Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/d1611d76-7950-3bfa-94ae-dd866a3c540e.roa
File:                     d1611d76-7950-3bfa-94ae-dd866a3c540e.roa (raw, json)
Hash identifier:          A1ssIipVW6QkSaxfBouO1Hk19L8Bpz+eO1F/7prdQsc=
Subject key identifier:   73:A8:2B:D6:52:C8:02:CF:F9:55:B2:7D:3B:A5:3A:A2:10:9A:96:E3
Certificate issuer:       /CN=960e110b-8a58-4e15-a2f1-8d907656427c
Certificate serial:       010D0C9F4328584E2AD45A9BC0F1ABF80717F180
Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/d1611d76-7950-3bfa-94ae-dd866a3c540e.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        69.10.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5a:9b:c0:f1:ab:f8:07:17:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=37a916f6-6fb0-497e-aea5-809d5f5c4940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:5f:5c:c3:d8:b1:a0:b2:ad:d2:03:0e:41:
                    33:a0:cf:cc:17:bc:e0:a2:2c:79:7e:01:9b:bd:19:
                    2e:60:46:bd:48:e7:3b:4b:e6:59:86:bd:c6:d3:1e:
                    2c:ba:06:34:1f:57:2d:ae:52:f7:3b:ed:1b:89:d0:
                    20:4f:c5:34:d0:60:e6:a9:c5:47:53:b9:b4:b7:1c:
                    e7:de:37:be:e9:7f:0b:b1:e0:a1:a5:6e:60:de:9f:
                    ab:59:e6:b6:a5:fc:f4:65:39:2b:75:5a:be:c7:dd:
                    85:39:28:a0:98:f8:91:a1:a8:d7:5b:c9:0f:09:76:
                    64:20:82:ac:99:a6:ec:b6:20:3c:5f:27:03:b3:ad:
                    24:d4:86:d2:3f:92:2e:14:20:8c:06:15:10:40:be:
                    81:4d:cd:04:28:ad:d6:54:64:00:28:02:73:de:ac:
                    b6:76:ff:76:33:fb:86:00:92:3e:c5:1e:ae:9f:52:
                    ab:ca:5c:d6:56:77:1c:1d:29:c3:f5:33:6e:28:7f:
                    a1:6b:19:89:79:d1:ba:c7:f9:f2:16:b5:d2:d0:29:
                    3a:fd:89:6f:2c:76:e3:fa:8f:0e:a4:3c:44:ff:2f:
                    6e:62:cf:f8:ed:d6:3d:4b:07:49:3d:b9:17:9c:c8:
                    cd:d7:76:58:c9:dd:a6:fa:6f:ba:97:8f:10:3f:d8:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:2B:D6:52:C8:02:CF:F9:55:B2:7D:3B:A5:3A:A2:10:9A:96:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/d1611d76-7950-3bfa-94ae-dd866a3c540e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.10.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b1:73:ad:80:7a:4a:b9:d2:4e:2f:9a:79:ef:2e:c4:cb:dc:
         20:40:6a:08:ca:45:e2:20:c5:91:d5:87:a1:7d:a5:7d:73:26:
         5f:bd:44:e3:a9:1f:94:8a:66:14:6c:f1:9e:4c:8b:5b:02:1e:
         f0:9c:f9:99:b6:2d:2e:cb:b9:fc:47:3a:b2:61:7c:e1:dd:5d:
         98:bd:52:c4:67:bc:65:cb:b3:b1:3e:42:dd:44:7c:99:92:a5:
         da:64:14:ed:09:43:3d:7e:fb:4c:4a:54:da:5d:88:81:c4:ab:
         90:88:8b:5a:eb:1c:2a:c3:b0:4a:63:67:3a:d7:8b:59:9a:3a:
         98:f0:44:df:51:8c:62:0d:79:67:79:bb:1b:bb:68:5c:50:91:
         86:14:1b:12:4e:32:10:9f:85:ea:cb:0d:0c:ad:c7:53:e3:ac:
         c5:59:67:10:94:03:45:bb:e5:be:da:0c:7b:25:79:c5:4b:1c:
         3a:7e:3f:95:34:b4:61:f9:00:12:cf:de:b5:31:24:b6:7a:2c:
         d1:b4:22:c4:dc:99:9f:17:ff:b1:3f:90:ee:10:87:82:90:e0:
         ed:3e:c5:68:4c:84:73:65:2b:7b:57:58:7d:35:97:c0:e1:e6:
         3e:ff:dc:03:56:57:4d:52:86:79:ef:36:87:28:26:24:7c:d9:
         06:2e:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 21:10:18 2026 by rpki-client