Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/452590a1-42f9-3c9b-ac52-55cb9ff59818.roa
File:                     452590a1-42f9-3c9b-ac52-55cb9ff59818.roa (raw, json)
Hash identifier:          QVo1n4OX4GnTDbE1wN37sVjej8ddt/Bu7oKDumIfxjk=
Subject key identifier:   E7:AB:E1:32:8B:BC:E9:3C:23:F7:02:F1:1E:5B:F1:5E:1C:60:27:DF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E942C8714B0FD762D9B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/452590a1-42f9-3c9b-ac52-55cb9ff59818.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        68.83.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:94:2c:87:14:b0:fd:76:2d:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=2151f2c8-a4a6-4b46-8465-e5273593de34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d0:c4:3d:d7:11:18:d3:3a:a3:98:f2:0b:e2:
                    26:c1:e4:d6:10:54:3d:a0:03:17:7b:1d:70:9c:83:
                    fe:7c:bb:61:4a:90:4d:c6:94:4f:f9:6f:ce:08:77:
                    b9:f7:fc:c2:80:20:13:c7:07:20:00:a7:a9:15:1b:
                    01:2f:ab:78:8c:d7:9f:3d:f3:b8:18:19:b9:08:40:
                    76:80:c7:cd:a2:6e:4b:ce:a8:6a:24:dc:98:0d:6d:
                    d8:e4:71:be:0e:20:9c:53:17:76:69:e9:07:bc:c3:
                    8f:87:1a:7a:8b:57:01:dd:19:1f:12:7a:7c:53:ee:
                    95:e9:ef:33:18:27:98:8d:1c:a1:cd:5d:54:28:4c:
                    4a:22:6a:4b:f1:bd:db:a6:5c:de:e6:48:c0:07:bc:
                    cf:0a:a6:4a:c4:ca:44:af:3d:49:f9:0f:39:2d:51:
                    2a:10:5c:c5:98:9f:a0:32:97:17:db:16:d5:6e:e3:
                    c4:59:dd:3f:d0:27:41:e4:08:69:53:8b:99:d5:48:
                    12:b6:c5:9a:8a:4e:18:e2:4d:f4:ab:b7:e0:3b:61:
                    c4:49:3d:97:8b:bd:85:18:0c:3c:de:7f:f1:f7:b7:
                    f5:e1:63:aa:cd:1d:93:24:f3:37:30:24:b2:a4:31:
                    b5:14:7d:99:99:a5:ab:fe:14:e4:46:d5:c8:bc:0b:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AB:E1:32:8B:BC:E9:3C:23:F7:02:F1:1E:5B:F1:5E:1C:60:27:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/452590a1-42f9-3c9b-ac52-55cb9ff59818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:f3:b7:a0:7a:ab:75:2f:9e:2e:64:8f:14:46:0f:02:4c:09:
         a3:19:3c:b1:52:ac:22:d0:0d:5a:1f:d0:f0:4b:ad:02:14:65:
         61:ec:54:80:7e:6c:06:a1:ff:34:9f:24:d2:81:e0:00:cf:f0:
         58:7e:ea:c7:b5:1a:56:1f:92:19:8e:c8:03:48:1e:1b:66:fe:
         6f:df:d4:6f:94:bc:93:bf:92:d9:79:fc:b7:51:c3:f2:49:1a:
         0a:39:19:a6:2d:02:11:49:b9:0e:59:76:c6:09:dc:b3:14:53:
         60:15:79:77:7c:88:b6:36:64:dd:99:08:b3:0a:bf:37:6c:7d:
         1f:4f:69:cb:a8:1c:18:dd:05:fe:e0:23:7a:8b:71:74:d8:f3:
         a3:68:7c:06:99:5b:e9:07:d8:c9:f3:f4:db:4e:03:55:9b:38:
         6e:a2:ad:86:5d:de:98:9b:5f:4c:62:9e:56:c0:03:3e:6d:94:
         07:f7:23:e7:e8:f5:d4:24:37:80:1d:a3:89:7c:4a:d8:c0:f2:
         77:35:5e:56:da:67:c5:c2:d2:49:85:1f:bc:8e:a2:11:53:34:
         63:03:f8:02:a5:d8:aa:49:30:4c:16:33:04:d6:f2:aa:5b:d6:
         66:47:33:92:59:6a:c9:e9:60:12:28:9c:6c:86:ba:0e:7f:59:
         39:d6:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:13:37 2026 by rpki-client