Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa
File:                     712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa (raw, json)
Hash identifier:          T9XLsXbk2sxOXWx7ppBE5sDFtKlrr5sbfmp4XzO3BrA=
Subject key identifier:   F4:50:A1:29:25:B1:B8:C3:13:0E:C8:2C:9B:84:A3:C3:5E:08:36:54
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584E8DEFA4B95056B293F3BCBCC0
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        69.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a4:b9:50:56:b2:93:f3:bc:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=91ed4007-1358-4e49-910a-349c99fce16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:fd:ee:99:ea:52:77:6a:6a:d2:b9:8b:b0:
                    02:46:80:0a:7c:ae:14:32:3f:df:e8:85:53:41:e9:
                    73:83:9f:35:44:91:b7:6f:df:37:73:79:db:16:26:
                    58:1e:2c:87:5e:fe:b5:fc:44:3e:85:8f:4e:66:09:
                    2e:97:5a:a6:2a:79:84:0d:72:3f:2f:c2:6d:4c:15:
                    b7:15:0a:a6:2c:3f:fb:7a:ed:27:12:9c:a2:53:30:
                    c6:0e:2f:05:d2:56:c1:8b:b2:45:60:79:d8:80:74:
                    d6:2b:43:b4:9e:94:4d:3e:d5:79:25:8c:c4:dc:f8:
                    0b:51:86:b5:3c:9a:64:0b:55:b8:90:02:65:d5:3c:
                    f6:83:41:52:ef:82:df:14:4b:f4:c9:74:5c:a2:1c:
                    2f:85:00:84:36:44:5c:3e:3e:70:b6:f8:64:27:46:
                    5d:ab:fb:83:c9:5b:84:58:44:dd:71:1b:9a:db:6a:
                    7b:97:84:a7:1e:19:33:dd:d0:a4:29:e9:df:1e:6b:
                    b4:62:d8:81:7b:fd:6d:1d:76:7b:c3:9a:09:e1:e0:
                    16:8a:65:9f:6e:7a:7a:80:a7:a9:46:d1:c2:3b:19:
                    02:1e:ee:02:d4:8f:f7:44:d2:92:ae:59:45:f8:89:
                    fe:f3:e7:01:12:c9:8a:d6:19:6a:80:b1:a7:9a:ce:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:50:A1:29:25:B1:B8:C3:13:0E:C8:2C:9B:84:A3:C3:5E:08:36:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/712fd611-7c44-3f3b-8a5e-f9c8947529d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:f4:06:33:f5:90:7b:ea:27:9f:7f:e8:bb:5e:89:83:14:
         11:9c:49:b7:68:7a:3a:1e:1c:73:05:d4:1a:75:33:c2:d4:a7:
         18:77:16:a4:6b:11:09:cf:f6:0c:fd:9c:b8:6a:b8:8e:f9:1a:
         e9:83:12:45:7e:d7:4d:1e:63:57:7d:5b:ad:c7:3f:8b:ee:0c:
         61:ad:01:36:33:6c:7e:cd:87:56:07:8b:a7:15:bb:26:e1:fe:
         c6:bc:38:b6:27:ae:2f:a6:62:8c:1a:8d:ae:2b:37:4c:e1:76:
         62:a3:23:50:84:29:ce:2b:04:85:f6:fb:b9:a3:cf:4e:19:be:
         18:2e:22:af:66:be:36:e8:81:5d:1f:b5:88:e1:c4:78:2a:35:
         ce:fd:5c:24:10:99:81:3a:50:b5:8f:0d:81:ad:14:a2:ce:45:
         e4:13:ad:37:da:8a:7c:a6:ce:d8:d5:da:d6:f7:ab:51:5f:55:
         83:eb:40:85:aa:cf:27:e1:e3:a5:82:e7:e3:51:99:0d:5a:c1:
         e4:c3:19:71:87:44:6b:ce:6f:68:34:e3:a1:33:09:32:f1:ac:
         72:b9:9b:55:e8:ca:2c:f9:06:21:85:76:4f:27:dc:15:95:05:
         e3:f9:5b:99:39:02:7d:52:ae:0e:d3:c0:cd:fb:33:25:0f:b5:
         96:ec:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:54 2026 by rpki-client