Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
File:                     a687c46a-89db-380a-b337-cdc67c4ee430.roa (raw, json)
Hash identifier:          LgEzcKmvQMrowep7c4vdwkijrIfEY/IJvYR7L35GNvI=
Subject key identifier:   BD:F8:C9:A8:37:05:82:5B:FD:FD:F5:2B:DD:B3:E4:66:7B:C8:73:79
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E07009A4076B9C365D9CC2FC0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     25961
IP address blocks:        69.1.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:9a:40:76:b9:c3:65:d9:cc:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=2983edee-0446-4c30-bf89-971f6554cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:0e:90:70:c2:98:c2:ff:af:b2:59:4c:7c:
                    de:38:55:7c:7a:6c:aa:5b:1a:30:27:43:69:81:ed:
                    4f:03:ff:8f:f3:49:e0:4a:6a:a2:48:b9:64:31:eb:
                    2a:af:06:f6:65:a3:5a:b6:52:bd:83:af:d2:ad:1e:
                    a2:d1:eb:f1:55:bb:55:45:7f:17:16:57:be:c4:ce:
                    ef:8d:4e:a7:c7:01:25:ba:d4:55:14:2d:22:f3:e5:
                    a0:de:83:81:72:4c:5a:8c:30:df:f0:a8:f8:76:59:
                    58:82:44:98:10:93:60:5b:f3:f2:eb:3b:99:54:67:
                    69:b3:d2:fd:70:4c:64:74:dc:93:ca:7f:7e:13:0e:
                    ff:8a:f6:f6:36:69:a6:2a:c7:ad:96:9f:42:ee:3c:
                    8d:2d:b1:34:9f:f1:89:fe:fb:f9:40:34:87:ad:1d:
                    48:49:f0:56:f4:f1:ec:69:12:8b:f4:0e:62:91:9d:
                    d1:5e:08:c8:25:ae:62:7c:b3:56:b1:2a:1d:22:ee:
                    94:af:65:8d:77:42:a4:a1:65:c4:13:db:7a:ef:a8:
                    8d:67:3e:76:69:02:54:da:52:d9:ca:40:25:62:f3:
                    85:18:8a:3e:4f:8d:1e:f3:e2:4d:ed:57:da:5d:15:
                    ad:24:7f:8e:c0:ed:b3:a5:22:62:b7:5f:ec:8a:bd:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:C9:A8:37:05:82:5B:FD:FD:F5:2B:DD:B3:E4:66:7B:C8:73:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a687c46a-89db-380a-b337-cdc67c4ee430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:9b:4e:eb:48:d8:10:e2:62:0c:76:59:2c:69:1a:f3:9b:
         bf:d4:ae:c0:dc:07:0b:4b:a8:04:32:c8:56:e9:3d:bd:bf:80:
         bf:b0:98:82:c0:c1:ae:2c:4b:66:27:e6:68:4e:44:06:76:68:
         53:4b:9b:b4:d4:78:4f:e0:ec:74:88:2c:20:d1:57:6b:b9:b5:
         2d:1c:48:8a:76:e7:fc:86:46:c0:49:89:8c:aa:82:f7:43:66:
         2d:b8:3a:4e:bf:18:ac:bf:1d:54:09:17:01:fc:c6:15:c2:aa:
         89:51:7f:ad:a1:a3:31:37:6a:f1:1a:e4:55:7c:71:5f:ed:af:
         e6:d0:02:02:01:a9:ce:8e:b6:b0:0e:7c:ed:7a:c1:f2:da:5d:
         e7:4f:47:5c:ea:6c:69:6d:37:1c:a2:7f:c5:cd:2d:53:5f:45:
         ee:79:9f:13:e1:e5:7c:06:50:22:8f:73:bb:9b:68:e5:f6:55:
         7a:4a:a3:4b:97:b7:72:a4:26:f9:ad:e8:2f:12:05:15:ae:d6:
         8b:d9:4b:10:e6:23:22:22:e9:45:94:65:b2:6e:21:90:60:d2:
         7a:90:86:b8:75:17:58:f0:c2:03:51:2e:a5:09:79:d8:79:f6:
         99:36:b0:ed:a2:ab:b2:9f:38:5c:48:b2:f0:27:34:b4:c0:13:
         b5:f8:df:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJpAdrnDZdnML8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
Mjk4M2VkZWUtMDQ0Ni00YzMwLWJmODktOTcxZjY1NTRjZGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQQOkHDCmML/r7JZTHzeOFV8emyqWxowJ0Np
ge1PA/+P80ngSmqiSLlkMesqrwb2ZaNatlK9g6/SrR6i0evxVbtVRX8XFle+xM7v
jU6nxwElutRVFC0i8+Wg3oOBckxajDDf8Kj4dllYgkSYEJNgW/Py6zuZVGdps9L9
cExkdNyTyn9+Ew7/ivb2NmmmKsetlp9C7jyNLbE0n/GJ/vv5QDSHrR1ISfBW9PHs
aRKL9A5ikZ3RXgjIJa5ifLNWsSodIu6Ur2WNd0KkoWXEE9t676iNZz52aQJU2lLZ
ykAlYvOFGIo+T40e8+JN7VfaXRWtJH+OwO2zpSJit1/sir2/MQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL34yag3BYJb/f31K92z5GZ7yHN5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTY4N2M0NmEtODlkYi0z
ODBhLWIzMzctY2RjNjdjNGVlNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvmm07rSNgQ4mIMdlksaRrzm7/UrsDcBwtLqAQyyFbpPb2/gL+wmILA
wa4sS2Yn5mhORAZ2aFNLm7TUeE/g7HSILCDRV2u5tS0cSIp25/yGRsBJiYyqgvdD
Zi24Ok6/GKy/HVQJFwH8xhXCqolRf62hozE3avEa5FV8cV/tr+bQAgIBqc6OtrAO
fO16wfLaXedPR1zqbGltNxyif8XNLVNfRe55nxPh5XwGUCKPc7ubaOX2VXpKo0uX
t3KkJvmt6C8SBRWu1ovZSxDmIyIi6UWUZbJuIZBg0nqQhrh1F1jwwgNRLqUJedh5
9pk2sO2iq7KfOFxIsvAnNLTAE7X439U=
-----END CERTIFICATE-----
Generated at Mon Jun 1 22:57:47 2026 by rpki-client