Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1629f4d-ea5c-3887-914f-b231bf0fdf6c.roa
File:                     e1629f4d-ea5c-3887-914f-b231bf0fdf6c.roa (raw, json)
Hash identifier:          niydqyBbzxhAI79JfxXLgQT3lnNgvT4ZCK7WFPDeJX4=
Subject key identifier:   2C:50:6C:86:78:8E:8F:02:A8:66:86:2C:F6:50:09:A5:1D:19:6B:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06726B77F10B274740C67AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1629f4d-ea5c-3887-914f-b231bf0fdf6c.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        69.78.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:6b:77:f1:0b:27:47:40:c6:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=34e8948d-4687-471d-bec0-00a21a81b981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:bb:07:25:fe:bf:62:f8:7c:10:8c:34:e0:
                    95:00:e0:22:f3:a1:36:dd:1c:d1:50:4e:48:2c:09:
                    7a:33:09:12:6a:4f:df:9c:4e:2a:d8:b6:d4:8b:32:
                    3e:24:8b:ba:5f:15:61:d7:fd:71:5b:e6:af:a2:43:
                    78:d3:45:71:98:a6:41:b2:86:01:af:40:7a:c5:5c:
                    3b:17:30:8e:0d:07:9e:f4:05:4f:72:81:68:58:a7:
                    6c:07:54:66:59:8d:e7:5c:2b:aa:e9:6d:7f:32:fb:
                    e9:df:86:0e:4d:64:61:93:ba:f6:3d:b1:14:3d:bb:
                    3e:fd:c1:4f:c6:5c:31:7a:b9:b3:f4:42:01:f1:bf:
                    e3:c1:d1:1a:9c:e6:ee:ad:52:37:24:7c:7b:14:11:
                    f8:fb:84:be:49:75:9d:4c:1e:07:9c:b6:7d:12:68:
                    bc:30:8f:97:f5:3a:db:c6:6e:d8:22:a8:3f:9b:bc:
                    d3:1c:84:ea:41:76:c9:24:48:13:99:fa:65:41:7f:
                    0b:61:c3:28:02:a7:87:46:ad:cc:95:4e:b2:94:d7:
                    6e:ac:db:63:e0:53:f6:eb:b8:8b:8e:57:ae:1a:9f:
                    d7:09:80:ab:b8:c2:7b:67:ac:4e:a0:85:17:55:54:
                    f6:1e:f8:52:3b:23:89:26:1d:a3:3c:1c:53:be:9d:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:6C:86:78:8E:8F:02:A8:66:86:2C:F6:50:09:A5:1D:19:6B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1629f4d-ea5c-3887-914f-b231bf0fdf6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:75:c7:d4:09:3b:d9:19:15:d9:0f:c6:27:19:14:4e:94:
         1f:26:eb:f6:b8:b4:2f:4f:46:a9:9c:58:f2:c4:f7:6c:cb:5d:
         85:16:47:a8:c3:f0:67:4b:7d:e3:7a:14:a8:96:6b:e0:c3:a3:
         95:fe:a5:3f:3d:84:3e:06:18:11:23:87:06:48:1d:08:4b:f8:
         3d:d0:96:60:f9:01:bd:28:3e:d8:7a:99:24:7a:ef:28:4f:c6:
         4e:8a:46:8f:be:d9:b5:cf:a9:3e:9e:69:2e:cb:e9:ff:7d:31:
         d8:52:77:74:6f:17:1d:81:46:12:c9:65:6b:a2:38:aa:5d:c7:
         f7:cf:74:ea:da:db:17:ec:d1:19:e7:ea:13:d0:fb:bc:d8:f8:
         01:22:26:4c:3d:37:db:ca:cd:09:36:20:06:8d:9b:01:2a:3f:
         0f:9b:15:f5:98:e3:b0:4c:5e:9a:ca:25:e6:5a:32:23:71:ab:
         7a:d9:b0:6d:5c:48:53:78:db:4c:98:9e:63:d5:bf:f1:a4:81:
         3a:b7:da:e1:fe:4a:78:36:85:05:cf:64:17:97:56:9f:f6:e6:
         2b:8e:a3:1d:16:da:16:a6:0a:79:ef:0a:5c:ee:aa:44:84:fc:
         82:30:e8:93:2a:6b:7f:00:ed:f7:e3:ef:f0:c4:aa:72:2b:9d:
         4e:de:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:57:20 2026 by rpki-client