Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
File:                     59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (raw, json)
Hash identifier:          llYxA4k8su6KywbH3hmER05ehJShg2gsnIOhkPuXdek=
Subject key identifier:   C6:70:55:33:2A:0B:3D:5F:A9:35:71:1A:3C:29:4C:05:69:71:67:F7
Certificate issuer:       /CN=223a4b84-939d-437b-85a8-9ff465d0541e
Certificate serial:       010D0C9F4328584CA491B055152169B5470F5420
Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        69.72.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:b0:55:15:21:69:b5:47:0f:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=7374ecd0-4968-4792-a7d4-317f39564363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:7f:43:b4:03:62:14:7b:8b:b2:51:99:5d:
                    77:06:17:01:08:ce:d5:7c:e5:3c:63:ab:29:df:ea:
                    e8:f7:8b:59:11:c6:71:f6:4f:a7:26:4f:78:dd:13:
                    ab:14:0d:09:bc:36:1f:38:f9:6a:e5:65:5c:cb:26:
                    bf:d6:7a:a4:bd:d2:4d:58:7e:6a:b6:68:9e:49:41:
                    37:46:74:db:d8:59:a0:2f:6b:71:f1:31:b5:d0:f2:
                    33:7c:e0:c1:c5:2f:04:88:51:3b:7f:a1:2c:3d:ec:
                    13:a8:a6:4a:c8:af:a3:35:91:af:5a:15:d3:70:9b:
                    fa:cc:43:8a:c8:15:91:b9:12:2e:75:15:d9:2c:d8:
                    ad:27:2f:b3:fc:f5:14:e5:67:7f:f0:fd:8a:b9:70:
                    b7:66:c5:e4:c5:5d:a0:3e:18:0c:4b:c6:75:3a:df:
                    a8:49:70:4a:0f:eb:41:46:9a:0e:52:40:39:86:c4:
                    8b:33:7c:da:e6:28:64:59:1d:98:d6:4f:e4:cb:1d:
                    9c:40:59:ee:2c:80:d6:a7:7a:a6:1c:fd:11:b4:f0:
                    bb:77:5b:07:1a:19:8b:a4:83:7e:55:71:79:17:6f:
                    96:28:29:ab:fd:91:54:15:14:85:67:97:d8:04:8d:
                    3f:7a:22:94:2a:ba:b3:4c:83:0a:e3:8d:a0:7b:b5:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:70:55:33:2A:0B:3D:5F:A9:35:71:1A:3C:29:4C:05:69:71:67:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl

            X509v3 Authority Key Identifier:
                keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ea:c2:a6:8f:74:3b:da:a2:8f:12:1f:82:94:e6:f9:12:21:
         c2:53:55:9f:14:d8:92:66:4f:6e:c3:c5:fd:ec:e7:6b:18:de:
         01:c4:19:91:c6:16:47:66:ff:fe:7c:ab:5d:38:2b:87:4d:56:
         ef:6f:99:17:57:58:7a:71:29:71:c9:01:e2:e1:38:b7:7e:3d:
         c4:0a:2f:6b:65:bb:a5:b1:82:6d:39:3a:6e:66:0b:dd:b1:05:
         7a:81:1d:29:a0:60:a8:39:fe:7d:0d:8b:e2:b0:44:20:22:39:
         a9:fa:00:f8:63:51:46:b4:fc:cf:80:1f:02:3b:6b:f1:30:1a:
         b3:c5:5e:0a:c7:71:d3:05:1a:0d:ff:b1:0c:63:95:20:64:23:
         69:86:2f:a4:83:99:47:f9:48:42:fc:99:f6:76:bf:40:45:48:
         93:e3:78:95:98:8a:e4:8e:a4:d1:c6:68:0b:aa:c1:0f:d2:1c:
         62:51:cb:67:dd:08:67:c2:17:7d:5d:e5:e8:1e:86:cf:f2:7f:
         fc:e6:88:48:b0:e8:a7:c6:c3:f1:c9:0a:f9:77:2b:d8:55:8d:
         d8:9c:a1:f8:48:c8:53:19:ac:41:7a:ea:a8:51:57:e3:ff:98:
         44:9d:94:61:26:c1:b0:f1:5e:61:a3:73:94:89:5f:59:37:8b:
         d9:cc:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:57 2026 by rpki-client