Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa
File:                     f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa (raw, json)
Hash identifier:          qIcRjoJT47FGUMZOngNovcSajlfJHVD9o+uC2k3kbaI=
Subject key identifier:   93:1A:C2:27:0A:DD:6A:3F:3E:45:B2:09:5A:1D:69:BF:C5:A1:A4:44
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584EF181FE87C112360FB1C53B80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     19720
IP address blocks:        65.51.28.0/22 maxlen: 24
                          69.74.21.0/24 maxlen: 24
                          69.74.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:81:fe:87:c1:12:36:0f:b1:c5:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=7b46e5e0-04a0-41b6-a231-530ad2a404a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:29:76:1a:7d:16:78:7b:cc:50:f1:3c:d6:
                    6d:1a:79:92:f7:35:40:ac:60:59:a0:86:0d:bf:bb:
                    97:b3:ea:ba:ff:09:dc:d8:13:4e:98:0e:db:3b:f9:
                    ab:b0:8b:9e:54:cb:f7:da:b4:6d:5c:5b:97:a8:6f:
                    c2:98:70:ca:93:32:83:d5:ab:48:2e:d9:98:8a:7c:
                    cc:0d:54:cb:bf:fa:19:fd:3b:a7:74:d8:f1:e1:76:
                    bb:c7:13:e3:75:37:35:92:29:66:8c:f6:c7:09:6b:
                    0a:15:ce:8c:db:7d:4d:ac:fd:27:40:bd:ce:f1:86:
                    b5:e0:6e:df:49:76:0b:75:f5:74:ed:cb:66:cc:b9:
                    8f:61:49:7a:d8:cd:f6:78:eb:19:bd:21:0c:3b:b7:
                    8d:02:1e:96:7d:92:94:b8:fa:bd:cb:64:0d:c1:a2:
                    28:dd:e6:65:4f:6c:35:ba:7e:f3:aa:92:65:c4:39:
                    1c:a2:91:1c:cb:06:4e:66:88:e1:f9:c8:cd:7e:01:
                    89:3c:fd:6a:db:32:1f:6e:3a:4b:16:00:e0:4e:eb:
                    40:36:db:39:35:c7:47:d2:7a:36:49:ed:46:3b:54:
                    a9:c7:cc:f1:9a:8e:69:58:3e:5f:49:04:f1:0f:da:
                    50:75:02:e8:2b:67:37:5e:ad:e3:97:a4:f8:fa:5b:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1A:C2:27:0A:DD:6A:3F:3E:45:B2:09:5A:1D:69:BF:C5:A1:A4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f9d54ac0-3c8c-3266-be30-7672be8ff5f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.28.0/22
                  69.74.21.0/24
                  69.74.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:30:1f:c7:60:b9:24:09:9e:6b:32:f1:7b:a1:50:be:e9:3f:
         2a:90:03:fd:bf:e1:6c:ed:d3:a2:d4:54:d9:dd:65:f6:db:3e:
         fa:00:40:40:47:7c:9b:62:3b:d7:63:f3:bb:93:f0:58:02:1c:
         c0:3c:01:d9:79:50:0f:29:4e:99:5a:73:cc:e5:4a:9a:3c:2a:
         43:d1:f8:7f:f0:68:24:2c:1b:2d:21:8d:34:6a:9f:da:e6:e9:
         06:e2:42:5e:92:38:5d:c5:82:37:2e:f2:76:a8:02:2c:88:06:
         6d:f2:5f:48:49:bc:fc:09:ad:d3:c0:86:95:b4:5f:db:78:c7:
         fe:78:71:97:cb:c0:a8:8d:3d:9c:d0:3e:56:82:3d:73:8d:36:
         72:17:a7:34:b1:e3:80:25:0a:19:36:d6:51:50:52:c2:cd:24:
         29:83:db:01:4f:f9:43:fb:c0:b3:15:ef:58:95:b6:b1:20:4e:
         36:a0:6e:a3:70:be:7f:b5:b5:10:7e:84:0d:fd:bc:34:ab:22:
         6c:bc:6a:c2:28:35:3a:df:3f:ae:5d:61:79:97:07:fe:ba:c7:
         f6:5c:0b:1f:17:4e:17:7a:24:01:70:53:8a:fe:5b:9e:17:d4:
         be:cb:ca:6d:f7:dc:5e:c7:c0:6b:88:3a:e2:3b:f3:43:24:fa:
         40:00:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:48:10 2026 by rpki-client