Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa
File:                     958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa (raw, json)
Hash identifier:          TpzYAeLLjdAWOFF2yECTPJcg8cd5ER89I6N+b7XIgMA=
Subject key identifier:   05:6A:B5:28:7A:67:99:53:A9:8A:62:0B:8F:8E:D2:CA:1A:A8:93:2F
Certificate issuer:       /CN=e5a67b98-1c41-438b-b404-8142d67c6476
Certificate serial:       010D0C9F4328584E296F099F87EFDA01D6827A00
Authority key identifier: 81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        192.69.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:09:9f:87:ef:da:01:d6:82:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a67b98-1c41-438b-b404-8142d67c6476
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=02d3dcc5-c75c-4ceb-b82b-98114328b068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:0c:06:fb:3e:7c:67:ab:76:cd:ef:73:a3:
                    a2:e6:21:34:19:62:70:8b:b7:a0:c4:68:d7:c0:03:
                    c6:3a:54:d9:ad:4a:e8:77:10:e8:88:f5:19:7b:51:
                    0c:b7:fd:e3:a7:7e:50:8f:47:01:39:0b:3a:cb:25:
                    be:7e:c9:5b:2d:ad:01:c2:a9:5d:6a:f5:d1:49:82:
                    fe:de:77:6e:75:03:29:ae:8a:e9:c0:7e:e0:6a:2c:
                    44:56:e3:29:16:ef:d8:5b:0e:11:c6:76:96:a2:45:
                    16:b2:cd:c5:27:a1:15:3f:53:58:6b:ce:4e:da:07:
                    3d:c2:03:e2:2e:1c:46:f5:f7:67:89:4e:28:c9:d0:
                    d9:20:2f:cb:11:34:58:12:c5:0a:ef:cb:41:b0:79:
                    60:51:97:15:57:09:8f:d2:83:b5:f0:cc:bd:d8:18:
                    f8:c5:58:be:58:20:a1:01:fe:7e:ed:4b:3e:6f:17:
                    ba:f1:ee:fc:ef:b8:b2:1d:00:1f:a1:fb:02:65:cf:
                    6b:c9:ae:93:a4:d4:18:08:5c:8b:57:cd:c4:91:ac:
                    89:e5:bd:ef:5e:a2:af:5f:99:ee:f6:78:a6:5e:87:
                    b7:b8:26:27:02:ff:d6:a7:3d:8b:11:70:9b:df:d0:
                    8a:10:c9:34:5d:34:e4:55:50:7e:8a:18:14:e6:bf:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6A:B5:28:7A:67:99:53:A9:8A:62:0B:8F:8E:D2:CA:1A:A8:93:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/958996f6-abea-3a9b-b1ae-4a3f1a0dbe47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476/e5a67b98-1c41-438b-b404-8142d67c6476.crl

            X509v3 Authority Key Identifier:
                keyid:81:9F:D1:6B:26:3D:DA:D3:70:D4:D5:AF:2D:CA:CC:8B:B0:B3:CC:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5a67b98-1c41-438b-b404-8142d67c6476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:82:65:24:fd:8d:0b:e9:36:0c:7b:01:7c:4e:af:bc:7b:53:
         cd:5c:b9:7a:a6:07:f6:76:5d:aa:8c:7c:eb:45:e0:67:98:47:
         16:34:f3:5d:fa:8d:05:77:bd:4d:94:9e:b5:2b:46:da:ca:34:
         1c:8f:58:fc:ab:7f:07:f0:73:fa:aa:ab:7b:61:35:a4:ce:12:
         41:96:85:05:39:37:97:e1:cf:47:42:bf:68:ce:44:23:f5:b5:
         5b:e5:7c:75:86:ac:ab:8d:66:d3:74:82:ac:58:42:3a:11:0f:
         40:03:3f:7d:49:bb:ef:5b:1e:ae:62:7b:da:38:5c:44:b3:29:
         fe:db:ba:37:2b:ea:1e:55:22:d0:64:c3:16:f4:f8:0e:13:5d:
         2f:b8:56:2e:0f:0c:d5:a7:d1:72:81:52:eb:99:12:25:fe:8a:
         8e:c4:f7:bb:32:30:c9:b8:2b:99:96:ad:42:ab:f0:3e:b5:f2:
         ec:71:13:51:d8:e5:8d:b5:fc:ad:d8:f3:e2:f2:aa:bd:98:d2:
         cf:d8:5d:d6:e0:42:c8:2b:b6:b9:cc:85:09:5f:e7:0f:10:6f:
         c5:25:73:43:ae:70:a1:3b:89:5e:51:4e:58:a4:a1:72:eb:d2:
         47:a4:47:15:6e:44:0d:3b:f5:5c:bd:43:52:bb:0f:f2:37:3a:
         bc:ed:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:08 2026 by rpki-client