Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
File:                     32310430-1564-34ba-a911-45325d8fda20.roa (raw, json)
Hash identifier:          wt5dDLMCuOAYXYcqdxWGXeV/+MKoKAx+hA4bVfhLntM=
Subject key identifier:   1A:AE:5F:68:42:58:59:2D:2F:A7:55:0A:7D:B5:38:27:31:88:DB:B0
Certificate issuer:       /CN=6988a68c-ec5c-4d72-9ee1-27118af98380
Certificate serial:       010D0C9F4328584EC0A72DB2CA097682C96E4F00
Authority key identifier: 53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     29953
IP address blocks:        69.41.192.0/20 maxlen: 24
                          97.107.48.0/20 maxlen: 24
                          2605:1100::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:2d:b2:ca:09:76:82:c9:6e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988a68c-ec5c-4d72-9ee1-27118af98380
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=78d8e89a-ebf3-4723-bf31-212cba8e4d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:a1:d2:df:ab:09:ba:bd:d8:85:0f:2d:60:
                    f1:8b:f8:43:c8:15:eb:8d:cc:65:06:7f:86:e3:8b:
                    59:5b:39:d2:38:c7:09:ab:28:c9:f5:83:b6:2d:0c:
                    93:f3:a3:57:d1:ce:43:27:7e:b6:57:6b:5c:aa:95:
                    1d:f6:e7:42:78:19:61:4d:21:7a:0d:6f:ac:38:88:
                    3f:e8:b3:32:82:ef:cb:30:85:f3:c9:e5:25:2a:21:
                    30:67:af:79:c9:4c:cd:d5:fa:46:00:c8:72:2c:b9:
                    f7:42:d4:a1:9d:eb:24:4b:43:f3:bc:77:52:49:d4:
                    e4:c6:0b:01:76:6c:1a:a6:19:de:1b:93:fc:b0:16:
                    a0:df:5c:f2:23:07:d5:82:da:d6:22:bd:4b:84:9e:
                    3b:dd:c5:f6:a6:4b:02:0b:6b:db:18:1f:d9:0d:63:
                    b2:11:98:23:1d:c9:71:70:07:8a:34:6b:0a:ee:6a:
                    ae:ce:f1:8d:33:a8:ec:ac:08:45:86:63:dd:b4:58:
                    8f:b8:0e:95:d2:8a:e6:e4:40:9e:38:6b:33:5b:7a:
                    da:0f:9a:67:b3:06:dd:54:34:39:39:1c:ce:af:f1:
                    de:a6:fe:dd:d1:42:22:ca:72:ee:a9:9f:4e:9a:3b:
                    1f:dc:35:57:80:88:06:5b:3c:dd:6c:34:8f:39:fc:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:5F:68:42:58:59:2D:2F:A7:55:0A:7D:B5:38:27:31:88:DB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/32310430-1564-34ba-a911-45325d8fda20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380/6988a68c-ec5c-4d72-9ee1-27118af98380.crl

            X509v3 Authority Key Identifier:
                keyid:53:74:2B:1E:7F:79:D2:1A:D0:29:48:45:9A:93:5C:BA:54:EE:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6988a68c-ec5c-4d72-9ee1-27118af98380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.192.0/20
                  97.107.48.0/20
                IPv6:
                  2605:1100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:a5:aa:a7:dc:d5:cc:f7:4b:e0:95:96:5d:74:9a:45:02:
         c4:7c:5f:ed:f5:a5:4e:5d:b2:79:22:13:03:b9:99:cf:a1:95:
         53:55:12:1d:55:30:eb:4e:44:0b:dd:92:59:8b:e5:d0:13:9f:
         20:fb:14:52:51:98:52:cf:6d:c1:56:39:70:31:d4:9e:ec:d7:
         12:38:2f:66:9b:ca:2c:91:62:3c:86:32:83:cf:c3:7c:b0:80:
         c2:06:97:96:be:e0:9d:c6:58:d4:67:38:3f:63:ca:37:cb:05:
         de:cf:1a:b1:55:50:12:03:37:de:bd:eb:63:01:7b:22:10:3d:
         e6:30:8e:e4:88:8d:67:df:2d:4a:ae:91:b4:0b:84:0f:e4:d5:
         ab:fd:b6:70:d9:62:7a:9a:a9:d2:15:75:bc:bc:a4:1c:ea:aa:
         a6:4e:1b:2a:ac:3b:4b:dd:ad:e3:76:09:ab:bc:99:22:e5:81:
         69:94:ce:8f:40:51:e6:b2:02:1d:b1:19:1a:13:a2:c1:89:9d:
         a4:77:b7:a0:77:53:49:23:84:9a:07:90:0d:8b:26:26:4c:2b:
         62:a2:67:6f:98:4a:e6:e7:ea:fb:c9:b3:18:14:ad:ce:a1:f7:
         2b:b0:e0:c2:9a:5d:d1:16:9a:84:4e:7e:29:4c:3b:47:99:d1:
         ae:a2:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:36:07 2026 by rpki-client