Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
File:                     684a9134-a16d-336c-8191-a5944e08412f.roa (raw, json)
Hash identifier:          d/fWJ1OgUluZIZU2LmgF5g4GLB1j2FrZisBscTbF+5I=
Subject key identifier:   F1:13:3B:A9:A8:5A:DC:7D:C9:0C:D2:15:21:45:C0:34:2A:00:E2:B9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4112C3895CA0DB0DAF6BB400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     21859
IP address blocks:        69.17.5.0/24 maxlen: 24
                          69.17.11.0/24 maxlen: 24
                          69.17.12.0/24 maxlen: 24
                          69.17.13.0/24 maxlen: 24
                          69.17.14.0/24 maxlen: 24
                          69.17.15.0/24 maxlen: 24
                          69.17.69.0/24 maxlen: 24
                          69.17.70.0/24 maxlen: 24
                          69.17.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:c3:89:5c:a0:db:0d:af:6b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=e1997ac6-7004-41ef-bdaf-5f341b1ccb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:87:cf:6f:34:0e:a5:cf:9b:e7:4f:64:75:
                    e6:44:c0:95:2f:f5:ee:48:94:e2:9e:23:b0:7d:c0:
                    35:12:f6:65:e8:6f:c6:75:22:32:77:a9:b5:d3:c3:
                    2f:9b:06:7a:cc:bd:7a:f8:df:d3:28:95:53:d5:4c:
                    a9:f0:f5:6d:1f:22:73:c5:46:d9:8c:2f:9c:cf:bb:
                    c4:90:6a:b6:58:db:59:7a:80:18:53:95:e3:79:f8:
                    36:b2:47:7d:d9:7e:1a:a3:47:f0:0a:18:64:74:b5:
                    7c:17:61:e9:4c:2c:f2:76:e2:f2:0f:ba:f7:89:23:
                    68:82:38:41:56:61:37:b5:77:cf:ea:55:f6:a4:1c:
                    4f:27:17:9a:4a:32:7e:22:45:74:f8:4b:54:98:95:
                    a6:b8:f0:bd:21:e1:d3:f0:28:4e:a5:85:41:bd:3a:
                    4f:ea:26:97:32:98:1b:73:34:cd:ad:49:ed:6e:ec:
                    70:00:a3:a4:10:12:49:98:8b:38:ec:a4:85:c6:21:
                    09:15:a2:8a:43:c7:f5:f1:34:24:2b:d9:46:93:76:
                    be:cf:7f:18:b8:d2:b6:18:b0:77:e4:bd:bf:ac:33:
                    54:1f:d1:4b:6a:55:ea:84:12:19:94:9a:d1:c5:87:
                    19:24:47:29:2a:a7:be:ac:14:3e:54:64:98:81:66:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:13:3B:A9:A8:5A:DC:7D:C9:0C:D2:15:21:45:C0:34:2A:00:E2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/684a9134-a16d-336c-8191-a5944e08412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.5.0/24
                  69.17.11.0-69.17.15.255
                  69.17.69.0-69.17.71.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:ae:c8:b1:24:24:50:71:34:f8:5e:af:35:aa:76:d5:fb:
         e9:51:ac:43:74:a8:6e:1c:3b:26:92:00:44:04:fe:c3:7f:1b:
         2f:3e:df:55:20:05:66:0f:cd:ca:9a:ff:c6:19:54:06:44:2d:
         dc:47:8a:1c:0e:f9:e8:38:7b:d4:5b:c4:49:75:04:49:49:ab:
         5c:2d:af:57:d3:bf:51:10:6b:47:6b:c8:cd:59:51:b1:f0:25:
         5e:6f:ec:84:b6:2d:ec:2d:f4:5a:24:91:d5:ea:47:79:d0:45:
         5c:15:99:e7:11:53:a0:82:c6:f0:ff:13:b3:a8:5c:13:56:65:
         39:bb:57:7f:d1:12:91:44:69:7f:6d:ad:3f:77:40:20:b6:1c:
         e2:4e:84:fc:b3:c1:f4:ee:c6:7e:9d:8a:a3:7f:51:92:aa:af:
         95:07:3c:04:e1:96:b8:e2:c2:1c:05:7e:d3:02:dd:6d:98:dd:
         05:dc:57:c3:6f:59:36:27:bd:b9:d6:83:0a:c0:1e:19:dd:08:
         8d:96:bd:ff:12:73:11:26:73:ec:e4:5b:b3:1d:3e:a0:d0:92:
         71:56:a7:27:c8:1f:19:14:9c:b2:60:31:c2:ce:3e:45:61:c1:
         c3:f9:88:04:98:0b:6e:81:f0:78:9d:4a:1a:da:cf:21:ae:0c:
         2c:40:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:44:48 2026 by rpki-client