Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b6561c-f315-37aa-9d85-6580d7f444e5.roa
File:                     a9b6561c-f315-37aa-9d85-6580d7f444e5.roa (raw, json)
Hash identifier:          AuGF0ppurUMYNFVuezQzpODb4Bm5LMgbT4UdkFvetFc=
Subject key identifier:   0A:CE:83:31:A2:54:74:C8:CE:D3:0D:9B:40:88:B1:E0:B5:2D:44:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49788A3F37FCB37C078C7AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b6561c-f315-37aa-9d85-6580d7f444e5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        68.85.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:8a:3f:37:fc:b3:7c:07:8c:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=341a5564-ef07-4221-9942-c9509e45c2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:09:85:32:66:bd:e6:60:47:29:0a:71:2a:
                    85:61:18:72:2b:29:62:6d:02:0b:4d:21:8a:92:24:
                    c2:81:11:8d:8f:a3:a0:3e:e8:62:d3:c2:b2:74:0f:
                    fd:61:65:3e:2c:2e:bf:df:0a:a5:ec:10:02:80:5b:
                    f1:1c:e1:c5:c3:63:e8:ec:5f:99:4e:df:6d:ad:65:
                    0b:53:0c:94:fc:ce:fa:a1:97:60:68:ed:7c:9e:88:
                    4a:e6:a7:4f:df:49:cd:97:d2:4c:45:54:02:ef:07:
                    9c:ac:60:3d:e6:b2:5b:10:49:18:f7:94:47:31:4e:
                    d2:f8:79:c7:bf:11:03:c1:41:2c:f4:c1:cf:5b:16:
                    8f:7b:9a:d4:c1:eb:75:7e:31:bf:6f:87:d3:f5:ad:
                    56:14:08:3a:e4:14:5f:2e:99:86:6e:62:7f:b5:fb:
                    34:f5:7c:bd:f2:6b:0c:42:d8:ad:98:6b:dd:f3:4b:
                    c4:86:8b:aa:68:0c:3e:74:b2:c7:09:fe:07:8b:aa:
                    68:33:8a:f8:81:46:fc:d5:8e:ad:02:50:9f:01:9a:
                    48:f9:1e:d9:c5:91:fd:8e:3c:51:fa:9a:a8:11:9a:
                    07:38:8e:67:a3:18:ba:0f:5f:21:e9:0c:90:3c:53:
                    bb:5d:c8:d5:95:ae:4c:8c:83:4f:e4:9e:43:ca:23:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CE:83:31:A2:54:74:C8:CE:D3:0D:9B:40:88:B1:E0:B5:2D:44:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9b6561c-f315-37aa-9d85-6580d7f444e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:39:57:e5:59:f1:f8:8d:14:6d:fb:f1:22:5a:63:0b:8f:43:
         4c:88:85:d3:43:f3:2b:ac:06:64:11:57:f5:8b:de:d8:f8:dd:
         23:c4:de:40:9d:e3:c9:94:01:2f:f0:e0:3f:00:8e:2d:e6:e8:
         3e:b9:54:21:82:95:96:01:0b:ca:f9:35:38:5b:a3:f1:5f:8a:
         d0:1d:2d:f9:23:49:0f:60:70:d7:c9:3d:66:ab:da:fe:6b:9e:
         65:f5:c1:5b:57:7a:1c:af:fd:26:88:b7:f9:cd:6a:19:94:e6:
         33:1f:fd:1e:9e:96:de:42:ef:86:b9:bb:22:e1:7d:67:ce:7a:
         59:1d:69:04:a0:78:3e:da:36:0a:cf:47:2e:d1:61:31:21:56:
         f6:63:99:ed:12:f6:ff:9a:cd:06:78:4a:30:72:c8:e4:e0:21:
         77:30:a6:7e:c4:c8:aa:7b:fd:4b:53:69:97:94:71:32:53:4e:
         c4:53:a1:e8:aa:5c:d1:09:09:a2:f3:7d:82:ff:4d:29:be:18:
         56:b5:f3:7a:4c:14:a6:e0:79:37:b7:5d:eb:b1:df:68:01:d7:
         08:a7:87:70:f8:f0:ff:1f:90:3a:0b:51:04:c9:d8:9a:38:6d:
         50:15:63:55:54:93:a3:fc:6a:19:dc:4a:7b:ba:82:ad:07:f1:
         32:c3:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:05:07 2026 by rpki-client