Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/997e6a6d-7375-3d9e-8ea1-29da105712c2.roa
File:                     997e6a6d-7375-3d9e-8ea1-29da105712c2.roa (raw, json)
Hash identifier:          GxDILrOVs4X/BI/qADOC0hp8ZkEZLD4P1oxl+p9ESqc=
Subject key identifier:   7E:A8:6D:C7:DE:A0:CF:ED:B3:1A:6A:2F:38:32:2F:DB:F7:36:79:A3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584CAFDDB3DA979C24ED35244EE0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/997e6a6d-7375-3d9e-8ea1-29da105712c2.roa
Signing time:             Thu 29 Jan 2026 15:07:48 +0000
ROA not before:           Thu 29 Jan 2026 15:07:48 +0000
ROA not after:            Wed 29 Apr 2026 14:07:48 +0000
asID:                     213990
IP address blocks:        69.33.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:dd:b3:da:97:9c:24:ed:35:24:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jan 29 15:07:48 2026 GMT
            Not After : Apr 29 14:07:48 2026 GMT
        Subject: CN=a0be509f-4a7e-42f0-b9ba-fc523fe6349f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:12:6a:d5:db:3f:f9:4b:07:4d:1d:5f:8c:
                    4b:86:aa:d5:23:1c:ec:d8:5e:82:6c:5b:51:82:a2:
                    bb:ef:48:00:1f:a3:ae:e9:4c:f4:11:e6:48:e3:92:
                    d6:40:20:36:6c:e5:1a:0d:36:db:6e:ce:3c:92:99:
                    9c:fe:1f:1c:15:c2:bf:83:1d:ec:d3:13:36:6d:6d:
                    57:ff:5e:99:bf:c0:8e:bc:62:d7:c5:73:94:bd:a8:
                    41:ad:6d:d8:e5:0c:40:5a:c2:19:34:26:7f:5c:ab:
                    b9:fa:21:da:a7:1e:82:a7:a6:a7:98:57:22:fe:da:
                    35:01:74:99:ab:fb:04:cb:ab:38:f2:e3:74:cd:9c:
                    b7:05:9e:29:76:a8:f7:97:41:95:f9:d5:5b:80:e7:
                    dd:2f:ad:26:47:e9:f4:b7:bf:04:1a:2d:83:96:4d:
                    ee:a5:24:44:6e:57:5b:3c:67:44:4c:d6:23:e2:3f:
                    0c:c8:d7:35:84:39:be:78:67:99:92:35:6c:50:9a:
                    8f:a9:2d:4a:1d:93:e7:30:55:9f:cd:3a:8f:46:43:
                    4a:95:69:81:ea:8e:a4:f0:22:e2:92:b8:7b:7e:9c:
                    cb:cb:af:e9:e2:3d:af:58:d0:b5:c0:8f:3c:2e:31:
                    f4:c1:1a:df:e9:46:41:72:1a:2a:f1:61:03:5d:14:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:6D:C7:DE:A0:CF:ED:B3:1A:6A:2F:38:32:2F:DB:F7:36:79:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/997e6a6d-7375-3d9e-8ea1-29da105712c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.33.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:73:d5:1e:a2:39:e9:c1:50:45:29:d3:3a:d0:cf:7b:8f:
         e7:78:e8:b1:3b:cc:7c:74:1e:8c:6a:95:ca:a0:2d:53:1c:2b:
         56:b3:57:b5:07:0b:67:cc:62:2b:1a:e1:21:c4:88:3e:db:d5:
         53:69:fb:b3:af:0f:07:8a:e1:cf:53:e0:bf:4c:d0:bc:86:67:
         af:b9:30:42:fe:c9:03:7d:d6:f2:f2:4a:19:1d:ea:42:a6:4c:
         7f:12:ad:a6:0c:0a:23:cc:5c:0c:4e:e0:d8:57:e2:1f:4a:7f:
         58:5f:76:e8:6f:b9:3b:1a:4a:2d:c5:fb:4f:46:a8:33:b6:a4:
         51:0d:00:b3:14:39:6e:c3:2c:3c:1b:2b:4d:da:ff:49:0c:7f:
         b7:91:1e:13:95:45:da:bb:57:17:34:3e:f8:88:dc:9d:8a:18:
         ba:da:cb:ed:4d:a1:f3:29:b9:da:d0:9c:9f:5a:4d:da:2a:0a:
         55:e0:f6:ba:51:c2:3c:6e:1c:a4:4b:03:20:55:2b:80:72:5e:
         d6:e1:ff:53:b7:eb:00:b7:22:dd:96:da:39:13:17:50:69:e0:
         27:8c:02:e9:cc:19:92:2e:57:ef:04:99:47:cb:d4:57:87:b2:
         75:c8:3b:d1:2c:24:29:71:37:fe:88:88:03:97:8c:63:12:92:
         b4:a8:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 22:27:35 2026 by rpki-client