Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/69858739-9bc8-35b4-b55b-b6449bb85849.roa
File:                     69858739-9bc8-35b4-b55b-b6449bb85849.roa (raw, json)
Hash identifier:          vRXuIk20alNRuH9W0RVGmvOoaBUGg/q8AFsnCOT9bd0=
Subject key identifier:   C9:29:C8:0E:DB:63:72:0E:B5:9E:B7:7E:72:37:44:E3:91:54:B7:C9
Certificate issuer:       /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
Certificate serial:       010D0C9F4328584F30526865088D24DE8E1DA680
Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/69858739-9bc8-35b4-b55b-b6449bb85849.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     396313
IP address blocks:        23.178.0.0/24 maxlen: 24
                          23.178.1.0/24 maxlen: 24
                          23.252.224.0/20 maxlen: 20
                          199.4.190.0/24 maxlen: 24
                          2606:7480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:68:65:08:8d:24:de:8e:1d:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=8dbf3da6-1260-4321-8b85-3167fda6c101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:b0:af:d4:dc:0a:d9:f8:33:dc:e6:c4:ad:
                    3c:00:c6:2f:fe:47:b7:2b:d9:11:7a:92:4b:e3:bb:
                    06:16:38:a4:e2:3b:b4:bc:bb:4c:44:76:d4:f4:81:
                    0e:a6:6e:ff:bf:c3:10:5a:83:80:76:67:f8:98:a5:
                    ca:b6:71:87:69:d9:ed:67:95:11:4d:df:4b:79:eb:
                    4b:5d:73:41:6c:6d:7e:f4:a1:42:13:14:59:f6:34:
                    8f:6e:f8:13:5d:7b:be:40:e2:80:de:31:0a:ef:57:
                    4b:ec:b2:13:c1:f0:b1:f1:b0:4b:38:3f:64:ed:a9:
                    37:cd:1e:45:32:16:a5:7a:ea:f9:fd:0b:55:98:37:
                    72:62:ff:4d:98:72:89:64:29:e2:5f:69:ca:11:96:
                    6c:df:9b:88:ea:54:0e:b1:68:30:6a:3f:d6:0b:ce:
                    3c:f9:24:1d:1d:cb:d0:ae:34:2e:3f:2a:db:e9:0f:
                    a7:0c:13:b5:b9:8c:0e:fe:55:04:a4:36:95:7d:4c:
                    58:89:76:4b:01:15:f7:1a:8f:2a:58:14:da:99:cc:
                    7e:bf:3b:01:c9:e7:14:b4:cb:03:e7:50:c8:d9:ec:
                    47:5e:8b:7b:49:cd:9d:19:e0:79:e3:a4:ff:b2:7d:
                    3e:c8:78:fb:3d:7f:ab:8f:a9:56:64:ff:46:49:01:
                    8a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:29:C8:0E:DB:63:72:0E:B5:9E:B7:7E:72:37:44:E3:91:54:B7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/69858739-9bc8-35b4-b55b-b6449bb85849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl

            X509v3 Authority Key Identifier:
                keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.0.0/23
                  23.252.224.0/20
                  199.4.190.0/24
                IPv6:
                  2606:7480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b5:86:e5:4b:90:59:83:7b:f7:be:2c:b0:16:ce:17:68:76:
         ec:37:bb:24:1a:0f:1f:0a:91:10:34:c0:48:d4:88:8c:73:b4:
         84:b8:1d:7c:47:36:49:01:81:0e:a9:e4:21:e9:e9:6b:59:c3:
         34:d3:6f:79:98:25:3b:cd:64:0f:ff:86:ba:65:d9:89:8c:87:
         21:67:8a:f8:f6:21:9c:4d:68:d6:ee:46:56:b5:d3:69:d9:d0:
         fe:73:79:a5:cd:29:ed:08:63:35:7c:38:d1:b0:f8:29:50:d3:
         dd:3a:a0:43:bb:92:60:f8:45:e4:c7:1c:99:53:6f:8a:d4:0d:
         d5:2e:6b:78:4a:72:fd:c4:8d:69:5d:c6:72:e8:0b:9f:c8:e4:
         4c:fc:fc:f9:19:06:b3:0c:74:d6:f0:ba:c3:56:66:3a:5b:ea:
         92:89:b0:ac:38:74:55:c3:02:6f:8a:29:ab:b3:0d:be:f9:c5:
         a5:7a:bf:e9:76:c8:cd:2f:f2:4e:21:fa:35:fc:0e:31:6a:64:
         62:88:4f:d3:8c:b8:d3:33:98:13:a4:3b:bd:81:29:ed:0b:93:
         f2:e1:a4:5c:02:a6:e9:30:7e:02:c6:64:a5:5e:5e:f3:31:e4:
         eb:26:89:12:8b:0a:04:e1:83:ea:f7:30:02:bf:c7:7d:ea:02:
         07:5e:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:37:15 2026 by rpki-client