Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/69f9564e-820b-3519-a564-1d6170510557.roa
File:                     69f9564e-820b-3519-a564-1d6170510557.roa (raw, json)
Hash identifier:          DhMpBc80t/2VhlQ9dTNLf8XaOsIecMm4qAiwLcfTJIc=
Subject key identifier:   9F:8C:24:47:36:D8:F4:19:6F:EC:9B:5E:06:FD:E1:B9:8E:E9:7C:B8
Certificate issuer:       /CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d
Certificate serial:       010D0C9F4328584EA445254C9227229B76A463C0
Authority key identifier: 11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/69f9564e-820b-3519-a564-1d6170510557.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     54760
IP address blocks:        199.124.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:25:4c:92:27:22:9b:76:a4:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd82d6ac-3a87-4e88-ac84-e2da6745d53d
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=883eca86-995b-4e0f-bb36-c1f6cff97123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:31:2a:f4:60:0a:cb:8b:4e:c1:0d:ca:94:
                    88:ec:51:a0:6c:ac:19:f6:56:7e:7e:2f:25:a1:4d:
                    db:df:8c:70:15:73:15:f5:d2:f4:d3:01:6d:b2:ce:
                    c8:9f:f6:5a:98:b2:e6:d0:89:f9:1c:a6:31:fa:7e:
                    a2:61:10:70:1a:8a:56:89:52:d4:5b:36:48:44:0a:
                    99:0b:d9:81:b4:ac:a7:a6:bc:4d:2a:d3:77:75:51:
                    ec:73:70:1a:3e:3c:92:35:94:a6:6d:fa:74:1b:02:
                    06:f9:92:e4:b7:b1:b1:3f:2b:f4:38:d3:56:ca:97:
                    d0:4c:d7:59:c9:8c:8d:91:2d:79:10:9b:50:19:01:
                    73:c8:97:dc:b2:bf:0a:e8:ae:c1:d2:8a:13:a6:4b:
                    e8:d2:d5:33:7a:a0:66:36:0d:84:a0:0a:b8:44:a9:
                    c8:14:bf:1c:1d:88:e8:c0:c6:e1:95:1b:eb:0e:da:
                    dd:28:e8:cc:f6:7d:cd:b9:01:d8:bf:e0:37:6f:56:
                    c4:fe:b1:4c:f0:f8:47:df:50:8b:2f:3a:fa:e7:f4:
                    fe:6f:b4:76:a6:87:05:c4:b3:c2:c0:3c:da:b2:50:
                    9f:31:90:fb:ed:d6:ff:12:9d:22:b2:b4:30:36:04:
                    19:8d:95:2e:6b:0f:2a:05:42:0c:b3:a3:bc:5a:34:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8C:24:47:36:D8:F4:19:6F:EC:9B:5E:06:FD:E1:B9:8E:E9:7C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/69f9564e-820b-3519-a564-1d6170510557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.crl

            X509v3 Authority Key Identifier:
                keyid:11:9D:8A:D0:74:D5:0C:A1:9B:4E:96:B8:86:4F:B3:0C:30:DA:80:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd82d6ac-3a87-4e88-ac84-e2da6745d53d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.124.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:e5:10:0e:66:ee:44:40:05:fa:37:5f:6c:f8:a7:b0:08:4a:
         b2:ad:22:cb:fa:16:51:1f:db:67:64:94:52:69:b1:a1:e4:c3:
         bc:88:8f:ba:f3:fb:00:e1:8a:a2:90:8d:2e:ce:54:6d:a1:9b:
         aa:64:66:01:92:ca:69:31:73:18:a0:a7:bf:48:dc:0f:2c:e2:
         05:80:ba:f6:87:2c:de:86:1a:1f:9f:36:e7:aa:62:0e:d3:37:
         f9:5c:d3:c0:04:89:d1:31:65:ae:28:f1:b7:af:78:c9:05:b3:
         f3:74:32:d7:74:1b:68:6f:74:ca:ef:c4:af:33:07:4b:fd:e3:
         4e:ab:0e:e9:35:7e:b1:5e:85:3e:6d:19:2f:05:ae:c2:b5:1a:
         34:d3:f7:3a:21:9a:aa:12:1a:1f:e5:77:cc:fd:44:32:a7:67:
         62:89:2a:79:e6:3b:90:69:28:94:62:7f:6f:7a:ee:52:29:ea:
         01:89:04:7f:cc:79:51:59:ba:55:1b:f1:31:69:7e:04:31:89:
         5e:f1:ad:fa:08:2d:48:6c:00:73:49:6a:ca:dc:30:93:43:26:
         c4:05:49:aa:5f:f8:94:54:05:d5:c9:b2:5a:b6:d6:ca:53:32:
         ef:e6:71:c4:b7:da:89:4e:99:5e:38:d8:db:52:d6:6e:e1:2b:
         45:d8:33:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:54 2026 by rpki-client