Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
File:                     cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa (raw, json)
Hash identifier:          kRrs70kVluj4xwXTTWNsO93dCVqoVsvQ31Vzdlq6/eA=
Subject key identifier:   AD:B2:D3:54:C6:52:B9:82:5A:28:16:06:81:1E:4F:D0:18:41:57:1C
Certificate issuer:       /CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
Certificate serial:       010D0C9F4328584EC20C66A267600DEAE09DBAC0
Authority key identifier: 41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     64230
IP address blocks:        69.161.205.0/24 maxlen: 24
                          2620:e2:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:66:a2:67:60:0d:ea:e0:9d:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=754e9627-328b-4a69-acb9-d774c9740283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:5f:d8:50:c1:20:e7:75:5f:2c:a8:c2:0c:
                    c5:3b:ea:49:a8:e0:38:85:23:a7:53:ba:18:23:58:
                    0d:85:7f:f2:f2:d1:b7:b4:87:d4:e2:bb:e9:3e:19:
                    4c:06:2a:7c:b4:02:27:03:2c:7d:00:c1:34:40:8b:
                    14:40:f9:64:4c:aa:84:87:33:48:0b:d2:3e:49:4b:
                    47:0c:ca:9b:4a:3a:75:16:4d:17:67:5a:10:ad:bf:
                    1b:19:82:81:dc:cf:e8:9d:69:e8:a0:6e:ac:02:a5:
                    a4:c6:17:3c:b9:42:5c:e9:00:ee:91:4a:7b:64:be:
                    6a:18:99:57:fb:79:fa:c5:c4:02:71:06:c8:0c:1b:
                    65:ab:14:4d:8b:d7:34:b3:44:44:b7:b8:84:db:ca:
                    af:a8:f2:ea:cc:68:a2:ea:31:5e:6e:c2:a1:eb:f9:
                    a3:b2:81:6a:50:e0:4c:9c:97:72:24:bc:a1:cd:8e:
                    37:d8:29:bb:11:84:29:cf:6d:ed:af:20:9c:fe:1a:
                    e3:2b:34:0e:00:88:09:3d:1b:9a:43:ec:5f:72:0f:
                    cd:14:42:08:ba:4c:6c:f7:0c:e2:b6:4e:57:e0:db:
                    ea:77:46:1b:1d:bb:ad:fd:43:17:a4:4f:45:4c:ff:
                    31:f5:f3:a5:aa:53:74:46:ee:75:cf:47:37:a4:59:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:D3:54:C6:52:B9:82:5A:28:16:06:81:1E:4F:D0:18:41:57:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/cb2f6d6d-3b55-3444-96ca-e8df5f1e65ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.crl

            X509v3 Authority Key Identifier:
                keyid:41:EA:CF:00:CF:55:36:EE:11:FB:1E:3D:03:C4:20:D5:38:36:69:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ffd96fbe-80e0-41c6-9f9d-38e3a991f0c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.205.0/24
                IPv6:
                  2620:e2:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f9:a9:c7:76:9e:72:ec:a7:7c:a1:89:41:2f:2e:b2:da:09:
         8b:97:f3:ee:95:bf:45:8a:22:19:0d:71:17:7b:51:f6:c7:36:
         fd:2f:d3:4a:2a:e5:a7:d6:64:89:f2:8c:b9:a6:57:05:c5:7a:
         7d:60:3f:1f:b8:b0:48:a3:f1:ef:39:8b:e0:42:6c:88:54:63:
         35:36:45:17:a6:6a:3f:2b:8c:79:20:89:f6:23:43:ae:76:3d:
         3f:d4:01:5e:5f:2d:2d:f8:12:eb:52:bf:6e:8d:0c:82:85:68:
         65:39:dc:27:50:eb:aa:db:67:a9:1e:98:53:0d:09:57:40:db:
         9e:bb:9b:5a:83:ee:e9:0e:b5:3c:32:60:bc:e5:bc:5f:bc:ca:
         8e:2f:f8:08:5a:c6:fd:bd:58:2a:b7:e7:ae:4c:04:4f:fd:2c:
         e8:34:57:5a:2e:7e:d7:6e:b8:c6:f2:8c:62:d8:7b:3f:bf:6f:
         30:dd:de:9b:f5:3b:b3:96:a3:4a:26:a5:81:19:a6:4f:31:b6:
         41:f8:15:0f:4f:fc:d3:10:7d:6b:04:ad:a0:26:b5:c2:20:6f:
         e0:3a:7a:a0:b2:c4:68:4a:ef:df:f7:79:ef:63:f6:48:22:c9:
         5a:c8:77:1d:7b:78:4d:95:16:4b:74:17:3f:6e:f8:6f:83:02:
         5d:02:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:26:55 2026 by rpki-client