Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
File:                     32310430-1564-34ba-a911-45325d8fda20.roa (raw, json)
Hash identifier:          3bfOqS1y6D1R6TcU0xxPm+hCzj3K04OnQRSrQW2SZOQ=
Subject key identifier:   94:39:A3:04:08:B9:AC:98:76:BE:4B:AD:CD:22:E0:43:B0:13:A0:3F
Certificate issuer:       /CN=6988a68c-ec5c-4d72-9ee1-27118af98380
Certificate serial:       010D0C9F4328584E1E4457793CC0DD22A3A54800
Authority key identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     29953
IP address blocks:        69.41.192.0/20 maxlen: 24
                          97.107.48.0/20 maxlen: 24
                          2605:1100::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:57:79:3c:c0:dd:22:a3:a5:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988a68c-ec5c-4d72-9ee1-27118af98380
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=0dbe5d1e-26a0-4c57-a9e8-3d01015aa464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:bd:9b:4a:84:c7:ad:58:de:ba:43:bf:ea:
                    09:93:cb:5b:f7:d4:4a:a3:72:e3:fa:50:de:54:a0:
                    d9:a9:5e:38:62:ba:45:13:79:d4:bf:72:c8:fe:41:
                    a7:6c:18:b3:d0:c3:23:39:ae:79:05:48:35:30:c2:
                    87:a0:4a:31:ba:e1:00:b3:31:a0:f6:27:07:4d:4a:
                    6b:4b:b7:fe:da:21:6a:fe:fd:e0:e2:ec:c2:db:e9:
                    92:e4:54:ad:ab:7b:b3:0c:a0:a6:91:95:04:4d:ac:
                    d4:8a:01:ba:5a:f5:8c:c1:75:4e:81:09:15:0e:09:
                    5d:92:82:e6:09:15:71:93:09:51:5f:00:9e:a3:fe:
                    5a:61:f0:aa:6e:39:dd:fc:02:2f:24:f4:24:b4:8a:
                    bd:24:7b:28:ac:22:b1:b7:6a:19:a9:95:30:13:95:
                    c2:a7:bf:39:53:0c:e1:15:63:0d:66:f7:e5:e1:83:
                    74:28:29:0b:14:d8:6c:4c:82:f9:49:c2:72:2f:a3:
                    cd:0e:47:13:08:74:ba:7d:0f:8f:03:a8:c9:e3:61:
                    27:8d:b7:10:90:38:82:79:be:f6:9b:c9:60:03:b1:
                    29:f9:97:d3:e7:4b:c6:3e:4e:3a:42:7c:ab:a6:21:
                    86:65:ab:a6:71:64:e0:d6:c2:d7:a8:f9:40:90:69:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:39:A3:04:08:B9:AC:98:76:BE:4B:AD:CD:22:E0:43:B0:13:A0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl

            X509v3 Authority Key Identifier:
                keyid:53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.192.0/20
                  97.107.48.0/20
                IPv6:
                  2605:1100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:bf:5c:f4:24:0c:32:66:98:d9:3c:0c:3a:62:81:fd:d4:b8:
         9e:d3:a6:3c:24:dd:8d:49:44:c3:0a:02:b9:b3:47:06:99:32:
         6d:17:72:c7:30:0d:52:0c:e8:15:78:c6:78:27:c2:f8:ff:42:
         b4:28:51:2f:5d:66:ec:11:80:10:26:71:45:6d:73:b1:8e:8d:
         dc:dc:2b:18:ac:f1:84:79:1f:93:34:71:d4:c8:b2:0e:3e:46:
         c3:62:bc:4f:de:f7:1c:39:5f:ef:d9:83:d9:92:58:89:84:71:
         5f:cd:12:00:8e:2c:94:bf:b7:b7:dd:74:f2:80:84:e9:c5:38:
         51:42:54:16:0e:ab:2b:17:60:33:9f:5d:7c:b9:b4:b1:32:13:
         40:1e:16:dd:c0:39:d9:f9:dd:44:b9:cf:02:c3:b3:c4:2c:f1:
         e7:01:69:e2:c5:fd:ba:56:b3:2c:6c:6f:74:5d:1b:dc:c6:62:
         67:63:cd:85:fa:c7:e3:f1:49:d1:0f:4f:45:9e:c3:9f:c4:1e:
         04:61:c7:d0:7b:40:04:0e:78:89:c2:38:ba:b9:11:2e:11:94:
         14:e9:ed:d1:3f:cd:43:b2:9c:fa:08:2d:fd:56:9d:0b:8c:0d:
         84:9c:31:98:00:dc:e8:05:96:48:0e:ea:e3:bd:cc:7c:30:3c:
         d9:fe:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:14 2026 by rpki-client