Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa
File:                     9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa (raw, json)
Hash identifier:          DzGxPbA7K6tbOmos5egHXKCzhzluWtuuHSY3wSRsju0=
Subject key identifier:   84:83:DC:32:41:C2:60:74:3E:FC:3F:D1:D6:FD:59:3D:27:A9:39:8E
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584EA8EC484C62337911218E4A00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     25961
IP address blocks:        69.1.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:48:4c:62:33:79:11:21:8e:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=d76de39d-eca3-4ca3-997a-b04138490d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:1f:9d:1e:0b:d3:d0:5c:33:72:4d:3e:f2:
                    96:22:e4:b0:df:ca:f0:8c:c0:c1:86:8f:aa:75:43:
                    55:eb:b5:02:35:40:ec:00:ae:19:a1:9c:4e:b5:de:
                    69:66:4c:f5:0e:1d:53:dd:48:c8:3b:7e:a6:fa:c7:
                    3d:bf:ba:59:4a:d2:1f:06:67:fd:46:b9:74:07:49:
                    78:33:4d:ab:c1:69:c7:07:42:87:e0:69:f3:d0:c2:
                    d6:2f:78:de:4f:83:b8:da:8a:94:82:a4:a6:c5:0f:
                    b8:d0:eb:a4:8c:e4:63:97:70:31:b8:32:3f:94:56:
                    dd:f5:c9:f7:b2:f3:d8:4e:7c:e6:04:dd:71:1f:cb:
                    2c:e6:9b:68:1e:d2:98:7b:25:b9:7f:8d:28:d1:53:
                    16:f2:b5:39:c3:4f:e0:96:e9:57:2e:4b:cc:06:44:
                    bb:d1:ef:95:bc:98:ef:05:28:16:78:7e:7e:e9:c8:
                    dd:93:a0:f1:9f:08:0b:e8:23:08:25:3f:dd:a3:64:
                    84:94:cd:dd:2f:1c:13:0e:43:53:01:a7:e6:51:20:
                    10:e9:1f:01:82:e5:75:a1:b7:db:a6:b0:38:57:7a:
                    1b:fb:cb:79:af:af:19:13:63:24:42:8f:5c:15:c4:
                    7a:c8:e3:6f:50:d8:88:bf:cf:81:a7:62:44:8f:73:
                    28:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:DC:32:41:C2:60:74:3E:FC:3F:D1:D6:FD:59:3D:27:A9:39:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/9c56db0c-2c41-34c0-8d61-4cdfcc62ee6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:d7:47:68:3e:30:f1:20:f1:0b:f3:6d:8c:f1:09:ef:d1:
         b6:06:66:bf:27:a0:19:e1:c3:ac:2e:86:dc:33:a0:7f:63:41:
         13:8c:7a:53:51:5f:88:a7:b1:d6:34:c7:38:e3:83:71:69:fd:
         9d:7d:d7:cb:e2:98:3c:f8:99:04:2a:9b:1b:31:ef:2f:73:42:
         0b:b8:ae:3a:92:3c:34:c6:7d:16:73:de:18:14:7a:35:ba:3d:
         58:b7:de:a9:c1:d7:17:6b:4a:01:ec:80:dc:68:f1:16:d5:bf:
         64:13:99:24:4d:5c:d3:e7:cb:3b:a3:82:cb:8a:01:4e:9a:cf:
         90:c0:53:9c:29:a7:07:66:94:bd:24:d3:75:86:d9:7f:68:64:
         83:dc:bc:0c:85:fe:fe:24:29:44:52:de:e0:e0:e9:d3:98:b0:
         12:e7:f4:8a:7e:84:ec:0d:fc:16:60:ac:1d:6c:77:f1:43:cb:
         0a:f4:5b:2b:72:d7:de:ca:6a:dc:1f:74:db:3b:57:78:66:af:
         1c:5a:45:0f:23:66:97:d5:0e:3a:99:de:1b:05:f1:cc:25:cd:
         5c:5a:4a:c4:5d:a8:4e:6b:dd:47:10:23:33:7d:92:cb:4e:55:
         8d:55:15:09:5d:d4:02:fe:47:a9:28:44:53:74:88:c2:b1:56:
         fe:17:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:31:41 2026 by rpki-client