Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
File:                     c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa (raw, json)
Hash identifier:          ijcXREXCHORwiLXioarRoyYauWGIQ6PifFzfWF6sDCM=
Subject key identifier:   28:40:69:25:50:01:71:09:28:A3:BD:73:F8:5F:A3:66:1A:64:59:72
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584E210FDC2AD825683BBC447CC0
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        69.52.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:dc:2a:d8:25:68:3b:bc:44:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=e3776cc0-9cc6-453e-8a69-72b8e59e464b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:70:63:5e:02:01:29:cf:df:4e:16:e1:ca:
                    85:5f:53:b2:00:3e:3c:32:3a:55:3f:cd:ed:5f:de:
                    89:da:c2:6c:6a:c9:1c:ef:ea:62:8f:e8:15:48:b3:
                    fb:c6:9e:14:72:36:bc:9b:b1:99:6a:98:8c:a5:8e:
                    05:60:48:9f:ee:bd:f9:47:58:81:22:e1:4c:95:77:
                    75:3d:15:92:b5:4c:4f:c0:a7:5d:15:60:a9:97:f0:
                    c5:3b:a1:92:c5:00:13:4b:92:aa:66:19:99:93:2d:
                    a3:7d:e3:ac:da:21:42:8a:da:78:92:cd:b4:0d:71:
                    ad:16:cb:bf:d0:9a:92:4a:2f:8d:ec:c2:08:22:78:
                    ed:1a:86:02:71:3b:ab:9e:e2:0a:32:53:ae:04:de:
                    94:76:56:65:79:8b:0b:55:d8:01:cb:c2:a4:26:0a:
                    e7:3c:46:69:42:db:51:2f:30:e5:54:57:91:b2:d5:
                    d1:5a:ec:a7:48:0e:51:45:24:9a:2f:25:30:f2:39:
                    e3:1a:3c:c6:00:6a:f0:f9:c3:ca:29:cb:84:25:ec:
                    75:05:45:47:e0:22:b9:09:64:72:56:c4:fc:1b:58:
                    bc:55:f4:96:8b:7d:98:45:15:9e:50:92:18:48:8a:
                    4c:f2:a8:03:03:1f:cc:9f:7d:0d:6d:78:08:56:ab:
                    eb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:69:25:50:01:71:09:28:A3:BD:73:F8:5F:A3:66:1A:64:59:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/c32701a6-f0a7-36e2-b3aa-11fe44c77c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a2:32:de:27:3b:27:b0:fd:47:36:f5:05:35:ce:4d:3d:2f:
         ea:9e:f9:2c:35:f8:2f:9b:44:f0:79:1c:47:26:b9:73:db:54:
         69:eb:00:9e:09:35:9c:a8:0b:57:42:ad:f4:bf:02:07:3f:34:
         22:36:4b:e3:8c:12:de:3d:7e:1d:dd:62:47:39:7e:cc:c5:5a:
         c4:a5:85:dc:75:65:17:a0:20:04:28:53:3c:0f:9d:50:62:64:
         f4:f5:6c:d1:ad:c3:99:8c:0f:a4:65:f1:18:00:55:fa:d8:0d:
         b7:27:6e:03:4a:be:43:7f:a3:c8:76:71:ef:2f:0b:67:03:53:
         07:47:a9:85:ee:46:34:ab:ff:d0:b0:5a:1e:6c:63:8f:38:af:
         64:f9:9f:58:dc:ab:e5:de:91:c4:a0:cd:a1:92:ab:00:2c:a6:
         61:0a:03:d5:ce:fa:f2:e9:89:2a:71:ee:15:f8:19:de:53:81:
         75:c5:4c:0a:3e:80:38:02:a1:3c:1d:fb:3f:b3:45:1c:43:dc:
         39:4e:86:3c:77:2a:ca:84:a6:46:3a:7f:4a:9a:0d:b6:7d:83:
         ab:91:4d:19:e6:2a:21:0d:ed:53:e9:68:04:2b:c8:8b:3f:b0:
         1d:0e:76:67:c3:68:a3:b6:8f:07:e8:03:77:9d:9d:9d:53:fe:
         5f:e4:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:54 2026 by rpki-client