Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90dd00b1-6663-33ff-96c5-dd625e8b80fa.roa
File:                     90dd00b1-6663-33ff-96c5-dd625e8b80fa.roa (raw, json)
Hash identifier:          6ISzdxPadhxdpvVK1M1GySwLyCmNsCSgpZQjgA6NC9g=
Subject key identifier:   7D:E7:1C:F7:7F:B2:57:BB:B3:C7:A9:B1:1D:C4:0A:EF:5C:A4:7B:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F15CCEAF035E55034374E2C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90dd00b1-6663-33ff-96c5-dd625e8b80fa.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     3372
IP address blocks:        69.96.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ea:f0:35:e5:50:34:37:4e:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=9e83993a-89b4-405b-9279-52befc868f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:da:28:76:88:7f:74:15:7c:91:47:77:5b:2d:
                    f1:f4:d6:e7:32:4b:4e:0d:af:17:4c:71:cc:83:69:
                    99:6c:42:07:83:30:23:a0:b4:de:a0:a8:13:fb:03:
                    e2:32:40:cf:b7:96:dd:96:89:1e:05:1f:af:eb:30:
                    8b:c6:9b:cc:23:8d:4f:9c:62:0d:0a:9e:33:06:32:
                    b9:b9:46:92:70:ed:25:d8:9a:5f:05:ca:fb:0f:d3:
                    91:5d:59:2d:ce:7c:e3:b6:8d:f1:03:52:6a:32:99:
                    1c:ce:7d:dd:9d:b1:9c:db:32:4b:25:fb:c3:1f:75:
                    bb:2b:b7:bc:eb:8d:ef:f0:5b:a0:8f:66:ef:78:82:
                    56:3b:eb:e6:26:76:f1:9a:03:52:e2:33:00:d7:d6:
                    60:3d:87:40:6c:0d:2e:4d:4b:26:c5:aa:41:d1:ab:
                    be:f3:a2:fb:00:89:e7:38:50:54:79:bd:2d:93:da:
                    49:cf:09:54:b3:58:b3:5e:32:a2:c1:11:02:39:0e:
                    38:f2:b4:af:cd:2a:86:02:01:69:7d:c2:70:73:28:
                    b0:6a:08:b3:07:73:3c:c0:05:ec:06:3d:cc:18:5a:
                    83:c3:3b:4f:3c:10:ba:42:84:59:37:e3:0e:d2:e3:
                    01:5b:6e:93:d6:b8:49:0c:cb:c2:cc:55:22:35:f4:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:1C:F7:7F:B2:57:BB:B3:C7:A9:B1:1D:C4:0A:EF:5C:A4:7B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/90dd00b1-6663-33ff-96c5-dd625e8b80fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.96.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:52:e7:3f:46:62:db:5a:6c:21:e1:1f:06:ee:24:63:d2:
         f8:87:09:80:f4:cc:6e:a8:7b:2e:93:a2:b3:a6:e1:75:70:9b:
         a7:bf:1b:da:43:4d:20:da:e5:0f:43:64:b7:4c:f6:c3:f7:e7:
         8b:fb:96:10:e9:c1:de:ed:24:e7:be:61:79:eb:33:6b:4c:a6:
         ef:d0:32:f7:09:de:d2:c5:c2:b5:74:15:7d:e4:ff:df:5f:64:
         33:a1:8c:30:1f:a0:20:f4:97:16:8b:5c:3f:fd:37:df:9c:09:
         5f:9b:41:72:12:44:6c:f9:4e:10:b6:6c:bc:1b:b2:8b:dc:78:
         7d:d1:88:7b:00:b7:bf:8d:61:81:cc:45:6b:f7:7d:5e:33:c9:
         e8:0b:66:fa:a2:46:bb:81:a9:8b:57:92:cf:f6:8a:34:64:49:
         9c:92:91:cc:b2:fe:dc:21:7d:3c:1e:75:73:0e:96:e2:eb:fa:
         7d:17:55:ca:8e:b3:9b:7a:d8:53:82:81:a8:5a:4f:e5:4c:d1:
         10:0f:c8:3b:c0:a7:c6:fd:5a:ef:ab:57:ef:1c:3c:36:b7:54:
         06:1d:4d:11:45:1c:ca:f8:f3:ec:d6:9f:e6:c6:43:b5:3d:5f:
         ff:2c:ce:3f:ab:1f:5e:11:de:da:9f:34:bc:08:ea:f8:5e:61:
         3a:fa:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:20:36 2026 by rpki-client