Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ce68461-55fe-3dad-b2a2-af394c516e5d.roa
File:                     1ce68461-55fe-3dad-b2a2-af394c516e5d.roa (raw, json)
Hash identifier:          sB/Lad1SwRNJD+nqWEHqPWMQM1VyxWyYbB5bdfBv+/M=
Subject key identifier:   78:79:F4:0B:FE:D2:68:8D:70:CA:4C:A0:71:B9:35:71:C2:AD:D6:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863DA3482A6657072CB8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ce68461-55fe-3dad-b2a2-af394c516e5d.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.40.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:da:34:82:a6:65:70:72:cb:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=33f34b94-2ad7-4cb4-8059-ef2f4a0969b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:d2:7e:2c:42:30:5c:d9:0c:e0:d9:e3:bc:
                    ea:59:5b:be:f0:83:7b:74:29:3c:53:ab:50:e8:cb:
                    ee:f1:a6:f4:65:46:15:de:69:65:e9:5a:6b:5e:be:
                    c4:79:f3:40:41:bc:a7:34:14:2c:bc:ca:ba:6e:d6:
                    70:1c:f4:54:8a:ec:f0:c6:4c:84:3b:eb:05:d0:c4:
                    ee:0a:ef:2d:76:72:96:8f:d3:0f:d2:8f:1d:cb:99:
                    11:18:91:a0:da:0a:a7:37:cd:02:b1:4c:94:b9:0e:
                    c9:46:5a:29:44:80:ba:5b:ec:d8:1b:c8:e4:c5:f9:
                    fc:00:d7:ed:27:80:bd:d8:f5:09:b0:58:ca:2a:1f:
                    95:18:76:c7:22:d8:52:b7:97:bc:e6:95:7e:92:38:
                    0c:5e:85:f9:e3:88:ca:ab:b7:b5:a3:9b:84:55:3c:
                    f4:26:c3:4d:04:1f:2e:9b:19:fe:01:86:e6:24:13:
                    a7:ae:53:3e:38:12:9d:7a:53:3e:a1:2d:bc:0d:2d:
                    a8:80:4f:84:ed:ea:55:fa:be:6e:d3:3b:20:18:9a:
                    3e:e0:d6:89:6e:8a:fa:90:32:f2:c2:c9:a8:32:3c:
                    b8:7c:e5:b0:95:40:85:20:ad:16:3b:8c:ae:70:c0:
                    79:8f:1b:aa:7f:69:fb:3b:2e:ed:8b:e3:52:30:05:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:79:F4:0B:FE:D2:68:8D:70:CA:4C:A0:71:B9:35:71:C2:AD:D6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ce68461-55fe-3dad-b2a2-af394c516e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.40.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:86:51:2c:09:b6:85:17:b8:e6:f3:f2:e1:c5:23:ab:66:eb:
         84:4e:2b:7e:df:24:02:29:71:0c:ff:12:6e:2b:51:07:ad:15:
         a8:77:1d:a7:76:3f:cb:4b:ab:9d:58:40:db:7a:c1:83:9b:69:
         7b:4c:ea:50:a6:41:62:72:67:dd:29:95:97:49:e7:ce:b9:be:
         38:ef:f3:6d:66:f5:ae:2c:51:71:a4:b6:79:a0:de:8d:5d:83:
         10:19:7e:89:96:1e:7f:e7:8d:7b:3b:b2:b5:74:37:5c:00:e6:
         7b:1b:d4:af:85:ce:b0:6e:2e:67:ba:80:66:de:e9:2a:f4:d1:
         4c:0d:47:b2:94:6e:11:d3:84:b7:53:43:28:cb:0d:ab:15:3c:
         35:4c:cc:61:8c:28:ed:01:72:11:3b:94:35:72:82:82:20:fb:
         09:37:69:1c:57:84:9f:f0:10:5d:23:ef:3b:bd:17:8d:29:d4:
         90:f1:54:e1:87:31:73:ef:fa:e8:ff:c7:4d:c0:74:31:03:62:
         e8:2c:8b:4d:ee:c4:fe:e8:eb:5d:36:3c:e5:ce:4f:eb:55:49:
         9c:e9:6e:4d:1b:62:19:18:4b:5a:12:fa:6f:12:e1:bb:8c:59:
         30:d8:70:73:34:9b:f9:6c:9d:ba:48:ea:c1:54:7e:e1:5f:11:
         5d:c8:37:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:42:06 2026 by rpki-client