Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/dd2617e3-0ac5-305a-bbb1-20170d881ca2.roa
File:                     dd2617e3-0ac5-305a-bbb1-20170d881ca2.roa (raw, json)
Hash identifier:          0msTcEE1geH/Io1l5zF91104MLmdKoWik4cN0umN2xE=
Subject key identifier:   A5:0C:2B:34:1D:9B:A4:64:B6:38:35:B2:15:C9:98:EF:04:34:83:4E
Certificate issuer:       /CN=5294026e-22fb-4d13-b040-a0d74302e57e
Certificate serial:       010D0C9F4328584E46BF22343917E32D0FF62480
Authority key identifier: 01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/dd2617e3-0ac5-305a-bbb1-20170d881ca2.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     10361
IP address blocks:        69.191.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:22:34:39:17:e3:2d:0f:f6:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5294026e-22fb-4d13-b040-a0d74302e57e
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=ac8c517b-db8c-4e62-b7c4-16a70dca1079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:05:b6:50:27:b6:0a:7a:6c:78:1a:bf:68:
                    39:0d:26:c5:a7:34:c7:c8:85:61:7c:32:10:dd:02:
                    59:78:41:30:3b:35:ea:c4:3e:9e:83:f5:88:3a:1a:
                    ca:99:dd:12:48:8b:dc:8e:75:21:c4:6c:09:43:7a:
                    a6:e5:c5:2b:a7:a0:d7:6f:09:a1:a5:83:28:a8:48:
                    d3:74:1a:56:88:a8:27:81:ee:4f:25:d5:ba:cf:9e:
                    81:b0:03:0f:44:48:32:4f:b0:23:7d:89:ea:01:4f:
                    2f:1c:da:51:df:b4:13:a6:a1:63:bd:9f:18:7e:f2:
                    65:c9:b3:bb:7c:00:46:71:34:cc:9b:dc:4b:57:e4:
                    ee:c1:f1:19:a1:9d:2f:37:b1:76:53:6f:33:de:1b:
                    43:de:34:c4:e4:16:ee:0a:6c:81:54:af:59:89:43:
                    f9:2a:4e:df:2c:2e:56:cc:83:ca:b2:74:0c:9b:d3:
                    61:e5:cb:75:19:34:91:73:c4:b3:d6:4f:2e:6d:93:
                    9a:75:20:af:d4:f0:f3:23:e1:66:2d:5c:18:e4:cd:
                    b9:a9:5e:d3:e5:7d:01:83:a4:e4:db:e7:fb:ea:66:
                    a7:af:b3:97:de:27:2d:c1:05:5f:3d:56:14:a8:8c:
                    7a:66:36:7b:11:f4:cd:ab:05:25:23:12:23:8a:ce:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0C:2B:34:1D:9B:A4:64:B6:38:35:B2:15:C9:98:EF:04:34:83:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/dd2617e3-0ac5-305a-bbb1-20170d881ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e/5294026e-22fb-4d13-b040-a0d74302e57e.crl

            X509v3 Authority Key Identifier:
                keyid:01:9A:82:A4:B4:AB:DC:DA:9E:35:9F:5A:72:BB:1A:93:59:97:7B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5294026e-22fb-4d13-b040-a0d74302e57e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.191.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:02:31:4c:66:27:a5:eb:45:74:bd:42:32:c5:51:3c:62:ae:
