Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
File:                     99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa (raw, json)
Hash identifier:          c93PuosN5vXFPhWUS2/Dz/z287TocDjoTVHeLn9vAt4=
Subject key identifier:   62:3B:11:32:03:88:9B:FE:B4:ED:2C:21:EB:57:F5:06:42:D1:AC:3C
Certificate issuer:       /CN=fa73dcdd-8c93-40af-8405-b4fb0f23224b
Certificate serial:       010D0C9F4328584D80FFF27651D2F54AB133C4E0
Authority key identifier: 86:A7:04:EA:0D:4F:45:83:9D:E5:EA:E4:75:A0:DD:FC:42:08:4C:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     20436
IP address blocks:        69.4.192.0/20 maxlen: 24
                          74.51.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:f2:76:51:d2:f5:4a:b1:33:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa73dcdd-8c93-40af-8405-b4fb0f23224b
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=99f21d7a-28cf-4454-acea-dd15c68660f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:d9:20:ca:7c:5f:e8:6d:ee:44:2e:d6:88:
                    25:a5:ac:41:ac:1c:73:08:b2:7a:d9:26:fc:b2:7d:
                    61:b9:ae:08:a3:6b:42:84:82:bc:64:a1:a2:13:43:
                    84:ec:8d:af:7b:42:67:92:fd:89:dc:22:c1:85:5a:
                    d2:22:44:15:0a:15:5c:97:6c:9e:93:d0:ee:b7:c9:
                    d7:e8:e0:4a:57:6c:63:33:95:4b:ed:9d:3e:94:90:
                    ad:1f:d0:fb:c7:9b:3d:16:74:77:52:a5:17:f2:99:
                    14:a3:17:08:e0:fa:1c:80:1a:e6:90:5a:ab:32:c7:
                    2f:63:3e:d7:10:71:1c:dc:09:3e:05:a1:53:50:55:
                    a7:2a:c3:75:90:8a:a6:a5:17:42:77:75:fa:a0:0e:
                    0a:11:38:66:8e:e9:bb:f0:ec:b2:6e:5a:40:77:fb:
                    2c:d4:62:cb:0f:30:e7:90:0d:13:2f:85:f2:f6:03:
                    89:3b:64:c7:57:9e:f4:0d:30:6a:7a:56:f2:e8:11:
                    00:65:8f:24:3d:da:89:6c:66:55:b9:02:86:17:b6:
                    bb:f9:fd:f1:0b:f5:96:b2:c1:94:fa:35:8c:c0:40:
                    60:28:a3:f1:12:17:8c:88:5d:d8:b2:65:18:52:94:
                    65:ce:8b:bf:b1:e4:4d:a6:79:5c:10:cf:58:d7:86:
                    1d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:11:32:03:88:9B:FE:B4:ED:2C:21:EB:57:F5:06:42:D1:AC:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A7:04:EA:0D:4F:45:83:9D:E5:EA:E4:75:A0:DD:FC:42:08:4C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.192.0/20
                  74.51.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:a8:9a:a9:43:34:78:8f:53:71:6f:55:51:c2:14:d1:76:
         59:f2:b4:b8:07:32:10:c7:4d:e8:93:12:c7:69:7c:6b:f6:a7:
         de:e5:d6:ae:dc:5c:d7:fe:42:8e:d5:91:e5:f0:a0:d5:67:fa:
         37:19:2f:d2:6a:df:3e:90:2d:33:52:9c:fc:37:8b:6b:91:1f:
         ac:88:9e:b6:c1:c1:36:42:f8:4e:cb:4b:94:00:6d:a2:e3:07:
         bf:1e:f1:97:91:6e:ed:ff:eb:d3:c9:87:db:2c:ab:0d:fa:c5:
         37:62:81:cd:24:51:12:89:80:cd:f1:8f:d1:ec:09:86:aa:62:
         8f:e8:8a:b5:b4:e2:a7:8f:f3:c4:c7:64:57:dd:9d:d8:ab:1a:
         7e:2b:b7:23:53:d9:56:48:fe:7b:79:c3:cc:bb:d1:76:26:3a:
         0d:29:3e:50:19:eb:2a:11:af:d5:ff:d3:07:43:d6:a9:78:49:
         6c:72:9f:31:b2:cc:ba:b1:a2:f3:db:db:92:f2:18:82:72:ce:
         75:29:bb:63:74:b5:6b:87:3d:0d:0a:c0:b1:42:a9:f6:fe:cb:
         92:ed:ed:a2:cf:37:d2:12:0a:64:f2:93:f7:7a:62:3c:d1:a5:
         1e:71:c8:d3:e5:1b:56:de:f1:37:c8:58:0a:e2:67:27:a0:dc:
         fd:de:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:35 2026 by rpki-client