Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8448105-b3c6-3dca-a70f-30d333d58b7c.roa
File:                     c8448105-b3c6-3dca-a70f-30d333d58b7c.roa (raw, json)
Hash identifier:          QX7iMg8p1pWTIZN2g1lCAMpL985N8EVLAc9OhaVQi4k=
Subject key identifier:   6F:FB:63:2A:17:0A:D3:01:FD:21:14:33:37:CF:9B:B7:B1:90:6C:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FD22EF452539928EA00C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8448105-b3c6-3dca-a70f-30d333d58b7c.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        67.69.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d2:2e:f4:52:53:99:28:ea:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ce9c5b3a-8cfe-4a05-92b7-0d9c53752a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:c6:4f:4c:d1:10:24:9b:b5:1c:54:f3:e3:
                    de:55:bb:1b:65:10:85:2c:82:1a:1a:94:0f:e9:4b:
                    bd:96:c5:c1:58:b9:d2:2d:79:86:38:ca:76:28:89:
                    14:4d:a2:5a:89:a7:cd:8b:c4:33:df:61:e6:97:02:
                    30:9f:19:5e:9a:a1:6e:78:4c:58:1f:9a:0e:69:8c:
                    81:ca:6c:a8:7f:76:ab:c7:1f:3b:43:0f:aa:aa:4a:
                    09:44:bd:15:d8:9a:26:74:53:ea:6c:3b:50:b8:d2:
                    8a:54:24:0a:88:c8:e1:20:df:f4:b4:98:67:fd:a2:
                    9d:1e:54:18:13:bc:b0:f0:27:e1:34:bf:f3:4c:c5:
                    15:76:ea:e5:a3:1d:0f:4f:89:3f:21:ff:e1:10:fb:
                    40:3f:8d:c3:9f:6d:53:c8:77:c3:c7:5a:3b:3d:52:
                    6e:39:ac:29:9d:1a:d7:1b:ca:b7:95:ea:d1:03:f4:
                    29:f4:1b:42:cb:8a:eb:ed:eb:48:a2:1c:77:ef:ec:
                    79:a2:24:1c:e9:79:40:a9:7f:e2:ee:10:6e:69:44:
                    fd:f2:20:66:52:cc:95:77:72:3c:a7:c7:27:74:7b:
                    e7:17:fa:1d:77:c6:df:a3:df:6f:a2:6c:6c:c3:97:
                    45:05:2d:c9:89:23:3f:d2:be:3a:b3:92:50:e4:aa:
                    5a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FB:63:2A:17:0A:D3:01:FD:21:14:33:37:CF:9B:B7:B1:90:6C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8448105-b3c6-3dca-a70f-30d333d58b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7e:70:25:dd:99:5a:8f:d9:fc:b9:83:c5:4a:98:87:71:ce:
         ed:a2:9a:d9:8b:84:b6:a4:f7:6f:66:6b:ed:c6:37:c1:e4:fb:
         5a:a6:5b:62:7e:91:02:67:bd:8b:42:6e:7b:c4:1c:40:c2:1f:
         49:80:8f:a8:89:93:20:4d:fe:bb:54:21:52:cf:08:b1:3b:84:
         14:56:a0:ad:30:a2:d5:09:e3:af:41:c9:70:9d:a2:08:42:fc:
         ee:f7:93:bc:fa:00:ca:c9:56:73:1d:06:d0:8a:60:a4:00:75:
         00:ae:de:a5:da:77:1b:e0:09:a7:4c:74:c1:bf:18:cc:41:04:
         37:23:34:69:0d:e6:fe:8c:19:e5:a8:88:c1:18:e2:3f:ec:49:
         28:e2:8f:dc:50:7f:7e:23:c9:4b:e7:7c:22:68:59:26:d8:e1:
         d9:9a:a1:e8:97:d3:83:68:2a:98:ee:e9:85:b9:3d:fb:50:46:
         dc:54:bd:43:62:0b:aa:41:dc:18:97:3e:70:25:9c:b0:9a:38:
         9d:07:b1:87:e4:af:d2:52:cb:60:66:43:4e:54:9f:84:3c:9a:
         4d:4c:1e:f1:14:dc:6e:8e:b0:d5:b0:4b:b3:af:c5:b4:65:f3:
         da:5d:de:96:84:de:65:ac:8c:89:ff:bd:f5:c3:c7:e2:c7:e3:
         18:fa:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:44 2026 by rpki-client