Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d628a59b-17a7-38d0-99c9-80b5c19b4a23.roa
File:                     d628a59b-17a7-38d0-99c9-80b5c19b4a23.roa (raw, json)
Hash identifier:          SCD1iQ38J+jW6h+8t7tpff7bSpk0ULPHjzMERvT/htM=
Subject key identifier:   28:BA:82:09:5A:FA:CD:1E:AB:A1:2C:80:BC:88:F8:DE:48:A9:18:12
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584D7A0552F100433AC132CEBD80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d628a59b-17a7-38d0-99c9-80b5c19b4a23.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        69.195.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:52:f1:00:43:3a:c1:32:ce:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=2b3d64cc-833c-4bf0-aa43-28b39f4cce1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:a0:c2:e2:f1:71:65:90:db:0d:58:49:da:
                    24:c7:7d:6e:7f:56:20:2a:ae:5a:89:74:54:8e:8f:
                    be:ae:07:18:ce:7b:bd:a8:36:0f:ff:d2:b3:f0:88:
                    68:38:86:0b:42:d2:e2:9e:58:87:33:c9:f4:16:db:
                    d7:57:4d:f8:d5:3a:d1:00:3f:6c:9a:d1:13:1c:38:
                    8f:53:18:78:85:93:13:d3:c8:b0:50:70:31:a9:0b:
                    7d:47:f1:20:39:16:76:15:0f:f0:f7:7e:d2:b5:bd:
                    02:51:01:5f:29:66:e7:b9:dd:61:86:54:41:29:32:
                    d2:1c:13:72:40:82:16:9d:4a:16:d7:14:a3:65:62:
                    45:c6:50:50:05:e4:b1:ad:59:af:38:dc:8f:53:43:
                    7c:13:a3:48:3e:88:0b:d1:62:98:ca:9b:b6:40:49:
                    e6:e7:be:4d:b8:7e:90:dc:0b:d9:3b:b7:76:05:3d:
                    ed:2e:ff:e2:f6:6e:5e:19:7c:de:af:d1:3c:2d:fb:
                    64:b0:93:dd:d6:59:20:d5:9d:65:b1:03:01:8c:7c:
                    80:38:52:f7:68:7c:f9:65:18:ae:b1:59:cb:0a:b6:
                    0e:2e:34:14:3c:ba:2b:c2:d0:a7:82:1d:35:e0:57:
                    2b:88:62:85:9f:a9:9b:07:71:d6:39:6f:12:64:13:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:82:09:5A:FA:CD:1E:AB:A1:2C:80:BC:88:F8:DE:48:A9:18:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/d628a59b-17a7-38d0-99c9-80b5c19b4a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.195.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:f1:b7:ee:02:4f:0e:88:56:44:ba:44:27:e3:55:07:32:
         d1:99:ad:1b:9d:97:08:60:87:05:d2:e5:04:a9:f7:cb:b8:8c:
         8e:73:76:6d:90:ab:80:61:4f:a6:a0:80:68:f5:ef:db:58:37:
         2b:61:64:79:36:ad:3b:95:79:25:50:de:10:12:75:3f:4a:26:
         1a:f8:82:2b:19:25:20:24:94:4e:f4:0e:99:28:94:e8:44:bc:
         08:a7:a9:58:ae:76:76:ea:46:13:4f:3a:51:8b:7f:2e:62:ac:
         1c:90:7c:fd:a1:4c:32:bf:95:4a:a1:57:f8:d0:a1:8b:b7:db:
         df:7a:ec:da:36:c8:9f:f9:83:20:d7:5e:a1:c2:52:71:af:0f:
         4e:f7:08:70:23:02:42:50:6c:78:71:dd:e9:5d:6f:1e:d0:34:
         79:59:b7:fe:b4:ee:81:e8:f1:54:c2:29:21:dc:d2:b1:6e:53:
         18:4a:be:dd:7d:ee:a0:45:3a:a3:75:1d:26:83:5d:08:34:5c:
         97:a8:0d:e0:53:aa:58:ed:bd:d6:f3:ce:22:51:42:c6:7c:26:
         bb:d6:dd:1f:f5:0e:15:2d:05:39:54:58:59:d0:56:ed:5e:d9:
         fb:94:59:6b:fc:bc:88:c4:1b:51:cf:c6:e5:64:97:9b:51:9d:
         a1:e4:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:41 2026 by rpki-client