Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a9f06669-f528-30d5-9964-582b65f02d79.roa
File:                     a9f06669-f528-30d5-9964-582b65f02d79.roa (raw, json)
Hash identifier:          c9I8veI63yTRjy80bercECVbfQGCM92D20ckuWN1KGs=
Subject key identifier:   A8:B7:32:69:AF:20:9D:6C:34:B8:22:85:0D:B4:F2:C4:63:6D:96:8E
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F4AD7E0BED6864F4567048000
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a9f06669-f528-30d5-9964-582b65f02d79.roa
Signing time:             Fri 25 Sep 2026 13:00:11 +0000
ROA not before:           Fri 25 Sep 2026 13:00:11 +0000
ROA not after:            Thu 24 Dec 2026 14:00:11 +0000
asID:                     16740
IP address blocks:        69.60.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d7:e0:be:d6:86:4f:45:67:04:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 25 13:00:11 2026 GMT
            Not After : Dec 24 14:00:11 2026 GMT
        Subject: CN=1cbb43fe-e7bd-4f5b-99a3-e13b54f3a071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:0c:6d:30:00:c6:a1:37:04:e6:a4:92:a5:
                    e1:99:a7:d2:85:bc:fd:07:ef:1f:33:e8:93:7b:e2:
                    6a:55:2b:c4:23:78:06:11:51:c4:8b:06:04:a5:07:
                    fc:5b:d0:46:df:f0:3f:4f:37:79:45:6c:8e:52:a2:
                    c0:59:c7:42:fe:97:11:cf:da:56:36:b9:b8:84:36:
                    0a:da:66:eb:a7:73:74:13:93:27:37:bc:17:d2:8f:
                    17:44:c0:b7:bc:66:a5:75:ba:a8:e3:29:31:e8:4c:
                    26:69:71:25:8f:0c:1a:6d:c4:9a:a0:68:6a:f7:cb:
                    20:63:5c:7f:c9:38:1e:8a:95:d5:8d:3e:e1:8c:6a:
                    dc:60:c4:fc:3f:79:35:7b:f8:47:25:8b:54:a7:0f:
                    8c:69:8e:d1:1d:41:62:ce:f3:4b:af:e0:bf:08:cd:
                    70:21:6e:35:ed:ea:ec:1a:9d:62:ec:72:2a:49:33:
                    d6:b2:20:9d:6e:c1:df:63:c3:d1:98:65:e8:58:98:
                    61:91:7a:a0:e0:6c:f3:90:14:14:93:99:93:e8:81:
                    ae:17:74:bc:5f:18:43:8b:68:34:72:2d:b4:5f:de:
                    25:dd:fc:e7:d2:b9:2d:ac:62:a7:8f:4a:69:e9:94:
                    46:35:b1:28:61:b3:66:f0:3b:de:c1:86:59:1a:3b:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B7:32:69:AF:20:9D:6C:34:B8:22:85:0D:B4:F2:C4:63:6D:96:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a9f06669-f528-30d5-9964-582b65f02d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.60.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a9:1d:d8:af:e6:25:f2:a7:63:02:dc:fd:13:76:57:a3:89:
         0f:39:6e:b1:97:3c:3c:2c:92:57:80:78:fa:bc:f7:49:d4:37:
         4e:a5:71:ce:c4:07:12:70:8f:cb:62:91:fe:07:3d:3b:ba:aa:
         fb:d3:93:32:6c:7e:cd:c8:6c:4a:78:11:da:d4:ce:80:6d:45:
         2a:05:4a:69:6f:80:e0:d7:31:95:d0:e1:30:b8:eb:7d:e1:db:
         7f:6a:00:09:74:f5:2e:1e:f9:69:80:3f:e9:f0:2e:91:99:c4:
         ae:84:fe:3e:c8:90:0f:45:a2:7f:f9:e3:5e:86:9c:ce:8a:6f:
         3a:ed:32:8c:3f:4e:04:d6:de:f5:5e:c8:9c:3c:b9:f5:1e:a6:
         e0:78:0a:9f:31:bd:46:ef:eb:68:36:a8:98:d1:08:b5:6e:81:
         3d:4b:36:64:38:34:8b:ca:ff:9f:81:c7:ef:01:38:5e:9c:a7:
         9f:50:56:b0:99:cc:05:f8:98:2d:ce:eb:04:51:7a:aa:04:e3:
         64:f9:6d:8d:09:e9:70:fc:5e:04:53:79:6e:61:19:ca:d2:35:
         9f:8f:72:7b:82:a1:90:5c:b5:d2:8e:80:57:35:4a:fb:69:90:
         fe:d7:cd:38:39:6e:7e:bb:1f:da:8a:fd:54:7f:a4:7e:19:1d:
         6d:fa:f6:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+C+1oZPRWcEgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk
MWNiYjQzZmUtZTdiZC00ZjViLTk5YTMtZTEzYjU0ZjNhMDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPAMbTAAxqE3BOakkqXhmafShbz9B+8fM+iT
e+JqVSvEI3gGEVHEiwYEpQf8W9BG3/A/Tzd5RWyOUqLAWcdC/pcRz9pWNrm4hDYK
2mbrp3N0E5MnN7wX0o8XRMC3vGaldbqo4ykx6EwmaXEljwwabcSaoGhq98sgY1x/
yTgeipXVjT7hjGrcYMT8P3k1e/hHJYtUpw+MaY7RHUFizvNLr+C/CM1wIW417ers
Gp1i7HIqSTPWsiCdbsHfY8PRmGXoWJhhkXqg4GzzkBQUk5mT6IGuF3S8XxhDi2g0
ci20X94l3fzn0rktrGKnj0pp6ZRGNbEoYbNm8DvewYZZGjsVEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKi3MmmvIJ1sNLgihQ208sRjbZaOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYTlmMDY2NjktZjUyOC0z
MGQ1LTk5NjQtNTgyYjY1ZjAyZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTwXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOpHdiv5iXyp2MC3P0TdlejiQ85brGXPDwskleAePq890nUN06lcc7E
BxJwj8tikf4HPTu6qvvTkzJsfs3IbEp4EdrUzoBtRSoFSmlvgODXMZXQ4TC4633h
239qAAl09S4e+WmAP+nwLpGZxK6E/j7IkA9Fon/5416GnM6KbzrtMow/TgTW3vVe
yJw8ufUepuB4Cp8xvUbv62g2qJjRCLVugT1LNmQ4NIvK/5+Bx+8BOF6cp59QVrCZ
zAX4mC3O6wRReqoE42T5bY0J6XD8XgRTeW5hGcrSNZ+PcnuCoZBctdKOgFc1Svtp
kP7XzTg5bn67H9qK/VR/pH4ZHW369i4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:51:09 2026 by rpki-client