Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa
File:                     b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa (raw, json)
Hash identifier:          ZDAEzwhXmTdPWjIMTGjjeswgxQ9ox4alyzPe2NmwFkY=
Subject key identifier:   96:DB:CB:4C:1E:59:FB:6F:ED:90:2C:1B:19:85:AB:95:B2:6F:37:9F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA79EB3F60E0CD63748038AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        208.76.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:b3:f6:0e:0c:d6:37:48:03:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b3bc3409-1cea-4f4d-bb5c-aeba183500a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:51:64:2c:12:14:fe:12:a5:ed:1f:ed:98:
                    fb:b0:93:4d:6c:5a:03:aa:11:55:59:67:fa:20:ba:
                    88:0b:a4:8c:a9:f0:2c:1c:91:73:47:2b:58:6f:54:
                    37:69:63:7f:be:b2:2c:04:49:52:15:c3:19:79:db:
                    ea:91:3d:d1:81:60:cf:2d:f4:45:5e:6e:4e:47:68:
                    94:c4:87:ba:8c:31:2e:a4:d5:77:27:0d:33:2e:fe:
                    76:6f:6a:c5:99:89:d6:fb:dd:f1:82:dc:f9:c5:5d:
                    0e:52:04:0e:5e:2f:2d:38:2e:f4:75:d8:c9:55:03:
                    fa:3b:1d:9b:5a:60:c4:72:4d:e3:b2:61:9f:c8:12:
                    4c:03:c9:1f:a4:e9:d4:cf:64:29:fe:88:c8:82:f8:
                    47:a3:eb:49:fb:68:3a:8c:c0:38:89:e3:f9:86:55:
                    45:a5:ba:f0:a6:2b:6c:56:3f:db:ee:b8:a6:20:49:
                    fe:73:d7:21:43:3e:db:8b:1b:ac:df:5e:d7:d7:65:
                    f6:ab:3b:c1:1b:bd:33:08:56:32:bd:31:f0:05:4e:
                    e4:ae:78:10:30:8e:06:58:e9:59:22:64:30:65:62:
                    de:6e:2a:97:ab:4b:92:42:a4:75:e2:22:67:1e:46:
                    cb:fe:59:57:cc:28:20:b8:27:a0:bf:aa:a8:4a:7b:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DB:CB:4C:1E:59:FB:6F:ED:90:2C:1B:19:85:AB:95:B2:6F:37:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b9704a73-990b-37e2-b5bb-a2bc801fb27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:02:39:88:f7:0e:26:41:13:ef:25:39:88:b3:fb:56:cc:83:
         82:43:07:29:50:c7:2a:87:f8:13:be:a0:66:34:4a:01:43:51:
         ba:3e:9e:5c:f0:53:a9:2b:06:9c:e6:c6:81:7f:ad:d5:a6:43:
         cb:e0:0e:e2:9c:cc:6d:97:f0:e2:42:f9:d6:19:2a:d1:c7:56:
         ca:f9:fa:70:c9:76:85:18:aa:d7:10:e8:e6:b1:65:48:db:8f:
         93:5a:eb:28:ff:2c:6d:94:59:e8:8d:ea:17:24:90:be:52:02:
         ef:e1:b4:c0:5b:de:01:3e:a5:4e:a2:28:8b:9d:2d:cf:bc:77:
         08:03:5b:15:b0:02:fb:de:0b:61:88:3b:ab:c5:2d:b2:2a:df:
         58:d7:3c:c1:28:14:30:07:f9:65:9e:9b:8f:e9:ec:8c:79:17:
         89:27:76:11:5f:a1:55:7c:20:5d:3a:f1:71:dd:61:c5:d0:dd:
         b4:25:c8:97:18:2b:05:a3:7c:28:8c:a8:cf:6c:39:f8:61:09:
         fd:e0:62:b7:f3:df:6c:0e:71:b3:48:8b:e7:f2:d0:fe:38:c9:
         19:0e:f4:66:b2:7e:f1:69:8d:d1:a5:5a:3d:f4:27:b7:26:18:
         a1:2d:3b:75:c6:ff:7b:c4:1f:f1:93:04:a5:56:92:6a:a5:85:
         19:d0:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:40 2026 by rpki-client