Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b3c7ade-56d5-35a5-98e6-6e936b0e4a53.roa
File:                     1b3c7ade-56d5-35a5-98e6-6e936b0e4a53.roa (raw, json)
Hash identifier:          vKjeqJJRWvcUzJ7LsvMNSzpTX0Y67/90nIWpEB/aLOs=
Subject key identifier:   C9:CC:25:C0:37:F5:68:80:C7:9B:9A:50:F1:2B:FF:21:93:B4:BC:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862C5414A843E91F91EC040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b3c7ade-56d5-35a5-98e6-6e936b0e4a53.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.62.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:c5:41:4a:84:3e:91:f9:1e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=97cab932-ea0e-4c46-8f36-c962f8ade0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:df:d7:48:96:3b:d7:49:81:d5:01:5c:2b:
                    68:fe:74:5e:0e:d4:28:42:36:dc:6e:09:82:7e:bb:
                    1d:8c:08:18:4d:fd:f7:61:2b:0a:19:b3:ac:ef:e1:
                    77:b1:5c:3f:6b:e4:5a:43:0e:2e:6c:66:7a:0b:dc:
                    6d:49:aa:de:ba:bf:56:2a:4a:34:01:b9:e1:4b:aa:
                    fd:9a:da:eb:c7:77:35:63:9a:75:01:70:bc:71:f4:
                    e0:01:af:54:33:9c:72:59:d8:30:f6:b9:dc:ea:ce:
                    a6:e0:bb:bc:29:cf:76:ff:b7:dd:bc:a4:cd:70:21:
                    d2:9f:81:98:a3:fa:62:ea:d0:de:76:dd:55:70:35:
                    80:58:c2:90:69:9a:7a:da:37:e9:8e:8c:50:7e:ba:
                    e6:2c:86:f4:bb:a8:d4:b6:1a:a4:26:42:e4:af:eb:
                    d2:b7:34:9d:b7:1b:a5:4d:87:64:ef:15:d9:07:95:
                    33:cc:8b:96:a4:43:9a:f8:ef:cf:f4:52:28:14:8a:
                    48:1f:fd:89:57:a7:5b:f8:34:0c:2a:d0:fb:b8:9c:
                    a9:0d:ca:7d:d9:e9:40:ae:a5:9c:37:c1:8b:35:17:
                    fd:c5:10:7b:64:95:69:a4:ef:c3:e3:49:e9:4d:8d:
                    aa:23:29:f0:4b:3a:e2:c3:16:72:08:ca:c7:d4:55:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CC:25:C0:37:F5:68:80:C7:9B:9A:50:F1:2B:FF:21:93:B4:BC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b3c7ade-56d5-35a5-98e6-6e936b0e4a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.62.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:95:44:d7:4d:68:5e:90:f1:fe:5e:bc:2b:97:61:db:52:
         60:05:fe:a7:02:d8:47:06:b0:0a:05:1d:35:1a:c0:19:8e:63:
         e6:f0:fa:40:df:84:30:a0:b8:75:77:5f:cd:52:f1:f7:8b:f5:
         7c:f9:06:5f:19:e7:2b:82:8a:54:be:2e:35:ce:9e:0e:46:55:
         a0:91:ec:ba:42:e3:90:82:46:85:69:66:e5:35:48:7b:b5:17:
         16:3f:c1:72:10:bf:6d:4a:3b:b0:61:16:08:6c:6a:bd:ac:6d:
         dd:01:d1:23:13:a3:5c:6c:ff:c3:41:2a:18:13:8e:36:01:69:
         42:ed:71:fe:c9:a3:74:94:87:7e:03:dd:6c:f0:8a:71:3e:dc:
         83:b9:a2:af:4f:54:26:f5:af:2f:1b:02:ae:2d:25:be:f9:65:
         98:e1:d0:07:74:c8:e5:41:9c:b3:86:92:60:aa:1f:63:81:38:
         2b:f7:01:ed:9d:8c:31:b3:5a:64:34:f9:7e:b2:8d:41:60:af:
         2c:9f:ea:07:7b:95:39:7f:e4:72:9f:67:f8:51:5e:08:80:32:
         ec:f0:f7:95:db:82:39:a2:c4:09:d4:92:37:c0:55:3b:23:c5:
         a7:56:22:18:c9:c9:27:1d:3e:5e:24:ca:19:39:0d:9e:b3:5a:
         25:16:ab:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:57 2026 by rpki-client