Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/c6d41f38-bf8e-3e3f-8222-b578f8d0db2d.roa
File:                     c6d41f38-bf8e-3e3f-8222-b578f8d0db2d.roa (raw, json)
Hash identifier:          26hNdIQI95jcy6a1t+RgBAv1Jgy4ucc2hXQpDC41jF4=
Subject key identifier:   36:4B:B9:95:BA:30:97:4C:E7:55:4B:51:B5:57:8F:5A:16:F2:1C:A3
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584CE0978B73194B336BC3655D40
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/c6d41f38-bf8e-3e3f-8222-b578f8d0db2d.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     19229
IP address blocks:        69.4.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:8b:73:19:4b:33:6b:c3:65:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=9f8b01a9-c842-4170-9ad8-33109d725c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:bf:33:c8:d9:d2:3c:c8:d8:64:b1:a7:a4:
                    eb:42:64:44:86:7e:8f:ea:dc:c2:54:2d:fd:da:66:
                    8e:f6:78:31:de:56:3d:06:bc:b3:10:15:79:c7:4b:
                    b3:38:89:e8:2f:fb:33:b0:6d:ed:d5:8c:8f:df:89:
                    77:c9:dd:0d:7f:85:36:53:3b:b6:17:ca:7b:7c:36:
                    a6:56:22:21:d7:27:eb:9a:f7:94:fc:09:b8:b7:50:
                    5e:de:3e:24:96:65:69:49:ab:ba:ab:fd:61:59:10:
                    b9:0a:b6:f8:73:5b:70:8c:3b:8c:1c:16:f9:b2:9a:
                    c6:8f:71:e9:19:6d:22:02:54:e3:2d:6d:31:0e:cd:
                    3f:c4:b5:0b:62:3f:9f:d5:3f:fb:2f:a5:b9:96:9f:
                    c2:0e:83:1a:28:55:96:6a:50:03:59:31:82:5c:c2:
                    10:eb:3e:8c:e2:bf:00:4f:33:b1:97:46:f2:35:26:
                    05:a7:e6:87:fc:9c:0c:12:ea:d4:0a:cc:33:13:fa:
                    ae:9f:da:ae:93:54:8b:a3:b0:b3:10:18:f4:9a:70:
                    93:39:85:26:0d:7e:23:c4:50:27:43:0b:42:ed:b5:
                    0b:f6:65:7b:f4:41:54:00:b8:e8:75:47:f0:3c:e7:
                    e6:56:94:f8:bc:67:2f:0f:af:eb:9e:65:3e:90:ef:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4B:B9:95:BA:30:97:4C:E7:55:4B:51:B5:57:8F:5A:16:F2:1C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/c6d41f38-bf8e-3e3f-8222-b578f8d0db2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:b1:6d:74:2b:1e:28:9b:f6:87:92:80:21:3e:79:cb:fb:
         03:e7:09:57:68:be:ab:01:36:5a:26:5b:42:39:94:62:2d:e1:
         12:99:ef:59:29:f2:84:fb:f6:24:de:18:f7:fd:1d:be:cf:8b:
         28:7e:89:0b:03:32:9e:c6:a6:84:93:4d:52:e1:e9:07:07:26:
         a6:a5:4f:9f:b9:f2:de:16:2c:8e:a7:0f:a5:89:f5:9a:76:df:
         61:94:48:0e:59:39:8f:af:6c:47:0a:0d:2a:a6:44:c8:bd:81:
         ae:ac:e9:59:87:93:f9:ed:35:e4:28:f0:b0:c6:c4:21:41:ef:
         2f:67:7c:05:74:11:65:1c:03:ee:28:1e:77:fc:f7:d7:5a:ff:
         36:b9:02:05:7c:7c:46:07:82:3c:ff:9c:0f:8c:93:11:cc:23:
         d0:78:d7:38:01:9f:52:58:88:ee:89:55:85:59:6a:c9:59:26:
         ad:40:f6:24:9c:0c:1a:de:10:fe:b0:d0:d3:e7:53:66:33:53:
         53:1b:53:7b:cc:bb:93:9b:07:11:db:9f:55:c1:e6:57:f1:df:
         61:c4:20:c2:f0:33:a4:e6:f4:2a:2d:1a:2f:9d:ac:8d:db:dd:
         da:9a:fb:3a:85:44:b3:b5:08:87:50:4e:67:c3:4a:df:bc:47:
         82:ec:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:44 2026 by rpki-client