Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69d983be-7fc5-33fa-8447-5cddf64b6ec6.roa
File:                     69d983be-7fc5-33fa-8447-5cddf64b6ec6.roa (raw, json)
Hash identifier:          ZKSc5BkPPXCBAX4bC43zY3ICzMdLIzDyDkKVKe/Buu8=
Subject key identifier:   A8:67:29:60:A4:44:CE:0B:36:2D:1A:1D:A0:E6:23:4D:77:30:2F:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F0D6CF1963F13740671591B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69d983be-7fc5-33fa-8447-5cddf64b6ec6.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     31984
IP address blocks:        173.222.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:f1:96:3f:13:74:06:71:59:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=05018208-641e-4349-863f-e1192c644b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:bf:97:87:8e:48:0d:26:16:90:6d:7d:c8:
                    7d:37:ac:0a:06:c9:8d:86:0b:85:d7:14:45:f3:0a:
                    71:39:23:a6:5b:63:7b:c8:84:33:f3:0f:97:d2:05:
                    c8:b7:a8:af:d6:17:40:e5:fe:5c:84:50:e8:51:7b:
                    20:81:88:60:57:68:da:ab:de:c6:7c:ba:c6:2c:e7:
                    dd:e5:e7:7c:0d:53:99:74:ca:df:9b:08:9e:9e:0c:
                    cb:0f:24:89:71:04:be:12:7a:15:74:6e:b5:e3:d0:
                    45:8b:95:2f:9e:63:21:00:e9:60:cb:2b:7e:27:5d:
                    a8:f7:fa:75:68:41:07:08:85:1d:bd:77:47:fd:8e:
                    ad:39:d5:29:be:21:d6:15:6d:8d:28:9e:47:f6:b7:
                    58:34:bc:77:5d:dc:55:52:42:be:2c:3a:3e:f3:7d:
                    b8:f4:6c:db:cb:1e:bb:d6:ae:ec:49:51:18:83:f9:
                    47:df:25:60:16:1b:cd:40:c6:a7:21:70:9f:54:c9:
                    7d:0d:4c:d8:1a:8d:ad:e9:00:ac:9e:90:59:25:0d:
                    5a:61:2a:7f:8e:15:46:0d:80:8e:7f:06:16:f9:d5:
                    d0:62:ff:58:55:1d:48:5a:ad:b9:d7:32:72:0d:b9:
                    25:67:d0:56:26:b4:3a:97:7e:0b:7c:98:16:8c:6c:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:67:29:60:A4:44:CE:0B:36:2D:1A:1D:A0:E6:23:4D:77:30:2F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69d983be-7fc5-33fa-8447-5cddf64b6ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c4:11:fb:5b:4a:28:23:e0:2e:61:e4:b3:82:21:e7:6e:91:
         8c:f1:7a:f3:22:39:a5:c2:14:1b:d2:51:5c:7f:bb:ae:e1:10:
         13:62:4d:77:74:46:6b:d6:c6:02:2d:5e:a2:80:ec:ef:49:5d:
         bb:df:7f:b0:9c:43:65:88:11:06:72:3b:95:f5:2f:b4:e2:bb:
         a1:20:aa:85:41:27:32:44:f7:34:a4:76:ce:cc:2d:c3:79:86:
         db:e8:64:e1:2f:e4:f4:03:07:44:b7:0c:4c:c9:01:64:db:c1:
         e1:b1:9f:cc:e7:97:ee:3a:82:92:3d:ca:a1:6f:07:a9:23:07:
         75:3c:2c:95:69:90:2b:99:dc:e9:45:44:53:e9:76:40:4a:7f:
         e2:a1:29:c2:2d:09:1a:d2:9b:16:e6:5b:43:16:b3:63:76:ee:
         86:42:af:d9:6f:71:45:c4:79:ec:cc:e6:bd:b5:5a:3d:b0:11:
         a9:cb:9d:22:e2:a7:5f:ac:74:1d:cd:4a:a9:f0:2c:43:41:02:
         da:4e:bc:22:4b:0a:f3:fe:bd:64:e0:e0:c8:d1:a9:20:fd:03:
         98:47:37:14:f8:dd:a5:02:48:15:05:c8:2c:98:fe:e8:a6:de:
         04:57:df:d5:11:49:80:c1:02:1c:ff:47:92:30:16:ef:f2:92:
         82:72:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:54:07 2026 by rpki-client