Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/54662c83-005b-316c-aa7c-737b59a92891.roa
File:                     54662c83-005b-316c-aa7c-737b59a92891.roa (raw, json)
Hash identifier:          OFWk0u8dL2B3YgoolqjhcTYFDaJZ0LVXhkp45/5Holg=
Subject key identifier:   61:84:B3:D1:EC:92:6B:E8:A8:9C:09:7E:E3:CF:6B:FD:2E:ED:AA:05
Certificate issuer:       /CN=960e110b-8a58-4e15-a2f1-8d907656427c
Certificate serial:       010D0C9F4328584D492A5D249D61EA8305653800
Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/54662c83-005b-316c-aa7c-737b59a92891.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        69.10.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:5d:24:9d:61:ea:83:05:65:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=3c894ac7-abd5-46e9-8bb4-963ab94ed581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:64:3a:2c:85:09:9e:dc:5c:87:81:b1:6a:69:
                    e5:2a:6b:34:c2:97:e1:d4:67:14:a0:bd:3e:59:fc:
                    97:d9:43:a2:3b:b6:a4:5c:65:f1:98:59:fc:fd:8e:
                    17:6e:e3:e1:ef:f9:d8:69:93:d9:25:76:44:ab:74:
                    17:c0:d3:28:42:c3:c4:a6:dd:e3:13:62:34:1a:67:
                    9f:84:07:44:8b:3a:7d:a4:6f:66:ba:35:18:dd:7b:
                    46:93:27:2d:ee:1b:0e:b3:fe:b0:c5:dd:50:29:55:
                    3c:5b:58:ac:df:ac:77:85:ff:9d:b6:9f:6a:cb:a2:
                    9d:09:b6:06:3a:0e:7a:41:c6:9a:6c:2a:33:b0:31:
                    f3:e5:4b:4c:e8:64:a6:98:2b:12:5a:a3:e9:99:0f:
                    2a:ce:c2:7b:7f:a4:ae:b9:3f:5f:ef:07:0e:b5:6f:
                    0f:bd:b7:5f:75:b9:a1:ef:31:01:2e:e4:3f:8f:29:
                    08:d3:99:50:f7:b3:95:1f:8f:4d:0d:18:fa:6d:93:
                    2a:40:46:63:92:76:ee:a7:e5:27:9c:26:fd:48:23:
                    14:5b:e1:8e:f3:12:9b:ad:bd:de:b6:e2:74:37:b4:
                    55:03:77:1d:6f:ef:bb:bc:fa:69:cf:97:7e:30:bd:
                    58:84:26:de:96:4c:8f:b3:71:ba:79:34:ef:57:c6:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:84:B3:D1:EC:92:6B:E8:A8:9C:09:7E:E3:CF:6B:FD:2E:ED:AA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/54662c83-005b-316c-aa7c-737b59a92891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.10.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:44:03:0c:bc:11:47:b2:c5:3d:e9:b7:61:56:77:56:d5:3d:
         3c:94:54:05:09:42:e1:3c:18:73:6f:5d:94:92:0b:55:fd:38:
         a7:de:ea:b5:ae:6d:aa:3b:0f:89:5d:48:4c:81:d5:c5:49:9c:
         da:a4:7e:86:6a:48:a7:c2:9b:30:57:12:a0:7c:50:fe:f0:9d:
         ea:60:3f:d7:7d:d3:7a:6e:3b:bb:bc:58:51:22:23:76:e1:51:
         74:56:75:2e:37:00:59:49:f0:86:8e:d1:f5:53:c2:f8:24:a6:
         2b:07:a0:23:06:49:2a:1e:97:89:f9:8a:cb:91:28:63:25:65:
         f8:d8:73:3b:78:22:ea:39:11:c4:50:3c:76:39:58:b5:af:db:
         49:32:72:50:82:d6:8e:9e:35:16:ea:bc:dd:43:8a:f3:c1:3f:
         f7:6b:12:47:4b:6c:da:49:66:f6:d8:fa:65:e5:b4:50:05:cf:
         46:6b:5f:3c:18:fe:40:51:f1:9d:09:30:6c:16:71:32:56:3e:
         9f:7b:8a:91:94:7f:fa:fa:d5:14:60:06:b4:72:b3:80:9a:86:
         92:7d:37:cf:a7:02:69:b6:6f:53:43:10:4c:99:c4:72:bf:fd:
         d6:e4:c2:5f:7a:72:f1:01:4d:40:cd:50:20:74:74:01:5c:7f:
         c5:cd:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:03 2026 by rpki-client