Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ecc3587-d6ab-3368-8cfc-77cf3af71bca.roa
File:                     3ecc3587-d6ab-3368-8cfc-77cf3af71bca.roa (raw, json)
Hash identifier:          DPU8gBx5TlnlMU92cNew0hRZ72GjRGrnGEN0JE1vuUE=
Subject key identifier:   CA:73:15:A5:E9:39:FC:8F:27:CA:BA:EE:F1:9C:1A:57:46:49:92:D0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E4FC62AF0F5B2651471B71C40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ecc3587-d6ab-3368-8cfc-77cf3af71bca.roa
Signing time:             Sat 27 Jun 2026 14:36:39 +0000
ROA not before:           Sat 27 Jun 2026 14:36:39 +0000
ROA not after:            Fri 25 Sep 2026 14:36:39 +0000
asID:                     402276
IP address blocks:        69.33.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:c6:2a:f0:f5:b2:65:14:71:b7:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 27 14:36:39 2026 GMT
            Not After : Sep 25 14:36:39 2026 GMT
        Subject: CN=1434647e-47ce-4951-a3fa-143a953cfcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:e2:25:71:28:5c:76:5a:b4:f5:20:5a:fd:
                    d9:d4:af:c9:dc:84:9e:84:53:bb:69:f1:82:37:ed:
                    13:79:2b:55:01:41:b9:1d:ef:1c:bf:21:46:36:47:
                    6d:21:2c:5a:b6:50:91:be:40:97:62:d3:47:59:a6:
                    95:31:fb:7d:c5:f9:8c:4c:b0:a1:81:24:ff:d3:5e:
                    9b:8c:d5:07:e2:76:8e:37:13:3b:e5:92:36:17:0a:
                    d9:32:10:42:9a:82:5e:a6:22:2a:e1:20:6d:23:f1:
                    f2:ad:cf:ad:2a:ad:3d:6b:01:c0:bf:a1:6e:bf:01:
                    67:c5:2d:f7:e6:0c:2a:dd:0a:d7:51:34:ef:e7:49:
                    b4:79:0c:28:2f:62:de:45:69:74:22:c8:6f:8f:33:
                    85:b6:9c:0b:d5:fa:19:80:a7:38:c4:38:56:28:d0:
                    61:43:0c:6c:97:50:2b:1b:30:8d:4c:b2:f0:de:60:
                    4b:d6:ec:aa:71:08:54:ff:0e:5a:f4:cd:de:22:3c:
                    f2:73:13:ae:7e:88:2c:d5:d0:13:a2:46:71:77:ba:
                    83:0f:5c:11:01:4d:cc:eb:39:01:54:eb:c3:80:49:
                    61:c5:3f:d1:62:81:cb:71:2d:f0:be:25:95:29:80:
                    f2:e9:34:43:c2:0b:51:82:62:4b:69:a6:73:53:da:
                    a0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:15:A5:E9:39:FC:8F:27:CA:BA:EE:F1:9C:1A:57:46:49:92:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/3ecc3587-d6ab-3368-8cfc-77cf3af71bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:82:6c:a9:10:0c:6e:8a:d1:22:af:d9:d2:5a:c6:34:77:0a:
         f3:a3:db:e1:3a:0e:c5:69:55:dd:85:4c:2a:45:41:70:63:9b:
         5f:11:64:37:b7:94:62:80:51:06:cb:6c:77:3d:af:07:aa:aa:
         40:75:b9:4b:d5:8d:b5:da:8d:b3:7c:79:44:75:51:48:80:10:
         90:b7:4a:e7:50:a2:42:6c:7b:68:3d:44:18:3f:2d:21:d2:6b:
         55:e8:10:04:f6:87:97:55:bb:18:7f:9c:b7:6b:78:11:e4:70:
         71:9d:f5:a7:76:15:1a:8a:38:c5:db:58:bd:94:1f:44:7a:a6:
         0e:86:b6:6d:9b:a2:55:9f:f0:d2:ef:42:0a:86:cc:fa:60:4e:
         50:5d:ee:7c:9b:4c:e9:85:c3:be:c9:64:27:30:57:49:88:df:
         04:dd:1d:e3:a6:54:c3:54:68:3c:b4:62:b0:c1:e3:35:2f:f0:
         54:c5:33:72:cb:27:a0:06:8e:86:6b:84:fe:fd:0d:65:80:6f:
         8c:be:77:7c:a9:bb:db:67:f0:e9:33:d8:62:2c:fc:6b:1c:c5:
         89:c7:d4:46:a9:63:a0:55:78:c2:82:64:9b:88:1d:43:b0:ea:
         42:4a:d4:8a:0d:c8:7f:3a:33:88:3a:18:fe:eb:63:07:8c:84:
         ba:78:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:41 2026 by rpki-client