Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa
File:                     b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa (raw, json)
Hash identifier:          4ASgs95JI53zsXlZ1WRec86jmAWJqUleBULTm//Xpfc=
Subject key identifier:   93:B7:29:17:87:41:6B:39:09:4C:DC:E0:35:44:49:D4:B8:CA:43:73
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584ECD37214938D2B025BE0625C0
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     4809
IP address blocks:        69.163.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:21:49:38:d2:b0:25:be:06:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=b93e0c4f-eece-4000-b4b2-0989a81141ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:8c:1b:24:72:d4:28:8f:ac:b0:57:20:91:
                    89:e3:6f:ac:68:3e:16:9c:3f:13:77:c9:65:cc:97:
                    42:e4:3f:0a:08:97:27:dc:ab:12:15:da:b3:58:40:
                    76:81:c1:06:b0:0b:43:b1:24:1b:d8:50:96:e9:4b:
                    45:94:d9:95:ac:5d:c9:1f:32:5c:be:b4:a7:3a:05:
                    b0:cb:2e:8b:aa:7a:29:f4:d3:2d:f8:d0:d0:04:62:
                    1a:5c:f4:3a:10:db:79:d5:24:ef:66:94:f7:db:5a:
                    b9:be:12:5c:d1:b4:36:91:49:a6:bc:98:17:ea:61:
                    8d:bb:5e:14:e8:5d:29:21:f1:03:a2:d3:6c:fd:86:
                    0a:f2:9c:26:49:73:68:fc:d8:45:1e:e9:c3:8d:e4:
                    32:36:d5:61:d2:11:0c:21:fc:b9:05:39:03:3f:29:
                    d5:60:2f:5a:1e:4d:b0:69:9c:21:8b:02:3a:9a:3f:
                    c5:c9:76:0c:f3:f7:50:e1:5f:da:f2:22:0f:66:7b:
                    1c:16:a1:0b:56:92:72:70:19:d3:50:6e:a1:99:13:
                    53:66:12:e3:31:9a:fd:e6:6b:bd:80:8c:d7:55:50:
                    6c:42:01:83:8e:af:3e:8c:d6:ad:c5:34:1b:f5:d9:
                    32:a7:0b:1d:dd:7b:94:29:5c:b1:62:99:0d:c0:44:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:29:17:87:41:6B:39:09:4C:DC:E0:35:44:49:D4:B8:CA:43:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/b21f1949-8fe2-34db-ac02-b1c4659d3bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.163.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:6b:a0:c1:99:e3:b3:e2:4f:f0:40:67:4b:65:05:1a:28:b8:
         5d:ef:5e:51:ac:f2:e7:84:2a:e3:b4:35:16:17:b2:97:55:f5:
         f9:34:3b:2c:95:5b:70:a4:dc:3b:9c:9c:d9:8a:08:f2:8e:df:
         9b:69:7c:b0:dd:98:e7:b9:46:65:5d:ae:b0:91:27:83:f0:77:
         a4:52:77:7d:e7:58:e4:d8:dd:3f:2f:ac:68:ca:99:f9:0f:d5:
         07:19:ae:c8:f7:b0:2f:ce:17:05:cc:43:85:59:f4:d5:f4:91:
         5a:87:68:b8:c5:83:c9:24:bd:3b:d3:30:16:88:92:06:ea:f6:
         eb:7f:c5:6d:fd:a6:99:b2:8a:90:93:4e:62:6b:0e:08:f8:47:
         12:d5:eb:ac:8c:50:4b:c7:83:c3:d2:da:f6:47:9c:d7:79:b1:
         ce:27:2d:70:5a:d2:03:fd:24:da:b2:b8:b9:78:84:ee:e8:c0:
         6f:26:f6:d7:4b:ef:30:bb:8e:f6:1e:61:a9:93:2b:7f:64:33:
         c5:8a:d4:5e:cd:1e:f0:3d:68:58:24:7e:c2:23:37:3f:00:ed:
         3b:39:ee:0c:bf:b8:16:f3:58:15:88:5a:a3:07:b6:e0:75:5c:
         f3:1a:b2:85:5c:a4:b3:d9:bb:54:36:7e:2d:5f:61:f7:95:e0:
         b3:35:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:53 2026 by rpki-client