Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/86fa017f-21a6-392f-8747-fcd0b380064d.roa
File:                     86fa017f-21a6-392f-8747-fcd0b380064d.roa (raw, json)
Hash identifier:          +WhTS8YiHr7deYjYSOOvH5wM4d2QTmUSSNZREdheh18=
Subject key identifier:   DF:BC:CF:AB:92:5A:A4:21:8F:CE:2C:55:93:37:69:0F:98:9E:64:84
Certificate issuer:       /CN=51efee9c-4595-4144-8b00-687d5d4d64a7
Certificate serial:       010D0C9F4328584EC20C5EEC0E46CCAC38532540
Authority key identifier: 14:40:E8:BF:37:0F:42:6B:CF:0F:2A:93:A4:F8:4C:60:E4:34:71:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/86fa017f-21a6-392f-8747-fcd0b380064d.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        69.12.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/51efee9c-4595-4144-8b00-687d5d4d64a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/51efee9c-4595-4144-8b00-687d5d4d64a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5e:ec:0e:46:cc:ac:38:53:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51efee9c-4595-4144-8b00-687d5d4d64a7
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=a385ab1f-eb19-4a43-8a76-bfa918921404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:00:41:e4:f1:f8:a1:e1:cc:97:63:3a:66:
                    60:2c:ea:21:9f:bc:b0:b7:60:8d:05:18:a5:f5:28:
                    64:11:77:de:6e:98:49:d8:bb:06:ce:92:31:5e:22:
                    f0:71:ec:4c:27:43:0c:c2:8b:5f:3e:82:7e:2b:7f:
                    db:2b:d7:1f:be:bf:11:b4:97:d7:ad:8f:9b:d0:4d:
                    62:de:c8:d6:02:67:45:57:a9:52:72:25:bd:3f:76:
                    aa:9c:54:ad:7d:3f:42:61:89:14:25:21:91:2d:e8:
                    44:d0:12:61:76:9d:03:a1:79:aa:84:9f:67:88:bb:
                    3c:10:72:7e:74:ad:c9:7f:43:14:d7:39:8f:5d:9f:
                    b7:40:db:99:0a:01:9c:05:6d:e1:02:7f:7d:c9:6e:
                    88:3a:e6:ed:9d:ca:12:e5:96:31:d3:76:3f:01:32:
                    84:f7:02:33:75:de:f9:b1:65:d2:d2:96:b4:8c:72:
                    1a:0c:5a:41:36:83:9f:00:cc:76:df:72:6d:42:42:
                    77:f9:50:7b:e5:66:e3:6f:90:b8:5c:4b:f4:00:82:
                    19:7c:31:48:1f:21:1b:76:c5:20:99:af:b6:e8:a8:
                    d2:e4:07:e9:75:d6:d6:f2:20:a3:89:24:76:95:d3:
                    95:f1:d7:e9:7f:7e:54:4a:94:17:c9:e9:1c:9a:d7:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BC:CF:AB:92:5A:A4:21:8F:CE:2C:55:93:37:69:0F:98:9E:64:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/86fa017f-21a6-392f-8747-fcd0b380064d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7/51efee9c-4595-4144-8b00-687d5d4d64a7.crl

            X509v3 Authority Key Identifier:
                keyid:14:40:E8:BF:37:0F:42:6B:CF:0F:2A:93:A4:F8:4C:60:E4:34:71:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/51efee9c-4595-4144-8b00-687d5d4d64a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:18:15:68:49:0b:22:3a:57:a7:d5:be:b6:f5:3d:54:67:63:
         4a:9c:30:23:2d:3e:53:5b:75:4e:1b:f2:28:32:61:04:88:e7:
         33:9c:50:07:64:07:08:13:7e:02:7e:d3:3f:b0:5b:59:7f:5e:
         e9:a3:9a:d7:40:17:47:9f:78:44:83:47:0a:48:37:42:ae:5e:
         9c:ae:37:ff:ba:e9:ab:0d:94:f7:be:c9:cb:56:81:77:2a:ab:
         a0:d4:45:29:b1:42:8c:f6:b2:0d:dd:27:7e:af:1b:f3:4c:56:
         2e:ef:69:29:1a:82:dc:15:17:41:e9:98:90:15:90:6a:bc:fd:
         b3:ea:64:8b:65:de:43:ed:ff:3b:d8:66:7e:e2:07:5f:b4:dd:
         ea:cf:4d:6d:98:31:4d:9f:e8:46:8a:50:4c:d1:e7:e2:ef:7e:
         2c:e5:2d:f8:ae:b1:b1:bb:48:0d:75:84:5d:19:fb:7b:a6:1e:
         7f:5f:da:cb:db:8c:95:65:36:de:47:e0:82:17:58:fb:f2:6c:
         28:25:ba:d9:f1:46:1b:3a:e4:2e:c7:80:2e:79:68:4c:0a:d2:
         56:19:be:3c:c6:30:0c:a1:c6:3f:58:a8:21:2f:ae:db:c3:69:
         3e:a5:02:b4:c9:8f:e4:66:e8:6e:d9:b3:8a:d8:28:e6:0c:4c:
         47:db:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:20 2026 by rpki-client