Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43f0a9f4-2080-3e8f-a5ae-68e0b4e5de00.roa
File:                     43f0a9f4-2080-3e8f-a5ae-68e0b4e5de00.roa (raw, json)
Hash identifier:          GuhlV69SlDrjrxM4UhIq4VphDS/vyGXY3HPGa13JYJY=
Subject key identifier:   88:0A:A3:B2:60:49:44:5F:DD:63:E4:A0:BB:F9:98:72:AD:97:FD:0F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E314F18DAB476BF987E078A20
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43f0a9f4-2080-3e8f-a5ae-68e0b4e5de00.roa
Signing time:             Tue 16 Jun 2026 16:42:30 +0000
ROA not before:           Tue 16 Jun 2026 16:42:30 +0000
ROA not after:            Mon 14 Sep 2026 16:42:30 +0000
asID:                     402628
IP address blocks:        69.33.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:4f:18:da:b4:76:bf:98:7e:07:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 16 16:42:30 2026 GMT
            Not After : Sep 14 16:42:30 2026 GMT
        Subject: CN=e643213d-036f-452c-98f6-066c9aed06c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f6:48:ce:34:83:83:e0:6e:c0:c2:17:8f:4b:
                    38:44:f1:36:87:41:2b:82:3d:99:1f:9e:b3:e8:53:
                    92:75:bc:7b:33:8d:a1:56:9c:9f:08:f0:9c:70:9c:
                    d7:d1:2e:78:08:90:db:e8:93:ad:a3:ef:f4:3d:bf:
                    e4:6b:27:d0:25:6c:06:ce:d4:aa:d2:d2:2b:fa:0a:
                    8f:fa:60:12:16:07:c6:c1:11:ca:65:61:d0:e3:55:
                    e1:03:04:f5:f4:2e:2c:3e:41:a8:c2:5f:1e:9e:c5:
                    69:e4:77:7a:e0:f5:30:a1:06:38:60:f1:09:64:6c:
                    8e:fa:63:af:b6:00:82:db:07:1e:b5:06:64:2d:66:
                    31:26:c6:47:a9:3a:f0:18:6b:c3:6c:21:41:f6:ec:
                    b2:54:48:e0:c1:ba:0d:4d:80:14:97:e6:24:91:cf:
                    ed:0b:37:5e:c1:e5:c5:32:5e:a9:68:2a:2f:d1:48:
                    bc:03:9d:8c:88:02:8f:50:60:ff:b4:fa:1b:c0:1e:
                    31:15:da:e8:28:73:96:e0:32:09:d5:6b:1e:be:e3:
                    99:de:10:71:0a:c1:03:2c:7e:9f:77:bc:a3:25:70:
                    5e:23:9c:4b:6e:67:64:94:e2:d2:f2:51:99:2c:ac:
                    50:dc:8b:a3:6c:3a:f0:70:3a:01:c9:3d:23:ba:41:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0A:A3:B2:60:49:44:5F:DD:63:E4:A0:BB:F9:98:72:AD:97:FD:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/43f0a9f4-2080-3e8f-a5ae-68e0b4e5de00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:0d:00:c0:7e:5e:b7:a7:8f:ca:f6:bf:2e:db:e2:1d:74:
         f7:ba:79:81:39:a3:56:aa:39:ce:ea:ca:53:af:58:18:21:88:
         6f:c9:bd:17:a2:0b:1b:48:d2:68:0f:2b:e8:49:d2:72:44:76:
         a2:ca:99:2e:aa:a2:87:ba:38:aa:01:26:53:30:c8:16:28:b1:
         a3:80:6b:8a:b1:04:ba:6d:25:8c:d9:de:78:a2:ea:77:e6:2c:
         ca:30:86:38:b3:e7:0c:c8:98:b8:08:64:ba:77:f8:23:7c:ce:
         ac:76:a7:ef:f9:9e:b9:13:ef:c5:5a:fa:79:89:74:91:5b:47:
         86:2b:fe:d5:53:b5:60:34:c2:34:a6:ad:8e:9f:8d:6e:db:ef:
         3c:f6:72:13:2a:dc:29:d9:0d:fe:82:b5:76:9e:64:fa:1d:d6:
         49:73:49:8e:68:ec:31:61:8f:06:09:28:8c:1b:82:6f:48:0f:
         15:a7:f5:9c:1b:c0:97:10:d4:b8:96:54:b7:c5:58:74:0c:64:
         d1:00:b3:23:91:82:9d:b9:55:f2:bc:be:be:01:bf:a4:9c:ae:
         ab:e6:95:ef:54:75:d1:b7:d1:c2:97:13:3c:d2:ec:77:22:90:
         a9:55:5c:aa:2c:4b:42:11:63:09:1b:cf:1c:bb:f5:f2:6d:f5:
         3b:c3:cc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 12:47:17 2026 by rpki-client