Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/3981de85-1932-3a6b-9c31-7b52c1953741.roa
File:                     3981de85-1932-3a6b-9c31-7b52c1953741.roa (raw, json)
Hash identifier:          aXnZYBClHMxc9XETYAyUuzGNjQhS7SRxG/mI7Vmvf/Y=
Subject key identifier:   E1:06:61:01:85:61:A7:D1:BB:4F:5B:C3:1F:35:B6:29:A3:4A:47:87
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584E5A4A2266543FBF3FF3315900
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/3981de85-1932-3a6b-9c31-7b52c1953741.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        69.89.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:22:66:54:3f:bf:3f:f3:31:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=1b5a33d8-4049-4256-9c91-1ce75535db2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:c8:68:59:43:92:3c:bb:dc:d4:f8:70:8e:
                    0d:c3:7a:de:66:a7:7d:80:1c:a2:0b:40:9b:68:0d:
                    da:27:d9:fd:80:24:96:03:4a:66:e7:e2:03:25:f4:
                    c5:0f:d8:ab:15:c7:2c:43:d9:cc:3c:3f:f0:3a:57:
                    98:a8:32:62:30:ad:b6:d2:93:ad:2d:e5:87:ce:8f:
                    b0:59:fe:89:33:b4:67:99:61:8d:22:7a:bb:df:33:
                    11:6a:22:52:b0:62:e9:5e:49:f4:3a:4c:d2:03:7f:
                    15:99:56:04:1e:a6:c8:5c:e1:b9:50:34:41:f1:41:
                    56:1e:ac:20:a8:b6:70:33:3b:2f:f1:fd:41:11:86:
                    d0:43:6d:cc:75:7f:8e:38:4e:8b:1b:23:d8:f6:d8:
                    9b:12:53:b9:46:87:55:d8:58:24:b7:e1:8e:84:a5:
                    52:e1:58:2f:3b:10:b3:93:59:59:27:a9:88:0c:16:
                    6a:db:b0:05:67:62:35:f3:63:cb:bf:d3:9e:36:bd:
                    7f:72:25:3a:8a:c6:e1:e3:71:2b:2c:80:51:cf:bc:
                    18:7e:81:e7:2c:72:1e:b2:5d:fb:f7:d7:7d:1b:4b:
                    fd:26:c2:d0:26:41:0d:31:4a:7b:2f:5c:b8:9a:92:
                    ca:79:e9:2a:4b:0b:bd:5f:7f:88:cd:81:9c:b8:6d:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:06:61:01:85:61:A7:D1:BB:4F:5B:C3:1F:35:B6:29:A3:4A:47:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/3981de85-1932-3a6b-9c31-7b52c1953741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f2:93:09:db:6b:d1:62:dc:2e:71:2f:d9:e5:cb:14:fb:d5:
         76:e6:f3:79:ce:be:3d:ad:68:34:44:f2:56:bb:9f:2b:b5:2f:
         c1:13:cf:a1:b5:86:99:2a:0e:24:ea:1e:3f:16:eb:eb:8c:f6:
         8a:09:dc:97:ec:c5:f0:e5:f5:ca:89:80:56:0e:d2:9e:b3:7f:
         1a:0b:4e:75:28:29:99:38:11:6f:2b:80:b4:b4:48:cf:86:16:
         09:c5:fc:71:41:63:51:10:bd:8e:71:25:2f:14:45:5f:b1:f9:
         0a:47:ec:e1:bd:16:63:60:d6:f2:41:21:b0:27:ad:f7:a7:05:
         0a:be:7c:d8:cb:df:94:ac:29:78:c9:b7:eb:82:c0:d1:92:f7:
         8d:ea:4a:60:81:3c:12:b1:41:3f:91:81:bb:49:07:4f:65:a4:
         41:6e:6a:b1:f1:f5:3e:ee:30:ea:da:e8:3f:81:64:c1:df:2c:
         a8:8b:17:aa:0f:55:42:47:f4:bc:cb:3c:9c:31:c0:ad:c6:1e:
         9a:b6:bd:72:c1:be:9f:06:b2:cf:8a:47:a3:a1:f0:2b:bc:ec:
         2d:d1:50:26:b8:4d:33:cc:21:97:f5:af:79:4c:7a:5a:da:ef:
         e5:74:b1:76:12:15:27:6b:35:d5:09:ea:2f:2b:1c:83:13:2a:
         e3:69:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:33:45 2026 by rpki-client