Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/3827718f-d500-36cc-9b19-ea692640417f.roa
File:                     3827718f-d500-36cc-9b19-ea692640417f.roa (raw, json)
Hash identifier:          hzkV7CBWzBON1RP21l3dfNMN6lB7TiAfskkVUCAk2s8=
Subject key identifier:   09:6C:F4:DF:F8:1A:65:38:7D:E1:2C:DB:25:0B:C8:C4:CE:24:0D:7E
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B38219F8982158D968BFCB550
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/3827718f-d500-36cc-9b19-ea692640417f.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     27539
IP address blocks:        69.26.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9f:89:82:15:8d:96:8b:fc:b5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=b559bfc0-a036-4cac-b9bd-f61fdc2520c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:de:ee:55:3e:56:40:4a:cb:bc:f7:39:a2:
                    f0:2b:bd:11:ff:7d:bb:f6:4b:0b:ed:9a:92:88:2e:
                    bd:c5:f6:c2:43:b8:47:e8:e9:70:0e:70:98:99:61:
                    d9:08:b7:2e:8d:ce:80:b4:35:3e:ea:3c:e4:f1:9a:
                    5d:10:7a:fe:de:8c:27:57:6c:a4:90:f6:62:6b:f0:
                    d7:d5:38:43:9b:eb:d4:66:22:67:6c:a4:fe:51:e6:
                    d3:9f:b4:2a:87:23:b9:d6:42:93:82:36:40:ca:15:
                    3f:b0:de:68:4f:73:62:04:c6:47:81:f1:86:9d:6d:
                    5f:55:57:bd:b7:52:dc:d2:22:89:1f:f9:b9:08:2b:
                    79:e9:34:4f:d4:10:aa:2c:da:cb:ae:ef:28:29:1a:
                    34:61:b3:a7:c6:4f:b5:13:4a:22:c9:5a:f7:6c:fa:
                    ae:0e:d6:31:ff:90:a8:24:06:55:71:5f:c6:37:11:
                    76:20:a4:a9:f1:84:b5:53:8c:f1:1c:f0:2b:23:6a:
                    f9:1e:a1:29:b1:4a:83:4b:01:ad:7a:3e:19:cd:93:
                    60:a1:10:bb:be:d7:54:a2:20:6c:54:0b:39:73:13:
                    6e:2d:1d:e6:3c:d0:07:35:91:3a:4d:e1:db:72:b4:
                    48:8b:ac:40:01:01:ed:df:e2:b6:31:de:e8:06:2b:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6C:F4:DF:F8:1A:65:38:7D:E1:2C:DB:25:0B:C8:C4:CE:24:0D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/3827718f-d500-36cc-9b19-ea692640417f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:91:32:ae:53:a6:f1:a4:38:a1:6a:35:72:bd:f9:5b:0d:a4:
         a3:a3:de:79:54:d4:e0:97:8b:0a:0a:88:ee:64:86:73:c9:c5:
         31:6b:a7:56:49:5c:63:82:8b:42:bb:8e:10:a0:63:37:ae:4b:
         87:6a:23:72:68:e6:37:1d:33:96:e6:2d:14:3a:16:8b:72:ea:
         90:a2:f9:02:a5:bb:5c:de:3f:d4:c6:0b:d6:9b:18:f8:8b:ac:
         05:6e:d7:1e:38:62:fe:be:07:54:4d:17:6d:47:8e:65:2f:86:
         54:32:8a:93:99:ce:c6:a5:de:28:43:3f:64:36:5e:8f:ae:ce:
         77:66:c8:7b:68:fd:73:1d:68:42:fb:3d:7a:e9:f5:e4:03:c4:
         95:dd:8e:10:54:02:26:b2:be:74:6e:47:2e:09:a2:44:d2:13:
         9f:3d:68:8e:3e:e0:e6:43:05:4f:53:67:61:75:45:9d:cb:34:
         14:6d:f2:f7:71:0f:00:dd:73:a5:b3:91:cd:11:f1:09:59:4c:
         c5:74:27:58:c2:41:fa:4e:a7:6b:15:92:32:9a:c7:8b:b7:3b:
         7c:9f:06:f4:1f:10:db:0d:58:bb:13:e5:03:bb:da:e4:a0:03:
         9f:b8:3e:4e:f8:ff:24:af:86:a3:3e:9e:5d:54:dc:75:f6:d1:
         28:e8:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:36:16 2025 by rpki-client