Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/9ff58937-8920-3750-8282-e2d8d83e6c23.roa
File:                     9ff58937-8920-3750-8282-e2d8d83e6c23.roa (raw, json)
Hash identifier:          ikdmLf5xJKl1sxooxfF3cytkjFjlj0h+zY3Xw+wqrkM=
Subject key identifier:   32:8C:A5:4F:E2:3B:D2:62:15:60:EA:CE:8C:DD:3A:1F:0B:E1:D7:3D
Certificate issuer:       /CN=84052649-3401-4ba6-ad82-6f310741b104
Certificate serial:       010D0C9F4328584EB57C51775A30742A17DB6D00
Authority key identifier: C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/9ff58937-8920-3750-8282-e2d8d83e6c23.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396004
IP address blocks:        69.195.151.0/24 maxlen: 24
                          69.195.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:51:77:5a:30:74:2a:17:db:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84052649-3401-4ba6-ad82-6f310741b104
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=9296d9aa-297d-49bd-8365-4449f4ef5825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:99:f9:7e:11:bd:aa:0c:1d:76:23:7a:52:
                    2f:49:9a:70:02:70:f0:8d:64:f0:ea:b3:1e:22:1d:
                    40:d3:fe:54:d3:f8:16:65:a8:15:0e:5d:cd:fb:3f:
                    1a:d1:33:63:61:e1:48:fa:00:42:71:23:5b:a6:3d:
                    d2:96:cf:66:0c:16:6f:1a:a7:9d:b6:90:53:89:78:
                    1c:6a:cf:15:2a:86:06:c9:22:b1:b2:63:31:94:68:
                    dd:e5:1b:c6:69:02:0e:0b:7a:3e:51:58:eb:62:2f:
                    94:cf:dd:df:a9:2d:b0:6e:2a:f0:a5:1b:f6:b8:cb:
                    70:0e:1b:a5:a6:84:89:47:b7:66:2c:db:73:21:42:
                    0b:38:47:51:7b:58:ed:ed:83:e1:22:01:89:2a:15:
                    7a:ac:10:3b:5f:ea:df:f6:59:e4:d2:fe:7b:fd:d6:
                    01:a3:14:09:0e:bb:fa:24:0a:34:63:13:a0:fd:e9:
                    ef:05:5b:83:a9:47:91:74:da:57:d2:5c:9e:20:87:
                    a2:8b:e4:74:6e:f3:03:4c:fb:9f:ef:b7:27:72:b8:
                    8b:7e:7a:4b:a6:dd:b8:5a:c7:97:59:d9:ad:df:4f:
                    be:16:1b:a9:3f:ad:39:b7:e2:fb:b0:e3:30:f1:b3:
                    dd:6b:a0:fd:f8:b5:55:0b:73:30:e9:12:bc:f3:94:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:A5:4F:E2:3B:D2:62:15:60:EA:CE:8C:DD:3A:1F:0B:E1:D7:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/9ff58937-8920-3750-8282-e2d8d83e6c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.195.151.0/24
                  69.195.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:70:8f:67:9a:91:24:58:da:18:60:3f:07:cb:1b:65:84:
         d0:d3:ef:30:56:7d:98:e4:f0:22:4a:ee:22:1a:a6:4b:d8:83:
         41:c7:5c:cb:18:58:a2:3b:6a:ff:47:eb:c3:d4:ea:6e:79:4c:
         cd:c0:63:9d:e7:a9:93:54:72:a6:69:a4:47:ed:4f:9f:07:05:
         3e:4d:95:cf:5b:57:8b:dc:cd:a3:9b:7b:61:84:ad:cf:73:33:
         81:72:d9:5b:cb:71:ec:9d:ad:ed:22:1a:46:59:41:e4:50:f5:
         eb:75:bf:1c:62:04:13:a6:7e:de:25:c8:eb:bb:aa:8a:18:15:
         da:87:e7:12:74:5a:53:5e:13:0b:1e:72:3a:13:dc:97:1d:b0:
         82:ad:15:37:d5:9f:70:13:7a:64:f4:d3:89:bb:a3:70:96:ec:
         1f:bb:38:a6:d9:8b:0d:7c:02:4e:48:0a:9e:3b:d1:b8:b3:dc:
         2f:bf:7d:eb:77:68:f7:51:d0:15:77:69:01:eb:b8:18:d2:40:
         b5:18:f8:02:a3:76:c5:12:fa:14:82:57:f3:0c:7d:72:e1:31:
         32:25:af:26:3e:cb:69:96:aa:a8:07:00:09:93:07:5c:c6:e0:
         83:1f:56:91:4c:a6:8e:dc:f0:c2:85:cc:17:a9:9e:93:ca:e3:
         d1:a5:73:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:12:30 2026 by rpki-client