Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/14d519cd-dfd6-3633-905e-85f1783e7fe6.roa
File:                     14d519cd-dfd6-3633-905e-85f1783e7fe6.roa (raw, json)
Hash identifier:          TXdvwut6z+MyVP5BwtuULZD/qg9QYd+FwX4rHnzWzQw=
Subject key identifier:   FA:04:DA:42:5A:1C:89:7D:9C:30:FA:64:79:01:11:52:4C:71:3D:34
Certificate issuer:       /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
Certificate serial:       010D0C9F4328584E5BAF61E21DFEA4E212695080
Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/14d519cd-dfd6-3633-905e-85f1783e7fe6.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        69.52.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:61:e2:1d:fe:a4:e2:12:69:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=0c1ba215-7ab0-4102-a2f3-87412bfacffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:70:78:67:f0:b1:e7:ca:a0:41:ae:7d:d4:f3:
                    7e:d6:64:8b:0d:97:3a:ca:cc:98:f3:66:46:85:69:
                    12:d9:96:b4:4a:3b:8c:02:44:d5:b9:ce:27:6a:d7:
                    76:d1:37:c7:6c:49:bb:97:23:c6:8d:ad:66:39:07:
                    c6:56:68:33:94:33:d0:bf:95:14:e2:e8:f3:79:29:
                    fa:de:c6:98:d3:d1:84:d9:06:45:0e:7d:ae:0c:c7:
                    1d:ee:b5:ed:80:c9:5d:e7:3c:48:8a:2f:f6:eb:ca:
                    1c:10:a8:34:92:72:aa:3e:7c:be:48:4f:0b:4a:cd:
                    c2:2a:5d:47:b6:dd:db:08:e9:9b:f8:36:03:12:16:
                    33:74:bd:1e:36:69:7b:11:85:f7:ad:01:5a:ff:d3:
                    ba:42:4a:a2:81:e1:45:c1:f8:6d:52:ad:b0:48:b0:
                    ad:7a:0e:04:b6:2c:7f:a3:c8:cf:46:e6:04:7b:e9:
                    a4:ed:2f:ae:37:c0:2d:89:ca:1f:d5:6f:e4:01:ef:
                    73:83:0f:ba:f0:73:a2:d3:78:fa:97:05:a1:40:9d:
                    3b:3e:ea:a9:b9:d7:d1:5b:78:9f:0b:de:02:f2:bf:
                    a5:11:83:ba:39:c0:ce:f0:d0:18:8b:d9:3f:41:09:
                    60:1f:76:43:06:a6:02:76:02:88:85:45:da:6b:97:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:DA:42:5A:1C:89:7D:9C:30:FA:64:79:01:11:52:4C:71:3D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/14d519cd-dfd6-3633-905e-85f1783e7fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl

            X509v3 Authority Key Identifier:
                keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.52.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:de:fe:d5:e3:11:92:9d:91:33:94:25:3e:b6:d7:1c:dd:15:
         f7:28:57:0a:34:5b:4e:d9:d6:9f:d5:27:22:78:76:14:f5:06:
         c8:64:7c:9d:ff:12:90:0b:df:73:87:03:95:fc:49:81:a8:f2:
         e7:12:00:08:6f:e2:4b:79:fc:86:c0:8d:eb:07:e5:f3:4b:c2:
         8a:c0:09:30:57:d3:fc:4e:87:7f:cd:f9:1c:0c:70:41:99:60:
         3f:bf:f0:e0:71:8e:8d:c8:5b:dc:10:95:43:aa:b9:1a:6b:1d:
         de:9c:b5:40:f6:f3:77:e4:f5:10:37:e3:77:dd:5e:c7:23:21:
         be:33:f4:57:e0:b1:54:ca:95:72:b0:0c:8b:14:91:48:88:58:
         ca:dd:18:2f:57:66:45:31:27:93:1a:a6:2c:fc:6f:ea:99:fe:
         fd:ff:b8:0d:00:85:57:a5:15:2d:b5:69:10:97:93:cd:7a:a2:
         e4:75:eb:7b:02:a8:f2:11:b6:df:c3:6d:81:e2:62:22:59:25:
         06:11:cf:fb:77:7b:9e:cf:fd:0f:fa:a6:99:d1:5c:2e:0a:49:
         67:0a:cd:9c:7a:36:10:89:c2:28:f5:33:89:e5:45:07:8c:21:
         f6:a6:c8:32:a6:2f:49:dd:51:fb:9c:83:01:f4:40:17:f3:37:
         46:5a:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:14 2026 by rpki-client