Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/2446a41a-ace6-3205-87b3-6c3389f78052.roa
File:                     2446a41a-ace6-3205-87b3-6c3389f78052.roa (raw, json)
Hash identifier:          xWU1VsCDjmpEnHgII6H875iIWuTbGgVacxRAgXJbLRw=
Subject key identifier:   89:6C:7C:96:68:76:FF:BE:ED:A0:0C:08:0A:7D:73:7D:7A:6F:BA:83
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F4328584ED431F02C4BD9D89E7BCFE940
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/2446a41a-ace6-3205-87b3-6c3389f78052.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     35874
IP address blocks:        69.58.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f0:2c:4b:d9:d8:9e:7b:cf:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=247f89bf-985b-4ed4-914f-c07c2f0cfa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:79:a2:03:ba:e9:22:e8:29:25:90:86:fd:
                    de:bc:5e:53:40:55:ca:71:77:4c:0a:b1:7b:3d:12:
                    e1:e3:8a:f0:8d:7b:11:d5:93:39:8a:02:49:1a:45:
                    75:84:69:56:e0:f8:8c:3e:a3:66:08:0d:a9:45:1c:
                    ca:27:66:23:65:c6:b2:a5:30:d6:46:8d:b8:ac:0d:
                    dc:b5:68:6c:16:ed:a1:77:45:84:48:db:50:19:87:
                    16:a4:bf:9f:86:39:7c:8a:68:7a:31:d4:50:39:17:
                    47:dd:d3:95:df:a3:57:e2:52:66:0a:6f:8f:58:4a:
                    c3:ad:42:15:2a:55:59:9e:12:fc:f0:81:8d:e5:f7:
                    da:f5:d7:54:7b:21:8b:11:db:5f:08:d1:c8:87:2f:
                    c5:8e:63:b3:45:b4:05:25:30:f5:1f:a4:3a:bc:f2:
                    21:4b:e8:23:42:d5:fa:5b:b7:4d:06:9e:b5:d9:70:
                    3a:09:12:31:86:ad:f2:17:d5:67:09:71:6c:32:16:
                    20:de:ca:3f:d6:4c:dd:4e:80:02:20:5a:f0:8c:6f:
                    6a:0d:b2:2a:6d:80:11:48:5e:3d:15:39:bf:cb:95:
                    9d:c6:dc:9a:13:a2:b4:27:b6:1f:fd:14:e0:3a:e2:
                    6d:5b:75:61:9f:ed:05:37:77:c8:65:33:db:47:5b:
                    d7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6C:7C:96:68:76:FF:BE:ED:A0:0C:08:0A:7D:73:7D:7A:6F:BA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/2446a41a-ace6-3205-87b3-6c3389f78052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:65:dd:92:55:7d:6d:53:6a:ea:3d:55:7a:c5:fe:a3:d1:e8:
         25:2f:83:7c:d1:4b:52:de:bf:a0:4f:41:73:a0:fc:02:a6:d3:
         9b:3e:62:da:8e:11:5b:ed:00:97:f8:0b:06:7f:ce:60:e7:eb:
         7a:0b:7d:6a:10:17:9a:d0:05:02:c5:d7:f7:b8:c5:1d:37:5e:
         98:98:95:73:bf:82:f3:06:db:4d:fe:b5:c1:58:39:e6:a7:14:
         cd:0b:7d:57:02:22:dc:5e:ba:12:56:6f:cd:e9:a0:30:bd:82:
         6d:54:93:76:5e:1a:2e:25:9e:a4:f9:c0:40:7c:14:9f:55:9a:
         04:6d:f2:bd:84:2f:a9:9d:9f:94:a7:0d:62:8b:80:e2:a1:f6:
         f2:fc:d4:fd:68:1f:13:88:6f:94:3f:74:49:32:1f:a5:c0:f4:
         88:98:fa:45:49:73:07:82:96:ec:ad:f9:c3:1b:05:44:63:7c:
         e7:f3:1e:3a:d2:6c:48:dd:23:58:37:3e:59:f4:3a:7a:e0:46:
         10:e9:41:cc:25:63:3b:14:7f:06:50:f7:4c:c9:23:4e:91:86:
         a8:a7:e5:b2:5c:a4:29:d4:6d:51:08:f7:74:25:52:bc:30:0d:
         d7:b4:df:43:a8:23:f4:ec:c9:0e:75:01:58:0d:d2:7d:69:28:
         51:cb:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:28:09 2026 by rpki-client