         6a:87:38:09:99:9c:9f:3e:49:3a:49:a4:63:b0:8b:f9:68:35:
         e9:a9:5d:be:1a:40:be:e6:19:d4:af:ec:4d:4b:e1:41:da:76:
         68:c4:63:9e:de:7d:32:56:d7:b0:e2:51:23:d7:4c:23:6e:fd:
         97:bd:e3:16:c1:23:c8:de:37:44:3c:f1:f6:21:02:9b:0f:11:
         28:91:d8:3e:e7:bf:93:8d:a2:f3:65:15:79:8f:24:b8:c6:44:
         69:56:2e:57:f9:30:30:8d:ca:ff:4a:7b:d0:01:82:01:55:2f:
         2a:ea:09:57:b3:4e:d1:80:d0:8c:97:0b:0c:75:44:fd:cf:b5:
         48:32:b9:f1:6d:dd:28:1f:44:6e:b6:6a:98:1d:35:0b:0b:02:
         40:b8:ec:3d:17:f9:8c:a1:fd:c9:7b:d8:b6:4a:47:b8:dc:da:
         91:06:23:bf:0c:c5:f1:e7:dc:08:a1:d8:73:27:24:5d:df:1b:
         79:e7:ca:26:94:62:52:38:ca:85:7d:6e:9e:c1:d3:82:60:29:
         ab:b8:b5:95:73:54:30:34:c5:f2:18:b5:57:6d:8c:8b:a1:98:
         a0:44:2e:ab:eb:87:f7:24:7c:34:af:d4:ad:05:fa:0a:c8:89:
         27:3e:c5:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5GvyI0ORfjLQ/2JIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI5NDAyNmUtMjJmYi00ZDEzLWIwNDAtYTBkNzQzMDJl
NTdlMB4XDTI2MDYyNDA5MDAxMloXDTI2MDkyMjA5MDAxMlowLzEtMCsGA1UEAxMk
YWM4YzUxN2ItZGI4Yy00ZTYyLWI3YzQtMTZhNzBkY2ExMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjsFtlAntgp6bHgav2g5DSbFpzTHyIVhfDIQ
3QJZeEEwOzXqxD6eg/WIOhrKmd0SSIvcjnUhxGwJQ3qm5cUrp6DXbwmhpYMoqEjT
dBpWiKgnge5PJdW6z56BsAMPREgyT7AjfYnqAU8vHNpR37QTpqFjvZ8YfvJlybO7
fABGcTTMm9xLV+TuwfEZoZ0vN7F2U28z3htD3jTE5BbuCmyBVK9ZiUP5Kk7fLC5W
zIPKsnQMm9Nh5ct1GTSRc8Sz1k8ubZOadSCv1PDzI+FmLVwY5M25qV7T5X0Bg6Tk
2+f76manr7OX3ictwQVfPVYUqIx6ZjZ7EfTNqwUlIxIjis6jIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUMKzQdm6Rktjg1shXJmO8ENINOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0
MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3NDMwMmU1N2UvZGQyNjE3ZTMtMGFjNS0z
MDVhLWJiYjEtMjAxNzBkODgxY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTI5NDAyNmUtMjJmYi00ZDEzLWIw
NDAtYTBkNzQzMDJlNTdlLzUyOTQwMjZlLTIyZmItNGQxMy1iMDQwLWEwZDc0MzAy
ZTU3ZS5jcmwwHwYDVR0jBBgwFoAUAZqCpLSr3NqeNZ9acrsak1mXe8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81Mjk0MDI2ZS0yMmZiLTRkMTMtYjA0MC1hMGQ3
NDMwMmU1N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARb9XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUCMUxmJ6XrRXS9QjLFUTxirmqHOAmZnJ8+STpJpGOwi/loNempXb4a
QL7mGdSv7E1L4UHadmjEY57efTJW17DiUSPXTCNu/Ze94xbBI8jeN0Q88fYhApsP
ESiR2D7nv5ONovNlFXmPJLjGRGlWLlf5MDCNyv9Ke9ABggFVLyrqCVezTtGA0IyX
Cwx1RP3PtUgyufFt3SgfRG62apgdNQsLAkC47D0X+Yyh/cl72LZKR7jc2pEGI78M
xfHn3Aih2HMnJF3fG3nnyiaUYlI4yoV9bp7B04JgKau4tZVzVDA0xfIYtVdtjIuh
mKBELqvrh/ckfDSv1K0F+grIiSc+xQM=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:56:30 2026 by rpki-client