Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa
File:                     c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa (raw, json)
Hash identifier:          bLLPUmz1bInkodo1X+OAQkehXsFeRpC3dVK0dYQySbw=
Subject key identifier:   B9:F8:69:E3:B5:54:69:24:92:20:C4:A3:BE:65:32:99:4F:48:6A:8D
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F15CCFD54DEE1976B0D63F250
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        208.58.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:fd:54:de:e1:97:6b:0d:63:f2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=55a28d07-c0bd-4154-81ab-4e9bfae58710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:d3:0c:68:ab:ad:d4:a0:a0:d0:c9:aa:c7:
                    48:cd:f8:6c:5d:80:5a:a5:95:22:13:5d:9b:9f:6b:
                    8e:0e:d1:a4:3e:e5:12:96:42:a9:79:1c:8b:6c:ef:
                    df:41:fd:2d:53:c1:8e:e6:ed:af:d8:24:21:5d:36:
                    73:e0:0c:ea:b7:aa:83:74:5b:65:13:aa:96:c1:2f:
                    bd:22:5b:3a:b2:c8:b9:b1:7b:a6:77:b1:98:af:39:
                    26:f4:b5:4f:c4:51:d3:e9:d2:79:d6:ba:7e:b6:82:
                    d4:f5:c2:38:32:13:4e:aa:e6:55:11:75:ac:b4:31:
                    c4:c7:4e:a0:b7:f9:f6:25:df:76:f1:d5:bb:32:32:
                    27:e8:c4:23:14:2c:43:04:24:ae:1d:d6:03:62:82:
                    0f:5e:55:0a:b7:e3:04:61:0f:66:46:d9:17:b1:fc:
                    45:41:55:f1:6d:d5:ae:cd:fc:1d:71:5e:30:8a:9d:
                    0d:f8:07:99:b0:79:37:e6:95:b1:34:79:5f:28:42:
                    8d:a9:31:99:93:ef:48:e0:e0:f1:59:8d:83:31:7d:
                    de:56:5c:38:71:42:94:30:b0:c7:aa:92:19:5d:bf:
                    13:f4:7f:31:3c:1e:fd:74:af:e8:f0:4a:d7:4a:d1:
                    87:1d:f8:73:6d:02:5e:e2:de:8d:0f:f2:65:b8:7f:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:69:E3:B5:54:69:24:92:20:C4:A3:BE:65:32:99:4F:48:6A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/c469517e-f64f-3997-bd0a-c9c289dcd6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:83:31:46:b8:3e:4e:1a:9e:9e:9f:d8:cf:2a:d9:8e:bd:
         65:03:e2:aa:82:ba:f4:45:a2:f7:ab:e9:d0:6d:4c:90:b7:e1:
         b1:a9:5d:d3:57:5c:50:23:32:5a:27:23:8c:59:9c:4e:9c:ce:
         31:aa:1b:64:13:4f:3e:6f:21:3d:25:78:31:5d:ca:21:0f:23:
         bf:22:d5:b8:41:0e:93:0b:43:da:0f:59:60:b4:fe:f5:5d:ce:
         10:16:dc:fe:56:e7:62:fc:e6:35:f5:53:c5:4c:14:90:6b:1b:
         87:67:da:73:4c:30:8b:dc:00:00:c9:fc:34:2f:36:4a:0b:12:
         9d:f6:9f:ae:aa:fd:02:bf:bb:85:a5:ed:32:5d:18:4e:6a:97:
         36:80:9e:0e:74:60:10:69:9d:44:f0:bb:e1:69:ac:47:aa:b7:
         61:b8:81:4d:7a:77:df:5a:9f:ac:b2:d1:7f:b6:eb:48:1b:d7:
         c9:60:5b:6a:e6:c3:59:12:42:b1:fc:15:61:8a:c9:fc:fa:5d:
         ff:83:bd:e4:25:7a:e5:b2:8f:95:8d:06:d8:4b:32:0c:10:cc:
         8a:6c:f3:43:15:c0:02:de:a4:5e:02:44:94:5d:ef:10:6e:d4:
         b1:2c:78:f2:fa:8c:6c:fc:16:1d:df:f5:88:37:b1:15:cc:c8:
         7c:56:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:35:45 2026 by rpki-client