Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/8b306af0-d21d-37ac-b26d-05928c543aeb.roa
File:                     8b306af0-d21d-37ac-b26d-05928c543aeb.roa (raw, json)
Hash identifier:          Kp8uRX0zUwZgaEAfx1ps0VNkyee4mBWJukLd0R8K7Sk=
Subject key identifier:   00:F7:CE:8E:C3:FC:27:79:4E:A0:B7:5F:F6:13:61:BC:57:A9:2B:EE
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584E9BE53C2DCECAE045BC62C157
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/8b306af0-d21d-37ac-b26d-05928c543aeb.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     29951
IP address blocks:        67.139.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:3c:2d:ce:ca:e0:45:bc:62:c1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=4120570a-878a-4b97-b1cc-c1aa16fde629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ff:de:cf:0f:ae:60:37:96:72:12:ae:c8:0a:
                    30:1a:c0:72:a1:4d:ae:fd:bf:99:86:ff:3e:d4:1f:
                    93:24:e8:a9:df:a8:16:bb:b7:72:0b:65:76:e4:07:
                    e7:94:6d:c0:1f:aa:be:65:fe:10:75:8f:47:66:0b:
                    5e:c2:78:5a:1c:62:67:e7:ac:25:14:98:d1:48:4f:
                    bd:6f:d7:94:99:78:45:9f:48:ec:63:09:c2:b0:3e:
                    27:ea:5a:85:b1:29:ca:5d:d1:78:87:92:27:93:02:
                    42:43:0e:07:e2:2b:59:f1:5e:4c:79:ff:88:37:05:
                    25:25:59:3e:b0:8d:dd:b7:7e:18:e6:13:2d:6d:79:
                    03:71:8b:eb:70:8f:27:e8:03:b0:88:da:52:01:cc:
                    57:43:20:94:f7:95:c4:b0:9e:f4:03:8e:5b:2b:35:
                    da:a1:c5:30:50:57:82:f8:d7:64:6b:ca:ee:65:0d:
                    4e:15:ee:06:ca:af:8f:db:3c:72:ef:ca:d3:01:89:
                    47:7c:29:97:79:4c:94:97:ab:37:d1:9c:fd:e7:71:
                    e3:54:b4:6c:c1:85:1b:94:ab:72:e9:ff:dd:16:67:
                    bb:b0:dd:30:1c:c2:f6:37:4a:3e:12:ea:fa:7c:63:
                    62:a1:dd:37:0f:73:98:d6:d0:b3:b5:d2:b7:6e:79:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:CE:8E:C3:FC:27:79:4E:A0:B7:5F:F6:13:61:BC:57:A9:2B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/8b306af0-d21d-37ac-b26d-05928c543aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.139.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:b4:ec:8a:4c:4a:ad:d4:c7:51:71:1a:a1:0b:c4:17:97:
         72:ea:97:2d:bb:ec:60:a7:d3:89:25:e1:fb:e7:83:ac:50:d7:
         98:8e:a8:ee:b0:5f:51:ce:3f:01:eb:f0:af:25:bd:fa:48:01:
         4e:53:73:d5:53:a1:e9:75:95:85:b3:9d:fc:6f:0d:62:ba:11:
         75:fb:7f:41:a2:77:26:a9:20:ce:df:88:58:99:32:54:e8:46:
         fa:5e:3f:c7:fe:6a:ba:62:86:22:d6:90:15:20:23:0e:34:d3:
         e8:db:4a:57:f2:59:95:ae:67:6b:11:6d:80:29:ae:96:f4:c3:
         f9:e6:5e:e8:59:81:f3:5a:bf:4e:3f:f9:c2:e3:8f:62:6a:53:
         e6:ba:5f:3f:60:9a:8f:3b:d3:ec:eb:61:1b:e4:3d:20:7d:6d:
         bb:be:88:3e:35:c6:02:d7:f6:0a:9f:f3:f3:d7:82:18:1d:0e:
         1c:5a:23:25:b7:ef:1e:ab:ac:8d:40:03:29:e0:03:dd:d6:a5:
         6a:42:e4:f9:cc:2d:19:34:e6:0e:e8:b9:d0:91:4d:59:87:44:
         4f:f6:df:95:a2:46:12:78:29:07:3c:c5:9b:6c:ba:f1:41:86:
         5c:6b:aa:c1:c7:8f:f2:96:be:0f:f1:66:a2:a7:55:e1:1f:6b:
         2f:bd:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:23 2026 by rpki-client