Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/46b43a7f-14be-3405-853b-3728938c272a.roa
File:                     46b43a7f-14be-3405-853b-3728938c272a.roa (raw, json)
Hash identifier:          ZYTZxL0Y0MonV+3yvwz6ZxaAyxXCcokkeqNP+gWAc7I=
Subject key identifier:   65:3A:10:62:69:B0:88:E4:55:F1:05:EB:13:84:C5:B3:7A:61:2F:F6
Certificate issuer:       /CN=12380a37-68ce-4e9c-9585-53cd09071ada
Certificate serial:       010D0C9F4328584E99846CF3301F893069884900
Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/46b43a7f-14be-3405-853b-3728938c272a.roa
Signing time:             Fri 24 Jul 2026 00:34:01 +0000
ROA not before:           Fri 24 Jul 2026 00:34:01 +0000
ROA not after:            Thu 22 Oct 2026 00:34:01 +0000
asID:                     395597
IP address blocks:        69.80.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:84:6c:f3:30:1f:89:30:69:88:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Validity
            Not Before: Jul 24 00:34:01 2026 GMT
            Not After : Oct 22 00:34:01 2026 GMT
        Subject: CN=7e05859b-602c-4050-b50c-c537a45d12a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:f4:1d:4c:34:99:85:46:61:ee:c1:e5:0c:
                    cc:8b:11:86:90:60:db:5b:af:c5:ef:d4:42:b2:f7:
                    0c:92:44:72:c1:c2:cc:7e:ab:d5:5f:f6:88:13:2a:
                    5e:29:b3:ca:aa:b6:db:e0:08:41:6f:55:d7:58:c1:
                    bd:74:e8:8f:b5:d3:83:b4:69:de:80:4f:08:7d:65:
                    a5:01:49:cf:df:1b:ba:4a:58:4d:21:d1:1c:bf:2c:
                    68:30:9f:5d:0b:b5:87:d1:4c:44:f0:61:d3:f1:4f:
                    73:41:c6:af:0b:37:d4:9f:45:eb:f5:af:19:6c:b1:
                    2f:7d:ea:45:1c:5b:1e:4e:47:9d:b8:a8:0d:c7:ce:
                    43:fe:cf:09:49:b0:ce:47:62:ed:d9:f5:ce:d0:ef:
                    ff:87:b4:d8:ed:7a:8d:32:52:e7:df:dd:e9:32:75:
                    10:b4:ba:45:44:93:ba:4e:08:9e:27:e9:73:e2:af:
                    e3:a4:b4:d5:94:ff:be:6d:b4:cf:a9:8f:85:65:62:
                    21:d8:a0:9b:4c:36:86:5c:a5:d1:a6:9b:4d:8d:d7:
                    92:69:6a:3a:b7:db:a1:dd:05:40:7f:87:b1:ae:ba:
                    ab:4a:44:38:d8:3e:8c:dc:05:42:e6:6a:2f:cd:4a:
                    c7:97:a6:ae:51:c3:02:67:16:5a:8a:b6:b8:3f:76:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3A:10:62:69:B0:88:E4:55:F1:05:EB:13:84:C5:B3:7A:61:2F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/46b43a7f-14be-3405-853b-3728938c272a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl

            X509v3 Authority Key Identifier:
                keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:41:79:fb:71:4c:fc:15:12:ef:5c:aa:98:4c:75:fc:3c:f5:
         d4:10:3d:69:df:d0:92:2d:4c:3f:34:89:4b:67:d9:73:f2:77:
         bf:68:af:fb:38:5c:f0:71:ae:f6:8c:de:c1:52:00:41:da:9e:
         15:f9:52:94:a7:52:48:72:88:d1:30:42:0d:45:6e:6e:f8:31:
         ae:45:40:da:19:d9:e9:18:62:c6:8c:1b:53:e3:e8:d0:a5:5d:
         6a:c8:c3:ef:81:37:7b:6d:79:03:76:9a:36:68:40:ea:2b:b7:
         b4:b7:9a:05:23:07:21:99:bb:58:d9:13:e3:42:45:9e:fc:7f:
         bf:bf:72:05:f6:04:19:b5:65:2e:1b:66:d1:57:11:00:6b:74:
         fd:be:bb:11:14:4d:0f:75:3b:ac:bc:ab:f5:e1:8f:1f:33:1c:
         1d:5a:9b:94:ef:78:55:59:be:92:10:ba:41:bd:41:fb:a7:d1:
         e9:a9:ce:11:6c:88:a7:fb:52:7c:17:0c:67:00:02:5c:4f:94:
         42:a3:1a:94:97:f2:6a:50:e0:6b:e1:c6:ba:d1:db:3b:05:ac:
         78:c8:59:33:bc:b1:4d:77:c9:5c:7c:a1:28:51:b4:ed:42:22:
         92:6d:4f:92:ff:0c:8d:6f:d0:9a:c4:b6:6b:e2:82:cf:8e:08:
         6c:70:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:26 2026 by rpki-client