Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa
File:                     42e2d2e0-f64e-3caa-b82a-299df2894365.roa (raw, json)
Hash identifier:          u/Qjuuhrv1X3qG1BZDB4f9UKTlTWhtWa2KAhUftzHZQ=
Subject key identifier:   EA:0F:F9:C6:D7:B9:73:01:A7:5D:02:4C:35:AF:59:B2:50:3F:82:79
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EBB11B8DE57197619F6AE6EC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     397422
IP address blocks:        69.1.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b8:de:57:19:76:19:f6:ae:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=3f48aa3b-dd3b-4c0d-8445-b12749f6fd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:17:e7:42:00:35:c1:64:2b:40:e4:ea:a9:
                    ec:f0:fd:d0:7a:89:f0:07:6d:db:bc:8a:1d:f6:c9:
                    d9:71:e8:a8:7d:4e:25:1c:e5:8c:1a:26:da:16:4c:
                    e2:fe:04:5f:f5:8b:b3:39:4d:0c:8c:c5:84:91:49:
                    19:f8:bd:8e:3e:60:ea:8d:21:61:0b:bc:bb:bd:8d:
                    d7:69:85:fe:50:5b:0d:39:46:8c:7a:0d:18:32:bd:
                    40:25:07:97:fd:7b:72:d3:c3:7a:d1:74:ad:15:73:
                    95:47:41:4b:1b:e6:b1:8c:68:d6:b7:1f:ee:51:ba:
                    a1:fd:1f:d8:ad:f6:41:ee:8a:dc:5c:b3:41:19:2c:
                    78:1e:2c:23:ff:0e:a5:90:d5:e8:d4:9a:bd:9e:d1:
                    81:3b:88:8a:ad:36:70:3b:2b:cc:53:4d:ff:60:24:
                    48:5f:dd:4a:4f:5b:fb:2d:63:c0:89:77:5a:8e:0b:
                    1c:f3:e2:f3:2f:2e:66:fe:d7:b7:34:19:06:30:62:
                    f2:a2:cb:59:41:f1:40:3e:c8:89:d9:35:d1:eb:d1:
                    fa:41:a9:2a:99:63:b2:1c:36:da:af:0c:f2:33:47:
                    ed:1c:5f:d4:3b:49:6c:2d:56:84:06:c5:15:93:ef:
                    e7:22:92:5b:c9:3b:85:69:d7:43:81:07:ee:db:57:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0F:F9:C6:D7:B9:73:01:A7:5D:02:4C:35:AF:59:B2:50:3F:82:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/42e2d2e0-f64e-3caa-b82a-299df2894365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:d5:37:97:e5:5e:ad:fb:dc:c9:78:dc:d9:47:27:6f:47:
         53:1c:4a:93:3b:48:f5:21:1e:6f:e0:5e:80:56:66:54:0a:b6:
         f6:28:a9:58:4c:8a:f6:46:8c:3d:96:8f:55:e3:07:7b:bc:55:
         39:ed:39:85:09:82:fc:04:06:3c:a1:7c:45:f6:a4:89:28:16:
         7b:8f:51:b4:ad:de:72:7e:28:59:8d:50:69:f7:fc:13:8e:97:
         2d:3b:67:72:fb:57:a2:08:a2:bf:76:be:93:93:a8:5d:01:ee:
         d9:48:c5:85:70:86:85:d9:4d:46:b7:b1:0a:1b:3e:32:72:eb:
         a7:a3:63:82:23:a5:88:59:85:be:8c:31:2f:20:96:8a:2d:3c:
         a1:48:59:24:d1:c8:e3:4a:04:18:60:2d:a3:91:df:4e:7d:cc:
         fe:e2:03:8f:67:a2:60:52:47:26:5e:a2:b5:f8:8f:2d:a9:6f:
         78:ca:b3:f0:55:d8:fc:91:11:d8:fa:b1:7b:df:16:b0:7f:13:
         5b:f1:59:59:08:83:7f:6f:24:83:3f:38:77:67:bd:6b:4d:37:
         8e:77:7c:d8:e1:f6:dc:1f:9e:ea:a3:77:f3:91:ec:02:36:32:
         99:d0:eb:4d:f1:0d:8e:99:f7:bd:e2:35:9d:28:ed:2f:85:15:
         f6:0a:1c:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EbjeVxl2GfaubsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
M2Y0OGFhM2ItZGQzYi00YzBkLTg0NDUtYjEyNzQ5ZjZmZDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOcX50IANcFkK0Dk6qns8P3QeonwB23bvIod
9snZceiofU4lHOWMGibaFkzi/gRf9YuzOU0MjMWEkUkZ+L2OPmDqjSFhC7y7vY3X
aYX+UFsNOUaMeg0YMr1AJQeX/Xty08N60XStFXOVR0FLG+axjGjWtx/uUbqh/R/Y
rfZB7orcXLNBGSx4Hiwj/w6lkNXo1Jq9ntGBO4iKrTZwOyvMU03/YCRIX91KT1v7
LWPAiXdajgsc8+LzLy5m/te3NBkGMGLyostZQfFAPsiJ2TXR69H6QakqmWOyHDba
rwzyM0ftHF/UO0lsLVaEBsUVk+/nIpJbyTuFaddDgQfu21fp/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOoP+cbXuXMBp10CTDWvWbJQP4J5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDJlMmQyZTAtZjY0ZS0z
Y2FhLWI4MmEtMjk5ZGYyODk0MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFku1TeX5V6t+9zJeNzZRydvR1McSpM7SPUhHm/gXoBWZlQKtvYoqVhM
ivZGjD2Wj1XjB3u8VTntOYUJgvwEBjyhfEX2pIkoFnuPUbSt3nJ+KFmNUGn3/BOO
ly07Z3L7V6IIor92vpOTqF0B7tlIxYVwhoXZTUa3sQobPjJy66ejY4IjpYhZhb6M
MS8glootPKFIWSTRyONKBBhgLaOR3059zP7iA49nomBSRyZeorX4jy2pb3jKs/BV
2PyREdj6sXvfFrB/E1vxWVkIg39vJIM/OHdnvWtNN453fNjh9twfnuqjd/OR7AI2
MpnQ603xDY6Z973iNZ0o7S+FFfYKHGM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:11:35 2026 by rpki-client