Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa
File:                     846a7d87-a2f6-32da-ab22-7e4cde53728a.roa (raw, json)
Hash identifier:          2Cuq2D1rdON7eZaMcMM31B+nOm2SaDounDuznLFfBN8=
Subject key identifier:   3D:46:DE:A0:1E:BF:9B:DA:C5:59:47:25:35:DC:29:03:5D:01:BC:67
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584E7204D30EAB6E52F3F3211100
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     19209
IP address blocks:        69.147.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d3:0e:ab:6e:52:f3:f3:21:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=caa41c48-e751-4f6c-bf52-ea75837d4dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:fa:47:34:32:71:9f:5f:cf:f2:f5:39:83:
                    6b:88:28:42:b1:13:21:a5:90:2d:e6:95:a5:da:5c:
                    3a:fd:42:89:a3:9c:02:4a:5c:dd:8e:1a:35:32:a4:
                    45:5d:6c:a0:c0:8e:22:73:07:55:bf:0c:e0:d7:a1:
                    fc:a5:9f:c9:5f:e0:d6:1d:54:47:08:9e:70:21:05:
                    9b:a3:89:a3:a0:92:25:e1:9a:7f:9e:77:40:b2:ac:
                    98:d5:40:5f:53:78:d3:de:2c:42:40:ad:2b:c9:00:
                    32:18:aa:e5:2b:c4:ff:d1:66:f7:92:f6:29:30:35:
                    b7:ee:71:2c:ba:88:a2:c7:ad:56:34:b6:31:a5:4a:
                    04:86:5f:3d:70:cf:0b:eb:67:bd:bc:1a:c9:a0:0e:
                    b2:d7:31:5b:bc:e3:82:0f:f5:c1:4c:af:e9:83:2a:
                    e1:25:54:80:02:56:b4:ce:b3:9b:b0:c0:45:50:14:
                    f3:c8:8e:2a:9d:3b:7c:ac:2e:0f:2c:c6:6c:8a:85:
                    41:e8:e9:67:40:75:7b:85:df:84:1b:bc:e7:58:3f:
                    60:5f:f0:1a:88:f3:fd:32:7d:65:28:3c:67:22:40:
                    3d:32:0e:20:7c:aa:40:74:a5:1e:08:ff:3d:ff:da:
                    e8:56:fe:29:77:66:71:f4:77:d4:c3:a8:99:79:d7:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:DE:A0:1E:BF:9B:DA:C5:59:47:25:35:DC:29:03:5D:01:BC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/846a7d87-a2f6-32da-ab22-7e4cde53728a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.147.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:08:a8:0b:c5:be:8e:b0:c7:e5:af:90:61:5f:59:d0:9c:
         fa:aa:ec:b0:c0:f3:49:99:eb:2c:a6:1b:be:b2:1a:de:76:c6:
         96:e6:fe:7d:f2:c5:cb:20:3b:bf:68:3a:13:32:d5:71:98:ae:
         30:e8:64:92:58:2f:ff:d4:e7:90:36:c8:c4:3f:92:9f:4b:fa:
         b3:ea:7f:ea:32:40:ce:0b:0d:0e:b2:5a:e8:c2:a0:03:b9:59:
         8b:27:30:53:fc:8c:6c:57:0c:a4:d2:3f:19:49:c2:c2:18:5c:
         f6:e2:87:8a:1e:69:f3:27:25:b4:78:0e:de:33:dd:7a:75:21:
         72:62:fc:67:30:ec:a1:3b:c2:15:ae:2c:08:12:57:90:53:42:
         e5:85:96:2b:77:6b:4a:ac:0a:48:1c:ee:81:3a:8a:e9:cd:72:
         2f:ce:5b:c5:0e:66:a6:c6:c0:9d:fb:88:92:e1:10:6e:78:41:
         08:2d:27:1a:e5:93:99:53:72:f6:83:71:21:21:f9:f3:5f:35:
         00:d1:88:79:8a:bd:25:6b:1b:5d:4e:27:85:3a:30:94:2e:e7:
         bf:43:7c:4c:89:63:ce:55:0c:98:f1:4a:ad:28:eb:52:e8:87:
         3c:25:11:59:35:19:57:a9:92:f2:db:63:e4:61:22:7e:79:df:
         fb:fa:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:07:55 2026 by rpki-client