Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
File:                     a91f6701-0585-395e-ad18-03c9b663d0f6.roa (raw, json)
Hash identifier:          VMKfuHx/2wbzNh8bXlkTBCN4dL60PD1HH27ieO8rpT4=
Subject key identifier:   8E:5F:D8:AF:08:4A:F0:68:2E:C6:3A:4E:11:11:37:C0:2B:EC:B2:DD
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584CBF173169FA3E36F09ABF3E40
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        69.89.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:31:69:fa:3e:36:f0:9a:bf:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=fda000d3-9dfb-406c-99d0-5c8cff4fa61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:7a:a1:a1:85:cb:10:6c:23:a7:20:e3:a0:
                    e8:3f:ba:ac:3f:e0:f9:19:44:ce:3a:80:13:63:ae:
                    f7:ec:80:57:df:8f:d1:d9:de:05:9a:76:2b:74:65:
                    9f:07:0d:17:60:c1:c8:c8:ed:75:d6:24:85:d5:df:
                    da:d1:bd:8d:21:99:06:2a:d7:32:8e:8d:dc:23:f3:
                    9e:e3:04:34:1d:b6:ed:00:cf:67:6d:17:3e:7c:fc:
                    45:3c:a8:f9:fd:ba:78:2c:7e:31:79:86:c7:9b:43:
                    16:2c:f6:a8:63:d4:e1:31:7c:c8:a0:ca:00:61:f1:
                    7f:b4:7d:16:92:b2:6c:08:40:5a:73:de:a8:1d:9b:
                    b3:f8:aa:aa:e8:1e:f5:27:b6:11:0a:30:6a:32:10:
                    a7:ab:b1:f1:79:22:79:f6:f5:6a:72:e0:78:e5:d6:
                    05:0f:e2:73:b0:aa:d6:7f:e5:d9:56:45:30:22:10:
                    06:fa:d5:f6:f6:f9:ca:d2:17:17:a7:01:00:e4:f1:
                    c0:6e:14:06:49:f6:6a:1b:15:0d:98:e8:64:48:39:
                    90:c9:ba:eb:6e:64:ae:82:4f:26:f5:3b:c5:73:a9:
                    55:80:8b:68:e0:72:0f:0c:69:e0:ac:35:8f:1c:5f:
                    a1:4c:71:e0:a8:5a:33:66:6d:50:12:16:a9:9a:1a:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:D8:AF:08:4A:F0:68:2E:C6:3A:4E:11:11:37:C0:2B:EC:B2:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/a91f6701-0585-395e-ad18-03c9b663d0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:97:bd:7c:63:c7:56:4e:61:c2:df:48:64:92:f7:45:80:
         23:10:e7:61:4f:d1:38:e2:60:dc:f6:a8:a0:a6:41:35:30:7d:
         18:36:45:55:31:ef:68:e2:4b:ea:71:0e:2e:bc:23:21:e7:ca:
         b3:bd:d2:51:f6:3d:4d:46:25:60:06:23:9e:6f:1d:7f:16:fc:
         e9:96:58:f8:55:ed:a5:d9:a9:71:1e:3c:2a:db:e8:bf:73:ec:
         a7:92:ce:f9:2a:28:a0:49:ab:4a:fc:12:08:88:fa:39:7c:38:
         be:7f:b5:fd:89:51:ec:10:10:34:c3:9e:b0:dc:c6:c7:f1:2d:
         34:f0:7f:37:b2:df:17:49:77:15:e7:b9:e6:b1:b8:c7:4b:bd:
         2f:9b:71:18:c9:b9:24:92:08:e0:a4:d1:04:38:66:65:68:a1:
         98:f4:6b:f5:55:46:cc:43:2b:51:93:7a:bd:0e:eb:34:0e:26:
         91:b5:3e:b4:31:a5:3e:fc:28:55:35:18:d5:9f:24:22:5f:f4:
         8e:89:77:bd:78:41:02:8c:43:8f:ca:63:d3:cb:12:9f:fd:74:
         6d:cd:dd:07:f5:9d:2a:40:ac:33:81:65:4d:fb:b2:ab:cc:2e:
         e1:9b:0d:47:f1:a3:49:7c:a2:93:22:de:7c:bf:d9:f5:d5:7f:
         84:f0:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:33 2026 by rpki-client