        69.33.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b2:1e:b5:a4:fc:23:9e:05:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4d89bb3b-9d9a-4564-b049-dc43d5fb8bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:59:ec:c4:50:d7:02:b3:d0:8c:d0:2e:66:
                    34:bc:d3:fd:07:00:4b:5d:e8:a8:ce:64:10:88:e6:
                    84:82:1f:2a:e9:e3:85:1c:4e:13:3a:22:18:16:3e:
                    47:dd:33:a1:0d:ff:01:23:98:83:7a:03:14:96:e9:
                    22:b3:6d:cb:b4:5e:a0:d9:a1:28:0b:88:3d:38:60:
                    53:63:8f:5b:4f:d0:ce:38:15:d0:dc:4c:c3:b7:39:
                    28:5f:87:66:28:82:27:bb:3e:91:ea:4d:a4:01:bb:
                    55:2f:4d:4b:ae:3c:04:db:68:8d:c4:26:57:36:0f:
                    a6:0f:2d:7b:7d:62:c4:be:93:14:26:c6:2a:9e:8e:
                    99:ea:3d:60:f8:52:2d:0b:15:4b:37:0d:ff:ad:99:
                    d7:54:a5:29:d8:14:66:3d:ae:5e:19:92:76:56:1e:
                    fb:6a:bc:99:f0:9b:36:e9:c8:65:76:b7:83:56:72:
                    ed:e9:c4:16:57:aa:28:a1:8b:24:3c:26:1c:94:f9:
                    e8:9e:58:cb:b9:95:d0:7e:d0:51:78:0b:d9:7d:22:
                    09:94:2c:79:80:ed:5e:32:88:68:5f:39:90:cb:cd:
                    1d:2d:be:92:6c:04:62:6f:46:0f:1d:ea:83:25:7b:
                    32:00:1a:c2:5c:84:ef:ac:e3:c2:49:d3:85:cb:78:
                    eb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:62:ED:C5:82:AA:04:4D:E4:0C:2B:06:C4:06:8F:CA:DD:C1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/d6ed8670-e3d9-32cd-bec3-aca538846214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:4d:2f:61:c9:35:b3:dd:11:8d:c6:4f:7c:e2:63:c3:96:
         8d:03:ba:3f:ac:76:06:1a:2a:1d:a0:ed:b3:f8:2d:b2:6d:90:
         20:26:8a:cd:c3:94:05:fd:91:08:7c:4d:20:a4:ac:7c:48:a7:
         8a:48:0f:f1:d0:40:d0:9e:9b:78:70:00:5b:c7:4f:51:44:80:
         e8:f9:3a:cd:a9:e7:f7:fe:4f:b6:97:b1:ce:d1:83:93:22:f7:
         29:76:95:aa:b0:a0:1b:35:4a:03:20:4c:92:e5:b9:02:08:fb:
         2d:11:97:0a:02:68:68:42:be:16:17:69:3f:86:c9:28:31:12:
         9d:74:e0:72:86:72:6d:1e:a6:38:e1:89:b0:3a:19:c3:57:af:
         3a:d0:a2:a6:21:bf:e0:b2:ca:77:8f:79:a4:2f:53:57:95:36:
         26:a8:7f:71:0d:e6:3c:02:e1:f1:c7:95:7e:73:9c:8a:69:70:
         7c:47:10:6e:25:6d:45:fa:25:61:de:98:d9:d9:df:1f:96:c6:
         70:4e:29:2d:97:95:d7:40:f9:23:4a:39:29:f9:36:d4:28:9d:
         3e:d9:9e:96:2a:65:1c:2c:80:87:99:d4:36:fa:08:bc:bd:f9:
         e5:82:55:4e:78:3a:28:6d:85:d1:73:25:9d:1e:c9:fa:0a:81:
         bd:38:fb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:37:54 2026 by rpki-client