Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/06835be9-983d-33e7-923c-b5cc223a5c34.roa
File:                     06835be9-983d-33e7-923c-b5cc223a5c34.roa (raw, json)
Hash identifier:          +UChC2ipsm4QbehiVh0Qo8PPL34+tD+Bbfuw0Rp83v4=
Subject key identifier:   7E:72:6F:14:D1:79:6D:8A:7D:1A:0B:3D:EB:33:25:4E:2A:58:12:C5
Certificate issuer:       /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial:       010D0C9F4328584FA5FFD3DAB0DCC7C84517F3C0
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/06835be9-983d-33e7-923c-b5cc223a5c34.roa
Signing time:             Wed 28 Oct 2026 04:39:17 +0000
ROA not before:           Wed 28 Oct 2026 04:39:17 +0000
ROA not after:            Tue 26 Jan 2027 05:39:17 +0000
asID:                     8175
IP address blocks:        69.51.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:ff:d3:da:b0:dc:c7:c8:45:17:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
        Validity
            Not Before: Oct 28 04:39:17 2026 GMT
            Not After : Jan 26 05:39:17 2027 GMT
        Subject: CN=29aca344-58b1-4295-bf6d-b54c3b71a968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:c6:44:eb:6c:a9:a8:1b:0d:0f:a7:75:66:
                    30:94:cd:3e:96:b0:f4:84:d1:91:10:0c:cb:08:b6:
                    ba:51:2a:a7:12:12:be:4a:b4:00:ec:f8:35:07:5f:
                    86:fc:9d:4e:bd:8b:0b:74:a6:f1:31:ad:71:33:85:
                    9f:ba:27:f1:7f:4c:85:f5:54:af:a4:64:02:61:d5:
                    4a:1b:ad:da:ae:b1:7f:21:52:13:99:2b:cf:1a:2c:
                    8f:ed:d3:72:ce:02:ab:37:a9:a8:7c:fc:83:3f:54:
                    50:f0:a2:8d:d8:12:a3:e9:69:9d:bb:ae:35:85:f1:
                    ae:cb:3d:4d:99:61:02:53:bd:27:45:f2:16:66:31:
                    3d:02:ef:9f:9a:85:cd:0d:6f:58:b0:56:20:09:3f:
                    4e:3e:d3:1f:63:37:3d:59:12:57:84:2d:01:6b:cd:
                    83:7b:4d:29:5a:87:0e:47:a3:0e:7d:4d:84:bc:c7:
                    41:12:df:b3:75:64:4a:69:24:9e:7e:1d:cf:8b:71:
                    77:24:0e:11:88:fa:dd:26:a5:c7:7c:80:dd:45:62:
                    62:56:cc:a8:8e:5b:3d:fb:32:d8:30:62:42:5c:fe:
                    8c:ff:53:a7:b1:0b:55:49:ab:06:32:c9:05:58:5c:
                    66:03:a7:a8:c9:47:e9:e3:05:3d:c5:e1:4f:7b:94:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:72:6F:14:D1:79:6D:8A:7D:1A:0B:3D:EB:33:25:4E:2A:58:12:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/06835be9-983d-33e7-923c-b5cc223a5c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl

            X509v3 Authority Key Identifier:
                keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:a0:4d:d6:37:3f:bb:24:dd:bf:1a:de:e5:a9:3c:b1:65:
         85:ac:09:1a:b2:ef:b1:fb:f0:9e:9d:bb:25:90:36:1b:97:49:
         03:d2:09:44:57:11:67:b3:41:f6:a1:eb:d4:14:50:d7:ed:11:
         1e:60:5d:1a:4a:25:9f:a9:2d:54:f7:57:50:6a:a9:cb:d6:18:
         2e:fd:ad:e3:29:e3:a1:97:22:94:74:ef:6f:d2:7a:5a:c8:2e:
         33:e0:df:86:5d:7f:b9:57:f2:7d:0a:4e:f9:61:72:4a:38:b2:
         cc:70:22:41:d7:a1:be:fc:5a:dd:5c:58:48:1d:d5:b3:5e:7b:
         7c:10:d9:c0:45:c4:a5:e6:d4:b6:83:f5:a9:6c:7e:4a:4c:0c:
         eb:f3:b8:18:c8:b9:e3:26:73:33:39:f0:dc:44:3d:54:0c:05:
         f7:aa:41:d1:71:b8:c9:bd:3d:e5:fc:2b:16:4b:83:3c:5e:10:
         1b:08:d3:54:80:d8:d4:d5:4b:ce:60:21:14:81:36:59:33:2e:
         08:02:d1:cd:40:0f:79:8b:76:c2:12:99:45:df:af:cc:15:bf:
         95:99:36:0f:24:b8:c7:00:2a:b7:85:28:1f:ff:be:9a:10:7c:
         81:91:25:ff:d0:ee:36:be:ca:cc:8f:8a:a3:74:af:00:58:27:
         73:02:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:08 2026 by rpki-client