Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
File:                     55cea90a-508f-36a4-8b91-9053d99a58f4.roa (raw, json)
Hash identifier:          rTh/eNr06IlfHM1yP7IPRfpGONqPy5UMlHTvo9AT+yU=
Subject key identifier:   D1:6C:AE:5F:59:E7:3F:0E:24:20:BB:44:3D:8B:C7:80:97:6A:C9:C5
Certificate issuer:       /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial:       010D0C9F4328584EF2E7678904382E78D699B000
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     6954
IP address blocks:        69.4.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:67:89:04:38:2e:78:d6:99:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=d444362f-ee35-4c8a-ad69-0a2c5335e2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:09:42:f8:ed:a0:c6:7c:b1:f9:9d:6f:0d:
                    8c:0f:60:7f:dd:ae:a9:ad:4a:50:12:30:c8:2a:36:
                    87:42:8e:60:a7:9f:b0:40:c7:66:58:01:99:73:31:
                    39:83:e0:e3:f5:17:b9:26:42:68:53:9b:50:86:05:
                    e3:40:ab:4b:aa:07:5e:4a:dd:05:a5:34:23:c7:87:
                    66:0a:f3:cf:b9:85:d9:98:38:34:29:90:0d:58:55:
                    1f:cf:0d:a3:45:c1:ee:78:df:98:5f:b2:75:9e:ea:
                    c5:7d:6f:85:6a:ca:c4:69:89:ec:b3:d8:08:79:3a:
                    62:04:6e:c2:f7:82:df:cf:db:c1:6b:82:3f:9f:32:
                    71:6e:e0:a0:97:85:78:38:27:b3:cd:20:65:6c:ac:
                    fb:3e:cc:a2:78:14:05:16:1c:71:00:be:49:4c:10:
                    60:3f:1b:38:cd:69:a7:07:fc:40:a5:6f:02:24:be:
                    df:0a:de:68:af:90:a2:cf:3e:62:59:b6:a7:1b:4a:
                    be:22:d7:cd:6c:a1:e0:db:7f:de:49:0b:bf:b7:67:
                    cc:34:3e:29:c4:5b:8a:4b:24:46:5b:65:d6:47:fb:
                    15:d8:63:6c:86:17:bd:81:a5:8e:80:ae:20:5b:72:
                    0a:43:c7:a2:73:ac:67:2d:55:67:d3:b6:9b:41:a7:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6C:AE:5F:59:E7:3F:0E:24:20:BB:44:3D:8B:C7:80:97:6A:C9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/55cea90a-508f-36a4-8b91-9053d99a58f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl

            X509v3 Authority Key Identifier:
                keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:79:7b:36:a3:f8:69:16:93:5f:dc:b6:24:eb:bd:6e:43:b8:
         b3:74:5d:6c:f1:61:ef:b6:fe:4a:57:a3:62:4d:76:a5:ad:49:
         f4:ba:54:d2:88:e4:5a:ec:3d:bf:1d:d1:01:6b:00:34:e9:d4:
         1e:7c:3c:e8:1b:32:24:f0:a2:2d:27:9a:25:e3:63:1a:5b:b6:
         32:d4:62:73:ee:35:26:d0:29:ed:b7:3f:4f:4c:33:bd:1c:9b:
         8f:97:93:35:2a:a2:f9:2a:be:f7:05:40:a4:c4:6b:ae:e4:18:
         f4:42:51:ab:56:3d:fb:61:12:cf:e5:c8:6b:66:fe:97:7f:f3:
         95:ce:2c:6e:0e:89:60:47:7c:c2:d0:32:1d:8c:f1:16:44:74:
         15:0f:52:f2:33:3f:9a:f1:6a:39:17:4d:25:e4:5b:a5:37:6e:
         81:7f:aa:0f:6f:bb:d7:31:58:a9:0f:ed:ab:51:b8:3b:ee:39:
         83:bf:8a:e5:9a:b8:e0:6d:01:1f:b4:cc:af:a2:6f:ed:1a:63:
         da:87:17:1a:61:78:47:00:43:34:34:55:75:03:52:0f:52:fd:
         bb:e4:af:b0:5d:11:b0:c3:b1:bd:82:0f:3a:1b:c7:14:bf:5e:
         a2:8d:b6:47:be:3e:d5:06:4c:3b:6e:5c:bf:a6:da:e7:a5:3b:
         99:c8:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:13:53 2026 by rpki-client