Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/52803d11-c2df-3df6-80c3-87fb4e2d11e2.roa
File:                     52803d11-c2df-3df6-80c3-87fb4e2d11e2.roa (raw, json)
Hash identifier:          3plpIGoQ/2EGNmaHjCJUZPsyiivZHD7M6pqvhBikbVs=
Subject key identifier:   DE:D6:25:02:F2:33:02:43:91:B7:43:93:16:2A:81:F0:78:BB:F7:25
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584E1FA99842EBEE5382F8ED4D80
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/52803d11-c2df-3df6-80c3-87fb4e2d11e2.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     62943
IP address blocks:        69.27.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:98:42:eb:ee:53:82:f8:ed:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=748b890f-4486-4352-bab1-4428edd9585c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:39:66:17:a1:56:dc:88:5a:5b:22:66:71:
                    b5:c5:7d:91:8b:fd:9c:b6:ce:08:49:de:a6:ed:e6:
                    dd:6e:b3:49:0d:ed:72:32:64:93:40:7e:4e:24:2d:
                    0c:c5:05:fe:7b:56:cd:70:99:04:12:62:01:78:80:
                    e7:c8:41:64:4a:c6:66:3a:19:12:f9:1e:e7:17:94:
                    f5:8c:84:ea:7d:cf:a8:4f:9b:fd:37:d3:48:29:b0:
                    71:f7:00:99:ff:37:c6:13:d4:c8:ab:79:77:21:88:
                    fc:cf:66:48:27:d6:72:83:54:1b:4c:4d:59:06:27:
                    1a:14:4f:f3:c6:36:74:d4:ca:b8:c3:b6:bf:bd:36:
                    8b:e0:8f:87:ce:e2:8f:b3:53:8a:ad:b5:10:c9:b5:
                    c8:90:f4:80:73:7f:02:0b:48:77:d9:57:66:57:f9:
                    fc:ce:88:8b:1b:28:08:06:b7:2f:dd:e5:29:03:89:
                    25:33:cd:ef:24:52:35:43:01:30:44:8f:08:e0:dd:
                    ee:cd:6d:da:91:a4:c7:af:dc:7c:80:3a:b1:3e:07:
                    02:2c:75:c5:0a:66:bb:1b:49:4e:d6:3e:f0:11:99:
                    eb:54:87:a8:1e:38:3b:47:6b:10:04:23:07:bd:20:
                    fa:8a:da:d3:c1:e0:72:d0:c9:a8:1b:db:64:4e:95:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:25:02:F2:33:02:43:91:B7:43:93:16:2A:81:F0:78:BB:F7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/52803d11-c2df-3df6-80c3-87fb4e2d11e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.27.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:ac:26:0f:6e:05:97:dd:b8:81:70:ef:43:d2:38:48:d0:
         4b:2c:1d:59:df:d4:0f:84:6f:c6:d5:5b:72:ff:9b:c5:58:d4:
         bf:f3:97:8f:6a:a1:fd:16:f4:18:cd:d3:af:93:2e:ae:19:e1:
         1d:c0:ca:f8:c2:6f:dd:5b:43:f6:0b:16:6b:8d:f3:51:e3:ef:
         95:e0:9e:7c:5b:b9:22:a2:3e:e8:62:db:6b:2e:c9:58:61:5e:
         a1:9c:18:70:f6:1e:17:48:ea:dd:28:39:69:fd:50:d4:6a:c4:
         59:a7:56:19:6c:b3:df:a5:3e:8e:c9:0d:29:6c:d1:88:71:ce:
         db:a1:97:bb:56:c6:15:f6:fd:96:6a:dd:d0:71:2d:af:67:9f:
         46:58:b0:d1:70:ab:19:40:a1:12:dc:5f:a9:7d:92:0d:3b:61:
         0b:a3:6b:5a:47:90:3a:e7:9d:cd:d5:cf:8e:b7:2d:20:b4:71:
         54:87:8a:95:e9:28:f8:67:b5:89:95:30:e9:68:31:dc:c8:78:
         90:45:43:69:0a:dd:44:6e:de:7d:05:d4:93:d3:14:51:83:9e:
         ba:77:b9:b5:a8:25:04:56:e7:59:a3:15:f7:19:e5:e3:9c:9b:
         1a:9c:f4:f6:8d:35:6a:47:f8:37:72:b2:6d:f7:d2:4f:78:99:
         c2:d1:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:42 2026 by rpki-client