Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc4ac75-1108-3e75-8496-7729d4c07ff1.roa
File:                     3fc4ac75-1108-3e75-8496-7729d4c07ff1.roa (raw, json)
Hash identifier:          xfUx2qIFawqvtUS3uiTXrDGD1McIBOmOVYZb7ZodkwQ=
Subject key identifier:   05:86:BF:DB:C1:49:2D:C6:49:8F:B4:F7:8E:E6:64:E2:A3:1A:53:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E50D41A23DE35857F46480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc4ac75-1108-3e75-8496-7729d4c07ff1.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        69.192.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0d:41:a2:3d:e3:58:57:f4:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=b89e8619-6c75-4fcf-a28b-8739e79f60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:bf:3c:17:79:bd:16:e8:df:37:a6:6a:0d:
                    2f:f8:bd:a1:66:3d:b4:98:ad:15:ad:85:88:f2:ad:
                    1b:ef:25:4b:31:48:54:65:1f:6a:8c:e4:00:ee:f1:
                    6d:c5:f0:cf:63:9e:8f:50:33:89:a2:2f:34:2f:ca:
                    44:60:b5:7f:65:43:8f:4e:53:d4:0d:bf:c4:93:10:
                    7b:47:5e:43:b1:d7:ff:c8:0b:79:ff:da:20:47:9d:
                    71:25:50:31:00:96:a6:f2:de:4c:42:81:07:25:3b:
                    bd:85:5b:e5:09:65:eb:b6:35:44:8e:2b:e1:f4:90:
                    d0:10:2b:4c:bc:2f:f8:15:10:4d:cf:ec:8a:f7:07:
                    57:5c:ef:89:81:df:e3:de:cf:b7:5b:88:65:d3:f9:
                    91:28:fe:de:b2:13:a4:60:97:5e:10:c1:c2:84:aa:
                    ef:ee:37:09:8d:d2:ce:d4:b0:64:ee:f1:fc:fd:9f:
                    1f:27:35:06:5f:53:70:d1:e3:a7:37:40:bb:c7:d6:
                    0e:dc:15:52:6b:ea:d9:e8:e4:63:c0:6a:78:ae:79:
                    07:81:84:94:97:83:19:3b:62:41:3e:07:78:ee:4f:
                    d9:ab:31:34:70:f7:e2:e6:2e:47:79:7a:05:da:03:
                    2d:ef:ca:9e:13:a5:53:1e:f9:6c:10:e2:87:95:61:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:86:BF:DB:C1:49:2D:C6:49:8F:B4:F7:8E:E6:64:E2:A3:1A:53:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc4ac75-1108-3e75-8496-7729d4c07ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.192.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:93:d5:1f:e9:8a:6e:68:90:6d:1c:2a:4b:cd:8c:51:c5:81:
         4d:3e:19:7d:86:ff:a1:32:fc:c9:6b:a9:07:f8:f7:e8:3e:0d:
         69:60:fe:5f:8c:32:4b:47:97:68:f3:ca:c4:43:06:d2:19:0f:
         12:68:12:c3:b3:e8:e1:11:0a:30:c4:22:25:7f:e1:3c:29:a7:
         e1:11:7a:bc:a7:76:ff:16:6f:cb:50:aa:9f:3b:18:ad:4d:e9:
         61:bb:93:a5:eb:f5:0d:53:f3:4f:6e:e7:ab:f4:c5:2f:b9:b7:
         4a:c0:19:81:64:5a:e0:14:eb:d1:74:39:4f:4a:da:12:aa:1a:
         78:6f:58:88:f9:66:8c:9c:6d:e8:b5:c1:72:dd:b8:94:f4:dd:
         70:4b:8a:a2:f0:54:bf:6c:81:b3:df:46:d8:0d:3e:dc:15:8b:
         2a:78:e5:c3:57:77:dc:b7:d7:0a:5e:1f:f2:59:fe:35:af:00:
         04:56:f6:47:47:a6:1d:e7:a5:94:13:f0:a9:f5:30:9a:0b:cf:
         0c:61:bf:47:66:04:f6:c0:74:6b:1c:2d:ae:40:12:e3:ba:9e:
         a7:00:1c:7b:e0:26:2e:8d:34:2f:25:1c:aa:45:30:bf:cf:df:
         cf:bb:37:cf:89:4d:ad:00:56:ec:2f:6d:44:92:88:39:c2:57:
         31:fc:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:22 2026 by rpki-client