Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da1a1053-1677-3532-b9dc-a48437ce6ed7.roa
File:                     da1a1053-1677-3532-b9dc-a48437ce6ed7.roa (raw, json)
Hash identifier:          T6nCc6VIWrgmHZHgg0/vMBgsDBilEhjucLjwz4rErjU=
Subject key identifier:   22:85:38:09:B8:BF:DF:36:76:20:33:B3:EE:D6:7A:74:B9:7A:68:D0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584EA79D549E4B66AF84784A7900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da1a1053-1677-3532-b9dc-a48437ce6ed7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397630
IP address blocks:        69.58.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:54:9e:4b:66:af:84:78:4a:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=22627758-4346-4db9-973f-c22e1f53640c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:d3:39:23:5b:e6:79:d1:99:92:c8:e9:1b:
                    c8:52:f6:71:6e:f7:16:26:4b:a8:1f:be:57:23:bb:
                    f6:db:85:c9:fc:e0:de:99:b6:63:e1:b7:1d:a5:6f:
                    47:ad:db:96:19:f0:37:ee:04:1b:5f:15:98:06:08:
                    56:1e:b2:2f:3d:de:43:78:c7:f3:13:f1:4e:4b:63:
                    85:67:41:64:02:e7:33:5f:62:46:04:5a:d8:fd:b1:
                    c1:c9:a3:24:d1:c9:19:79:e9:62:8f:e9:47:e9:25:
                    ce:45:8c:a4:14:db:85:8c:18:6f:f9:f5:33:2f:66:
                    95:f8:ee:95:a5:09:ee:3f:d5:03:33:e2:ec:21:64:
                    cc:1f:79:f1:b7:6f:3b:55:e9:9e:d5:76:7a:ca:c6:
                    39:91:a2:9a:35:6f:be:89:46:37:46:de:90:aa:b8:
                    b2:32:a5:e6:9e:53:1f:e4:3f:ce:c5:3d:a4:4d:a4:
                    63:42:52:9a:09:0e:b1:ca:e8:75:7d:09:b5:43:96:
                    32:eb:fc:65:29:8b:62:80:d0:e1:37:f6:d4:c1:98:
                    a8:de:aa:f7:e4:dc:ad:5f:25:15:64:95:1b:a8:eb:
                    21:d8:56:d6:5d:05:4f:cf:6e:78:bd:d7:12:1b:5f:
                    a2:cd:16:63:27:8d:e4:8d:52:38:3b:34:73:78:42:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:85:38:09:B8:BF:DF:36:76:20:33:B3:EE:D6:7A:74:B9:7A:68:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/da1a1053-1677-3532-b9dc-a48437ce6ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:72:88:96:2f:99:83:aa:9d:51:79:fe:ec:09:6b:43:75:2b:
         c3:84:1b:d1:08:d2:a9:91:11:e8:9a:e1:97:dc:a3:32:76:ff:
         ab:10:5d:0c:a4:85:2c:03:4a:2a:b7:5e:3a:a9:0e:5f:2b:9b:
         88:e9:ef:bf:ff:62:55:14:e4:55:59:97:6f:fc:63:bd:84:50:
         60:f2:4e:9f:35:94:2f:54:fd:fc:e4:71:86:ee:37:6d:54:b1:
         e2:2b:a2:a1:89:0a:43:3d:29:97:2f:04:5e:e8:b5:a3:20:b9:
         cb:29:d2:de:dd:71:a6:97:2c:16:18:a9:ce:c5:95:77:54:6b:
         c0:19:3f:4d:4f:e5:c1:57:1b:79:5b:d4:57:83:e7:e6:7c:54:
         8e:4b:de:46:5e:44:5a:16:a5:ac:6b:22:66:18:bf:53:ad:4c:
         b2:5e:0b:ea:4e:06:b9:8d:74:9d:8b:78:65:9e:5d:d9:1d:47:
         70:13:72:a1:df:e5:e2:ab:68:82:de:4b:ba:50:3a:a3:da:4f:
         5f:18:e6:dd:77:e8:0a:e5:b3:e3:05:ec:2c:40:12:4d:57:fa:
         15:4f:39:a9:75:e0:e1:83:46:ed:1a:8e:a5:90:d6:1e:a1:a7:
         ca:a5:bd:e3:67:b4:79:e7:87:2d:21:b6:17:a2:84:8c:a7:51:
         2b:71:cd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:08 2026 by rpki-client