Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
File:                     56f3e8d5-c8b8-365b-a649-5cf63058640c.roa (raw, json)
Hash identifier:          UIqTHuQqYihnrQk6KuiZlKxF7GOlFMUKWggjPw4L2bU=
Subject key identifier:   82:D3:C0:4B:88:0F:99:61:4A:01:D7:36:EE:CF:5A:D2:BB:99:D0:3E
Certificate issuer:       /CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
Certificate serial:       010D0C9F4328584DF4DB5F7B1B84D05711759080
Authority key identifier: 87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     394968
IP address blocks:        69.42.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5f:7b:1b:84:d0:57:11:75:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde9f29d-2580-453b-ad9f-2dca85edaa48
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=e67a02f7-f022-42c5-98ac-f66b2fcb4c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:6a:2e:28:38:4d:93:73:2f:22:a1:63:e0:
                    57:b8:5d:39:9d:c1:49:9a:8d:1d:ae:1a:0d:98:f0:
                    f1:70:b2:9b:90:48:82:22:2d:1b:c2:43:79:2b:ef:
                    49:b3:50:44:4d:b0:89:55:f7:37:be:37:df:a4:dc:
                    5d:02:1d:77:56:20:7a:ab:67:ae:67:a6:a1:80:a3:
                    21:74:6c:0f:91:cc:ee:2d:bd:dc:57:e3:29:c4:02:
                    79:51:63:37:0e:14:10:35:30:e5:dd:2f:fb:5f:21:
                    64:92:e6:5b:b7:48:30:f8:30:dd:98:04:f3:19:5a:
                    2b:82:9a:72:08:09:b0:da:82:51:d4:c2:09:c9:b5:
                    0c:22:c0:0f:f2:7f:72:be:5c:51:9e:f8:93:78:f9:
                    9a:28:42:f8:23:99:5b:8a:3d:a3:fb:f6:61:a8:68:
                    36:f7:1d:b0:d5:48:6b:bf:79:bc:7a:bf:0e:1b:b4:
                    ca:90:3f:cb:64:f6:c3:37:e3:ce:de:e0:16:f4:16:
                    71:ee:a7:2d:da:2c:e3:50:4f:f7:df:90:49:4d:ca:
                    66:41:ab:ba:bf:8e:41:c7:ed:1c:41:a2:d4:8a:3f:
                    7c:95:fa:43:d0:29:4b:f9:d4:17:e5:eb:fe:82:d8:
                    54:d8:c0:13:ce:62:43:6f:d4:4c:7b:0c:d5:96:86:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:C0:4B:88:0F:99:61:4A:01:D7:36:EE:CF:5A:D2:BB:99:D0:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/56f3e8d5-c8b8-365b-a649-5cf63058640c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48/dde9f29d-2580-453b-ad9f-2dca85edaa48.crl

            X509v3 Authority Key Identifier:
                keyid:87:DB:F8:A2:F9:3B:FF:88:79:0B:06:0C:AF:B8:2D:43:1A:01:47:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dde9f29d-2580-453b-ad9f-2dca85edaa48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:86:28:49:5c:9a:c6:6b:cc:64:06:1c:01:58:16:c5:2b:
         70:e2:17:5d:ab:2c:be:6b:5b:05:d6:e6:7e:ce:06:91:cb:c1:
         38:e7:ce:e0:29:c1:20:a5:c2:33:33:54:dc:00:78:cd:be:29:
         0e:3e:15:a5:a8:01:02:42:d9:ef:6c:44:dc:a6:69:78:82:68:
         6d:9e:f9:58:97:92:15:85:07:39:de:22:c1:ae:69:da:96:11:
         d7:b7:ca:aa:4b:d1:a4:e9:9e:79:94:97:28:ce:16:e9:ac:fe:
         9f:5e:63:ba:df:21:f8:df:1c:5d:f8:2c:80:7d:b0:15:b4:ac:
         3b:22:16:b0:a2:f2:f4:e9:9c:d3:f5:ff:6d:89:99:ae:45:e9:
         07:93:49:a8:4e:a3:09:50:99:10:7b:54:e1:3f:21:75:cc:ee:
         47:56:83:2a:a3:8a:cb:4b:b0:32:05:bc:87:c2:1e:a4:4c:c5:
         f4:b3:c0:b3:73:82:da:6c:02:27:f7:34:41:4f:1f:78:b2:56:
         5a:7c:ad:89:66:53:d4:69:e8:9a:f3:d6:08:9e:2d:ea:56:34:
         63:d3:f2:c1:5e:7d:99:89:1f:5e:1d:63:f2:c2:00:fe:88:63:
         6f:2b:f1:d5:e7:1f:1b:31:3f:62:04:9e:1f:a5:62:75:77:d0:
         91:78:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:01 2026 by rpki-client