Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/719a1182-da90-3318-8b81-4f379a0031b9.roa
File:                     719a1182-da90-3318-8b81-4f379a0031b9.roa (raw, json)
Hash identifier:          XWHAj9iu2LeDeztNRBjH/9QZlN+M4bvyxX4uCEo6XoA=
Subject key identifier:   07:12:88:86:B6:6C:1D:AB:C3:F3:DE:45:0D:EA:76:FE:07:0C:A5:B6
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F4AD7E08E94F229744B3A0FC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/719a1182-da90-3318-8b81-4f379a0031b9.roa
Signing time:             Fri 25 Sep 2026 13:00:11 +0000
ROA not before:           Fri 25 Sep 2026 13:00:11 +0000
ROA not after:            Thu 24 Dec 2026 14:00:11 +0000
asID:                     16740
IP address blocks:        69.60.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d7:e0:8e:94:f2:29:74:4b:3a:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 25 13:00:11 2026 GMT
            Not After : Dec 24 14:00:11 2026 GMT
        Subject: CN=10efd668-fb80-44ee-8cda-a5bcf305cee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:d9:c3:f5:28:5c:e8:66:22:60:e2:23:0b:
                    c2:74:c5:40:af:d3:17:35:39:a8:1d:27:7f:fc:ef:
                    04:f8:c1:ec:d0:dd:54:3f:2a:c4:dc:db:61:44:2a:
                    d7:04:a7:df:68:3b:7c:15:c1:70:e9:2a:14:db:39:
                    da:6c:bd:57:ab:fd:e3:a8:19:22:e6:38:b5:67:46:
                    82:bf:50:c5:1d:c3:3d:9e:6a:e0:3a:28:af:80:14:
                    2c:a4:d1:6b:e1:19:b8:d1:67:d6:73:23:7c:60:24:
                    0c:cf:41:e5:1a:dd:ab:68:96:5f:47:2b:9d:94:52:
                    2e:d2:31:b3:84:f2:cf:e4:8e:1f:45:31:48:94:d0:
                    d6:d4:2b:90:78:4f:81:95:15:6e:ac:66:30:47:6b:
                    55:50:57:da:14:83:da:b3:f3:6b:2e:84:2f:42:e8:
                    72:11:20:18:f6:ad:c0:b7:20:93:18:74:4e:4d:c4:
                    5b:4e:f9:cc:1f:f3:6b:be:2f:89:59:9f:44:8c:c8:
                    cd:ea:f2:6d:3c:bb:ac:6f:e8:35:93:b0:58:73:0c:
                    0b:65:25:68:c1:1a:a6:88:21:01:7f:03:7f:33:74:
                    45:fb:1d:2f:b8:64:b1:4f:3a:da:a4:1d:2e:2c:f0:
                    e4:cd:c1:b0:df:4e:6b:42:a1:7e:d8:ab:8c:f0:e0:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:12:88:86:B6:6C:1D:AB:C3:F3:DE:45:0D:EA:76:FE:07:0C:A5:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/719a1182-da90-3318-8b81-4f379a0031b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.60.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:a8:eb:ad:11:f1:aa:05:3a:57:94:35:1c:54:77:dd:e8:
         66:31:43:18:82:ab:24:95:a6:5c:78:56:ad:13:e9:58:52:a5:
         b9:9b:73:b2:de:d1:47:c7:6f:bb:93:64:32:ec:6d:22:fd:c7:
         e2:8a:8f:ec:f1:9d:c2:3b:5e:0b:2a:39:63:49:8c:75:0c:d2:
         ed:95:05:84:4b:fd:10:33:9f:63:5c:6a:71:0f:7a:2b:3e:1d:
         3d:0a:bc:45:77:b5:3e:8f:60:72:54:ef:5e:d9:04:17:d9:2b:
         1c:3d:9d:b7:22:d6:f7:b9:7f:87:99:79:6b:99:d1:de:4c:13:
         44:4c:0b:7b:a3:e2:6d:1a:d2:7d:35:24:51:d4:bc:df:15:a0:
         9d:b7:a7:79:b3:69:96:a8:16:09:50:98:cc:77:c6:16:58:f2:
         2c:cc:8f:19:ee:14:63:93:1a:7c:27:2e:8e:f3:7d:c6:e9:39:
         d7:e7:9d:50:a1:bf:4e:7c:47:eb:29:3d:9c:b6:40:b5:00:50:
         7b:36:a8:73:82:5e:92:82:75:4f:70:69:55:04:e2:83:bd:c3:
         08:74:a0:2d:3b:e5:ff:0f:0e:e5:4a:3d:53:ed:b0:13:94:17:
         56:43:07:11:2f:d9:d5:ab:ea:44:6e:75:69:22:fb:61:b0:5b:
         6f:45:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:58:21 2026 by rpki-client