Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/77a23507-20d3-3cf8-8ec7-02f87c3f8a54.roa
File:                     77a23507-20d3-3cf8-8ec7-02f87c3f8a54.roa (raw, json)
Hash identifier:          OWlYHSuQaeER4l7Vjs1+j0VrxP1QV9buwn7J0U7u1wo=
Subject key identifier:   01:C9:96:94:75:16:0D:A0:FB:B5:03:E1:BF:6B:6E:E5:F7:E8:1A:AE
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584F71ED91E25B341195BA31BF16
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/77a23507-20d3-3cf8-8ec7-02f87c3f8a54.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     19197
IP address blocks:        69.41.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:91:e2:5b:34:11:95:ba:31:bf:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=8a76fe05-dab8-4ffb-9326-fd3735762761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:8c:d6:d5:e0:7b:bf:05:28:f6:0c:e8:30:
                    f2:6e:a2:f8:e7:02:00:71:c3:cc:4a:c5:b9:5e:c3:
                    f7:d2:c3:c3:20:25:42:43:fd:a6:2d:79:7e:9b:0b:
                    43:a2:1e:7c:11:a0:c2:b3:b5:66:c8:9f:55:ff:3e:
                    d3:b8:18:fc:82:41:25:0d:d1:ed:d4:91:e9:b7:45:
                    90:a3:63:fe:5e:2e:88:7e:85:04:16:3e:5a:cb:99:
                    2a:50:2d:72:53:1f:89:83:ee:6a:5e:51:9e:01:7b:
                    4e:43:a4:3d:97:3d:02:2f:dc:91:5b:ba:eb:cb:44:
                    51:54:71:71:7e:2f:11:d8:18:a6:18:d9:ec:b5:78:
                    d0:66:43:8a:2b:4b:5f:df:54:09:8d:ba:df:a7:db:
                    3b:cf:f6:11:3a:cd:39:d1:33:89:f1:81:1a:d7:88:
                    0d:7f:08:76:7f:d8:95:5b:44:e9:bc:6b:0b:de:43:
                    d7:34:42:c6:83:07:6c:9e:b4:eb:ec:5a:ad:df:6d:
                    31:79:4e:ec:28:96:78:a4:61:1e:f2:a1:8e:4a:13:
                    d3:9e:9b:bd:08:db:18:7d:ef:62:8b:74:e7:8a:40:
                    4f:e0:ad:23:c0:d5:b5:44:74:0b:63:d8:10:ae:b6:
                    e3:35:3f:cc:92:7d:22:04:db:49:fd:cc:4d:47:c4:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:96:94:75:16:0D:A0:FB:B5:03:E1:BF:6B:6E:E5:F7:E8:1A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/77a23507-20d3-3cf8-8ec7-02f87c3f8a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:e4:89:4e:df:89:88:5d:ee:a3:98:5d:1b:ee:69:a3:b8:
         60:5b:cd:1b:24:43:38:63:95:c6:a4:ad:b5:76:7d:40:3a:9f:
         5f:d3:b0:dc:0f:95:b0:05:89:c0:be:b0:96:22:80:a4:d4:a8:
         2b:27:43:a7:02:d1:01:9a:7a:9c:66:c7:ec:5e:e6:3a:53:6e:
         02:7a:3c:a8:13:1f:ff:33:0b:68:15:06:d3:53:b0:a6:5e:7e:
         46:3c:df:d9:34:e6:6f:61:98:a3:eb:e6:69:98:0a:4e:fe:ed:
         d8:f9:47:f7:60:9b:ed:22:9b:c0:81:ad:8a:7c:9b:ef:47:ba:
         0d:3e:c4:60:f1:62:21:80:f6:66:98:77:8f:20:6e:f4:87:20:
         1c:25:b4:27:91:b8:56:e9:49:07:9e:b0:fc:47:c0:c0:c3:03:
         4d:d4:c5:ca:f8:53:2c:b8:c3:5a:40:fa:6d:b5:81:9f:24:51:
         10:77:d7:37:c3:38:e6:41:52:6f:4a:43:bb:e9:d5:73:d5:ce:
         95:6f:bb:ee:1d:c3:df:77:22:1f:05:be:0f:ae:29:29:a7:90:
         40:dc:8b:86:00:b8:11:77:90:c0:fb:ea:49:0f:a4:70:b9:34:
         d1:03:68:fb:3e:a8:65:ba:b9:74:96:92:78:99:96:ab:ba:3f:
         45:da:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:14:37 2026 by rpki-client