Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa
File:                     ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa (raw, json)
Hash identifier:          pFRLvmfBTpe4K7qewR5uS9UbuxtSTnS3eCZ7O6sq9NM=
Subject key identifier:   8F:E2:0E:33:5E:D7:98:71:71:F9:3A:3A:16:4C:81:A0:40:F6:70:01
Certificate issuer:       /CN=1182705b-334d-49d0-b332-ccac8ae609a9
Certificate serial:       010D0C9F4328584F2ABD19DD837A73114FCDE928
Authority key identifier: 1D:F9:61:8E:5D:70:16:03:E9:F4:96:A1:D5:B9:26:C6:65:53:4D:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     12214
IP address blocks:        69.46.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/1182705b-334d-49d0-b332-ccac8ae609a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/1182705b-334d-49d0-b332-ccac8ae609a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:19:dd:83:7a:73:11:4f:cd:e9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1182705b-334d-49d0-b332-ccac8ae609a9
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=a7bf250c-4320-4822-b193-cfe97d1a62dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:73:02:de:44:45:27:2b:20:ab:a4:9b:90:
                    47:b5:0c:cc:1b:72:02:8d:2f:e9:94:bb:7e:66:a4:
                    27:7c:d2:3d:d5:3d:ec:41:39:cc:b1:c0:81:22:64:
                    59:83:a3:a4:a3:7d:8c:38:9c:c7:78:59:de:64:f9:
                    2a:ab:2b:fd:19:fc:83:89:d7:bc:91:50:9f:80:f3:
                    9d:92:f8:32:5e:d5:8e:5d:49:7c:30:22:1b:4a:cb:
                    33:39:44:f6:0e:79:2d:d2:70:b1:a7:ae:68:1f:61:
                    d8:f8:8f:30:68:45:80:59:55:8e:b4:86:68:c5:56:
                    19:c9:ec:c5:05:56:69:d5:7c:dc:dd:60:6f:64:0a:
                    ca:aa:91:e0:63:1d:4f:bf:05:6a:e6:5e:27:7e:4a:
                    24:d5:e7:21:83:fd:39:12:6f:93:5f:de:5d:36:3a:
                    16:3b:ee:37:e9:e4:1a:81:30:f1:3c:1c:a5:fc:c0:
                    50:34:25:27:d6:18:ce:9a:be:df:9c:36:6a:59:94:
                    3c:31:3a:4f:0b:66:62:62:32:c2:44:20:72:09:3d:
                    89:f3:74:31:d0:fe:20:a1:15:5c:d9:6a:cc:19:d9:
                    b5:78:f2:6a:51:ea:63:36:52:63:23:6b:0a:18:41:
                    d6:f9:23:50:68:5a:4c:36:92:91:1e:ec:7a:5a:20:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E2:0E:33:5E:D7:98:71:71:F9:3A:3A:16:4C:81:A0:40:F6:70:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/ee4fb3a3-98b6-30b2-aecc-0686bae28fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9/1182705b-334d-49d0-b332-ccac8ae609a9.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F9:61:8E:5D:70:16:03:E9:F4:96:A1:D5:B9:26:C6:65:53:4D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1182705b-334d-49d0-b332-ccac8ae609a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.46.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:87:58:05:ba:e1:5c:9e:d9:ce:04:d9:2a:52:1a:b5:af:1d:
         d9:18:9f:53:50:e4:fd:47:80:85:c1:93:0c:07:64:e5:67:58:
         9b:34:91:31:d7:8b:51:24:39:9c:55:d5:65:f2:75:b4:46:25:
         e2:aa:d4:0a:74:56:c4:c8:8e:42:99:fa:14:01:9e:df:4a:82:
         99:30:e0:ae:ea:fb:55:34:8c:26:82:7a:2e:f5:b1:d2:c3:b7:
         f8:bf:a1:98:80:d1:5a:6f:87:f8:d5:f5:30:13:94:cc:54:18:
         14:a5:68:ca:22:93:2b:41:cd:a2:29:c9:5c:0c:7c:16:93:c8:
         2b:93:92:d9:e3:df:c1:a7:79:53:78:69:16:12:88:ca:fb:a8:
         0c:76:ee:df:66:c3:eb:b6:e6:6c:69:c9:91:e9:2e:21:49:ac:
         58:93:6b:03:53:4d:48:1f:ca:44:03:f4:d6:7c:1b:44:3e:55:
         e8:70:89:ce:90:33:3c:f5:bb:e9:70:2c:85:3e:e9:9c:47:d7:
         f4:da:d3:3a:6f:48:ab:c1:d5:5f:66:71:c8:3b:1e:ca:a5:7e:
         0c:8a:61:02:90:83:95:9e:1e:e4:e1:76:fb:e6:02:7b:ae:ec:
         4f:a3:dd:05:24:c7:07:69:16:31:01:a0:d6:98:cb:cf:87:04:
         0d:9b:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:20:05 2026 by rpki-client