Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
File:                     a553c4ca-c48f-3643-91b5-e2e0760a951b.roa (raw, json)
Hash identifier:          l2099Azradtwx68FIhEqIw1bOv0TlABvqxFk+lPdcsU=
Subject key identifier:   2F:05:0E:E0:DB:05:2B:D8:99:7F:CF:1E:C7:0D:F7:3C:24:0F:F6:5D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672342D2364C464CD115400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        67.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:34:2d:23:64:c4:64:cd:11:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=07a64ef4-e335-4bce-9b1d-805ec8097692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:37:6f:24:04:ff:b5:08:b1:fb:02:00:9e:
                    9b:4f:1f:3e:cb:b5:a0:c2:1c:70:0e:79:d8:b7:92:
                    41:62:f3:15:2a:15:22:ce:1d:38:51:74:72:e4:7c:
                    d0:cf:06:85:50:ee:88:27:4e:95:9f:b5:14:28:3b:
                    89:2b:b2:75:f3:4a:e6:af:55:a1:69:78:21:cd:99:
                    74:70:73:58:f6:45:5f:2c:06:1e:6b:6a:33:51:bf:
                    e9:58:eb:b0:06:17:d6:f6:f1:2a:c2:8c:2c:6e:ea:
                    a4:1e:45:8a:10:4d:4d:22:bd:6c:7c:5f:8b:5d:82:
                    79:47:a1:dd:f6:80:73:ad:00:06:c9:b3:e8:85:c7:
                    09:fd:80:d2:a4:ab:57:5b:da:90:eb:cb:a2:59:51:
                    0f:e9:53:f5:42:49:7e:a1:b4:18:07:33:e8:d1:79:
                    22:60:7c:f9:55:a2:47:30:87:28:67:e2:86:dd:28:
                    57:a6:81:48:8c:36:f1:3b:ee:10:d4:31:85:fc:c6:
                    d7:4d:54:b3:3e:8e:b6:57:36:1f:bb:77:7b:9a:6e:
                    8b:4e:5a:86:6b:55:5d:97:ce:8d:f7:2e:fb:83:2f:
                    f6:2e:fe:70:70:f4:00:c1:cc:8a:0f:05:a1:d6:cf:
                    69:07:79:f6:cf:e9:fe:34:02:6a:20:5d:0d:45:da:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:0E:E0:DB:05:2B:D8:99:7F:CF:1E:C7:0D:F7:3C:24:0F:F6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a553c4ca-c48f-3643-91b5-e2e0760a951b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1f:7d:e9:a0:3f:a4:f5:4b:33:f3:3f:cc:ea:c3:94:c8:c4:
         44:5c:f1:45:8c:4e:a7:a7:94:3b:e3:c0:ca:d2:99:b0:30:94:
         f6:8a:a7:5f:06:db:5e:ff:02:99:c5:67:ad:e8:22:be:5c:c8:
         f7:16:44:e2:a0:f6:58:59:62:f4:0c:f8:86:e3:61:bb:15:b1:
         74:15:ce:7e:41:1b:bc:ef:a5:5b:f2:d8:a5:43:53:9d:ea:74:
         4a:03:93:d5:5b:54:09:7a:a7:4b:5a:f4:1f:5b:52:08:ca:ae:
         88:f4:a5:b3:da:49:45:41:8d:c2:13:d0:86:d4:85:58:1a:28:
         28:fd:ab:0f:51:73:d4:5a:50:f9:11:ad:91:cd:5d:0e:89:82:
         c5:e7:10:8c:8b:26:37:93:d1:7a:be:51:85:1b:83:05:50:af:
         96:9d:dd:a8:3b:0d:e4:bb:70:42:de:cc:b0:1c:27:c2:c7:1b:
         86:d3:ae:a6:bb:98:01:1f:fa:08:74:72:13:d2:e6:aa:ae:35:
         1c:81:fc:75:02:29:55:4d:48:dd:21:cc:65:b2:7b:f1:ed:62:
         77:49:26:1f:27:e1:35:c7:8a:ed:7e:f9:62:15:d7:9a:d5:10:
         26:a8:d6:14:d0:ae:aa:77:1d:ef:23:60:da:18:07:2b:3e:1e:
         27:5f:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:17:48 2026 by rpki-client