Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/5fdfcf80-b21c-3f71-b73f-9e088db19ae3.roa
File:                     5fdfcf80-b21c-3f71-b73f-9e088db19ae3.roa (raw, json)
Hash identifier:          FXkNTQZDqGVqKq/qII8PdVNjV5AJpJe2VbkS1kUHE1o=
Subject key identifier:   69:3C:10:23:DA:B1:5D:EB:A7:56:2C:39:02:47:45:33:6D:30:7C:36
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584D5E1A821C7269073DB7F16B00
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/5fdfcf80-b21c-3f71-b73f-9e088db19ae3.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        69.52.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:82:1c:72:69:07:3d:b7:f1:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=a6f47bc1-68f5-43b3-a8ab-e5c3de955b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:0a:95:c9:79:37:f2:c6:30:76:2e:48:06:
                    b7:df:97:d0:de:be:72:65:57:b1:d1:ef:c9:11:b6:
                    e4:45:1f:53:ad:0f:ad:79:2b:54:cc:64:2b:5a:e3:
                    7c:6c:29:20:5c:9b:11:0c:bd:a4:47:8b:31:a5:76:
                    3c:e2:e0:28:cf:4d:12:b5:ab:be:a4:12:4e:7e:2e:
                    2e:55:41:b5:67:c2:57:30:47:07:b0:16:b9:9d:57:
                    be:91:b0:bc:5e:9a:b4:ee:32:9e:ac:01:67:ce:de:
                    4a:bf:e8:d3:59:81:54:2e:5d:b3:93:95:2d:62:95:
                    35:cf:3f:25:ff:74:a0:dc:56:c9:38:7e:38:46:ee:
                    13:80:c8:c9:02:6b:e5:af:d8:6b:40:3e:80:ea:55:
                    72:b1:14:2e:e1:f9:50:6a:d5:cb:db:54:da:d1:1e:
                    2d:31:4f:3e:dd:be:89:5d:d9:6c:6b:27:05:20:d7:
                    a1:a0:1d:b9:79:0b:b6:32:4d:ec:ad:c4:aa:e8:97:
                    1c:7f:33:ab:f5:44:eb:f2:81:4b:9d:78:6c:49:45:
                    b9:49:5e:a6:b7:2a:4b:24:73:55:d2:e5:f1:ae:be:
                    5b:e7:ae:a0:c6:da:56:bb:8f:0f:d5:dd:2f:1f:29:
                    0c:de:4e:df:c9:09:5b:bd:e1:ec:3f:c5:e6:f9:dc:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:10:23:DA:B1:5D:EB:A7:56:2C:39:02:47:45:33:6D:30:7C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/5fdfcf80-b21c-3f71-b73f-9e088db19ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:5b:5f:f4:85:7e:3e:17:4a:6b:28:82:0a:24:e5:d2:3b:
         d3:88:86:c7:eb:95:35:6b:f0:09:08:2b:e7:e9:89:a9:71:2e:
         bd:cc:e8:82:8b:e0:be:35:79:5b:a5:66:6e:e8:f3:51:33:89:
         11:d8:cb:a3:49:76:17:09:94:14:6f:8f:8d:1d:38:e7:31:8a:
         42:fe:8c:62:c0:87:11:a9:73:ad:43:3e:c9:e3:1e:c6:b3:c4:
         8d:d3:c3:59:b4:15:f4:62:e2:8e:09:30:32:dd:7b:bf:0f:c7:
         0d:4e:91:60:f0:82:32:f2:43:8a:e7:32:09:06:a0:55:13:51:
         68:48:0b:3f:95:7f:16:33:f3:c0:3a:18:e7:80:cc:9c:07:90:
         c4:b1:25:39:30:93:de:d8:25:9f:92:0c:5a:26:3f:4d:e6:22:
         49:13:15:4c:84:92:a8:c0:a2:06:8f:32:ec:b6:5d:6f:22:86:
         08:97:ad:58:23:ee:6c:41:68:eb:ef:16:d4:f8:8b:61:4e:b7:
         22:bb:96:ec:e3:70:d8:d8:ad:d4:43:6d:fb:e6:f3:67:e8:73:
         2a:59:5f:30:38:fa:71:42:b2:e8:6c:af:cd:6e:68:0b:34:15:
         9f:ae:25:cf:21:6d:6d:3b:05:e4:06:87:db:49:d3:ad:48:56:
         3a:08:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:53 2026 by rpki-client