Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/337ab377-36de-3e59-ab75-c15d6a3bec23.roa
File:                     337ab377-36de-3e59-ab75-c15d6a3bec23.roa (raw, json)
Hash identifier:          9L1wtCEi36YBGSz6wdffMsDTFHxL1cjdtVWEPItezxU=
Subject key identifier:   33:E9:8E:58:31:C5:70:53:DC:74:D7:DE:31:E3:77:3B:3F:90:C7:6E
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584ED9C765D1799F308F779F7CC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/337ab377-36de-3e59-ab75-c15d6a3bec23.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     13768
IP address blocks:        69.28.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:65:d1:79:9f:30:8f:77:9f:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=867fe653-863d-488c-a991-76f4ffbbfc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:9f:7d:46:ff:45:81:c5:54:5c:b2:10:30:
                    ed:a3:62:e9:2e:25:d6:1b:84:fa:da:49:64:4c:a5:
                    51:02:e9:93:7f:1d:0c:03:e5:b1:6f:82:07:45:b9:
                    dc:32:6c:c2:8f:36:e1:30:2a:a7:71:a9:08:53:dd:
                    bd:a0:34:cc:02:b6:d2:c5:8c:66:14:3b:9c:63:21:
                    65:31:8c:6c:ec:7f:a2:09:57:0d:ba:90:e9:78:37:
                    df:c1:00:cc:fe:28:3b:a7:5c:46:68:7e:39:fb:19:
                    e4:33:19:5a:d4:52:cd:6c:47:31:5b:bd:5a:65:be:
                    85:9d:50:5f:1e:f1:1f:b0:76:91:fd:58:d4:e8:7c:
                    c9:ae:35:4c:28:b9:0b:fd:0a:27:0c:3b:96:49:fa:
                    40:df:77:b6:1d:3d:ba:d8:66:32:37:9e:d3:66:6a:
                    f4:1b:b2:3b:87:86:34:61:17:b7:89:f8:af:bf:08:
                    4f:da:a6:85:4e:c9:3e:30:83:f1:01:af:6d:4a:51:
                    b8:91:9d:ae:06:cc:da:ca:d1:6e:9d:2a:55:d4:ce:
                    33:7f:ea:b3:7f:84:60:92:71:c8:ea:9e:91:2d:d8:
                    53:1d:70:3c:7e:2d:b2:93:f3:a1:f8:af:27:e6:a7:
                    38:53:13:9f:ba:7b:88:f1:ae:00:bb:68:5f:66:8f:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E9:8E:58:31:C5:70:53:DC:74:D7:DE:31:E3:77:3B:3F:90:C7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/337ab377-36de-3e59-ab75-c15d6a3bec23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:df:9e:7a:b9:fc:1c:44:98:b9:06:e5:c5:b0:78:2e:6b:
         a1:f0:ac:e0:84:0e:7d:22:12:9f:dd:1e:5b:70:4c:d2:d2:5b:
         c1:a0:7a:c2:b8:a0:dd:08:31:e5:a4:e6:18:b2:97:83:13:18:
         a8:f1:52:f2:cd:e2:4c:e4:2d:84:7d:33:7e:ec:17:e1:82:1b:
         fa:9b:c4:8a:f2:3d:1b:72:63:43:bc:f5:a7:bc:5c:a6:4f:a6:
         e9:8e:97:f5:30:c2:6b:84:7d:e8:d9:ea:11:fc:7d:6e:e7:8a:
         05:a3:ad:48:dd:bf:ad:d3:d9:fd:44:dd:20:51:4a:ec:72:6c:
         02:42:a3:d7:eb:83:61:2f:dc:f9:45:67:b7:98:c6:a9:ae:fb:
         c0:7d:37:3e:ce:2b:62:d1:45:e4:d6:6d:bc:2e:01:40:c8:73:
         10:5f:56:61:e5:b3:98:34:92:dc:23:88:36:d9:b2:1e:d5:da:
         d9:61:3d:2a:98:80:05:34:f0:ae:0e:cd:7d:71:f0:25:0f:67:
         58:3a:e1:28:62:89:71:6f:66:2c:15:bf:09:67:19:04:7a:a7:
         90:7c:9d:e6:43:21:44:13:de:ec:6d:29:c2:0b:dd:51:73:05:
         43:02:87:2d:a2:39:90:4a:e3:c4:75:51:dd:b2:b8:0d:22:ab:
         12:76:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:48 2026 by rpki-client