Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7963f9a8-0128-3ad9-85f6-5312bba16692.roa
File:                     7963f9a8-0128-3ad9-85f6-5312bba16692.roa (raw, json)
Hash identifier:          GftKAnFLeMiwph8HIAHxLKRf663nT8inR3QCD7XlFcY=
Subject key identifier:   2C:E0:4F:43:4D:5C:F9:A9:FC:25:29:77:6B:C8:0A:12:BA:B0:66:F2
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584F119D0EE01A290A729DBC5672
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7963f9a8-0128-3ad9-85f6-5312bba16692.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     11260
IP address blocks:        24.222.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:0e:e0:1a:29:0a:72:9d:bc:56:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=0ff94b73-bf15-4e5c-bb34-76f723d4cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:ae:94:c3:23:23:da:29:55:6a:2d:c8:2d:
                    7e:f3:0f:4e:b5:fb:33:22:51:56:42:97:0c:9a:76:
                    e2:cd:de:49:59:44:50:9d:3c:77:c1:a2:5d:58:8e:
                    26:7b:15:0f:88:0e:9d:f7:ab:35:3e:8f:68:f6:ef:
                    08:55:6c:2d:6d:2b:8e:c6:c7:9a:1e:77:bb:38:7d:
                    00:93:03:c1:7f:2f:e9:83:5a:14:04:1b:3d:17:99:
                    a0:19:2d:2f:f1:99:ca:d6:15:14:11:0e:1a:20:c1:
                    0b:99:ff:2f:55:ab:11:58:df:b5:5a:6f:83:3c:f0:
                    e3:46:4e:91:d6:e5:60:3a:66:2c:82:0b:0c:e9:04:
                    cc:73:45:50:05:6a:d0:c4:6a:5d:45:88:c7:af:c9:
                    ef:86:09:cb:cb:7a:54:34:09:19:95:bf:18:5e:c0:
                    91:c8:39:f3:a2:bc:12:52:c1:ca:8a:48:22:8c:91:
                    d4:67:6b:09:af:c8:a8:64:61:b6:4e:08:3a:4c:7f:
                    1c:31:3a:bd:22:10:7a:7d:51:8b:42:68:a4:36:8e:
                    48:5a:84:31:f1:14:b2:45:d8:37:98:ed:3e:9d:83:
                    d7:79:4d:25:16:d3:79:16:3c:01:e9:ff:ff:26:03:
                    6c:25:7b:60:10:68:ba:4b:04:53:a9:f1:e1:a2:cb:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:4F:43:4D:5C:F9:A9:FC:25:29:77:6B:C8:0A:12:BA:B0:66:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7963f9a8-0128-3ad9-85f6-5312bba16692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.222.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:e6:97:31:bd:46:47:03:12:fa:de:31:97:dc:78:54:d8:ad:
         83:a9:e4:8c:41:a5:86:7a:48:8a:2e:6c:5e:c2:7e:f8:c4:11:
         1a:e2:f9:e1:90:ae:be:4d:77:35:3f:d7:1b:2e:9d:82:1f:b0:
         3d:ab:24:9a:f9:9a:5c:73:e5:9b:6c:ad:f1:2e:79:f2:be:d2:
         8a:15:12:12:8c:ce:8d:8b:c9:c8:1b:31:47:c2:68:87:49:81:
         9d:d9:0a:d1:40:5a:bf:98:6b:d1:fd:42:2e:63:e5:6d:ed:bc:
         36:f0:1a:ec:7b:89:e6:6f:63:77:6d:93:50:37:c6:f2:8c:e6:
         96:ee:30:ea:e0:15:7d:0a:35:50:5f:eb:35:49:94:75:3c:bd:
         f5:ea:f9:0f:93:24:6e:41:28:f1:6a:65:11:ac:e4:6e:4e:d9:
         55:1a:cf:7c:76:2e:e4:90:01:3b:32:93:2e:64:e8:cd:91:7a:
         4c:64:3a:bd:61:f4:2f:17:14:78:d7:f5:57:74:05:c5:dd:49:
         a2:21:e8:01:ef:74:c7:67:85:bd:e8:37:bc:41:ed:e9:40:c5:
         0d:bf:47:0d:af:92:d6:df:48:0b:cc:20:cb:49:19:c8:a7:0e:
         9d:78:ba:95:9f:28:1d:f2:65:06:76:09:b5:be:73:6d:ce:eb:
         e6:61:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:31:11 2026 by rpki-client