Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa
File:                     37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa (raw, json)
Hash identifier:          tEgRSMyte0ekZXKdN4LsxUx8F+PK0fqj9DrydzK8BOg=
Subject key identifier:   5C:D8:2A:4E:81:E6:E5:50:C1:16:D9:9C:9D:20:63:25:32:BE:E7:7B
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584E31CF09C5A2381B922EA7CE00
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     30041
IP address blocks:        69.173.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:09:c5:a2:38:1b:92:2e:a7:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=9f3042df-63d9-4105-92f6-6eb0e60a4276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:35:63:54:17:fc:cc:d2:34:7a:14:0c:33:
                    94:a2:a9:f6:25:d6:b0:97:5f:c9:3d:76:68:d4:9b:
                    bd:c7:d6:02:e7:c7:12:3a:1e:57:67:31:90:95:d1:
                    61:65:14:62:d9:1c:17:4a:cb:7e:1f:9d:63:03:c7:
                    c8:83:52:fd:5b:67:44:07:e7:c2:b7:24:b0:1c:bc:
                    61:29:d7:13:8a:b7:df:93:b7:1f:25:b8:35:3a:ec:
                    87:a8:68:f7:cd:6c:b7:76:0e:5f:6c:5d:bd:d7:43:
                    63:f1:8c:fc:6e:b9:a2:3e:47:41:6a:58:c5:cc:f5:
                    47:17:57:39:12:9f:83:dd:81:15:ca:62:26:71:a8:
                    5b:b2:0f:74:42:14:8f:a0:4b:4b:52:87:a6:71:fc:
                    bb:65:6c:64:3a:22:d1:b1:71:88:15:d9:89:69:5e:
                    0f:df:fc:1d:94:c3:f5:ff:ca:bb:9a:bf:70:e9:66:
                    10:bc:36:de:c1:e3:c5:60:dc:45:17:3b:0a:b5:ad:
                    99:2e:cd:89:ef:0e:bc:8c:2d:3f:a5:31:02:44:6d:
                    3a:b0:37:e0:33:36:31:ae:01:9b:49:c8:14:9f:92:
                    95:2d:4a:f0:64:cb:a5:fa:5e:4e:47:61:a8:bd:ba:
                    20:2c:9e:ff:ac:85:52:9b:fb:20:1f:ea:af:87:a8:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D8:2A:4E:81:E6:E5:50:C1:16:D9:9C:9D:20:63:25:32:BE:E7:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/37b5bbcb-f7c1-3ada-866d-891990b5ad95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.173.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:a4:6e:ca:92:cd:b9:4f:26:ea:0a:0d:d4:fc:f6:9b:c1:
         b3:3f:5e:6e:fa:74:8a:22:1f:d3:93:d3:85:bf:0b:1a:d4:0a:
         fc:98:d0:37:37:e1:a1:fa:0a:7a:aa:60:a8:fd:05:24:d8:c5:
         31:f3:ab:25:fa:d1:0f:94:26:b9:0f:3c:16:e4:9b:74:56:66:
         94:ab:cd:14:ff:f5:86:23:be:6e:8d:81:27:71:e9:ec:23:0f:
         a0:b2:8a:93:3a:b7:1b:67:67:45:53:18:3d:8d:ed:eb:1c:dc:
         42:a1:ab:76:28:5c:d4:7c:92:1a:0f:85:ae:f5:4f:bd:eb:1f:
         bf:cb:33:0c:e6:f0:26:a3:68:2e:12:72:93:f0:a5:94:b9:b8:
         b6:ce:33:78:63:34:b7:fc:72:44:a1:f7:bf:2a:39:8a:e5:ae:
         02:fb:a3:28:57:c0:3e:02:22:f4:20:7d:67:2e:a6:92:eb:3d:
         27:0a:82:6b:c9:93:ac:c4:f5:15:d1:69:22:7c:9a:6a:47:7c:
         9a:8f:a3:76:31:3f:64:09:ec:5c:40:9e:f1:27:32:17:5d:57:
         30:2c:1c:c3:a8:75:17:b9:85:cd:4a:9a:e8:71:89:d7:ce:54:
         f7:01:b5:7b:eb:f5:57:28:b8:b3:f0:4a:a8:93:f2:f9:98:15:
         2f:11:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:37:22 2026 by rpki-client