Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d80dfd5b-fead-3ef8-b950-1dbda16a8efc.roa
File:                     d80dfd5b-fead-3ef8-b950-1dbda16a8efc.roa (raw, json)
Hash identifier:          5dZRNkZT/Wo9nCqIqwukHkXFCt3/VT+SlQzL2eRzSyM=
Subject key identifier:   93:3E:DE:D5:62:F4:58:5F:41:DA:18:0D:9A:7C:29:17:89:7B:AD:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863D78E59812A6BDB4A79A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d80dfd5b-fead-3ef8-b950-1dbda16a8efc.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.37.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:d7:8e:59:81:2a:6b:db:4a:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=87b03446-5d3d-4743-a912-75358b814374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:7a:ae:06:f9:b8:c6:d8:ae:ae:b0:19:d0:
                    11:37:dd:ff:6a:4f:0a:52:54:c7:47:7a:bf:b6:15:
                    5e:c6:cd:c2:e7:dd:49:1d:4c:03:67:72:0f:61:36:
                    41:54:b6:c6:12:c7:12:91:a4:b9:8c:27:de:70:d9:
                    3e:82:90:52:9c:09:5d:7b:41:4a:0f:8d:6f:9d:94:
                    da:b7:fd:b5:ec:77:b4:95:fe:0a:22:8d:f5:c7:4b:
                    5c:27:5c:3d:a4:e5:d3:a6:10:4f:2c:a8:50:c2:3c:
                    8d:4d:b7:1e:00:f3:ae:e4:ef:8f:cd:07:61:8b:bb:
                    6d:19:c4:37:8e:00:59:9c:f9:f8:b2:e3:97:d5:7d:
                    9f:6e:96:06:7d:ec:8a:51:68:82:a6:b1:0b:fc:cf:
                    89:7c:62:35:3b:52:34:c1:5e:42:f9:b2:22:bb:fb:
                    4e:ea:b4:0b:fe:c2:4c:e8:82:2e:ee:07:af:84:6c:
                    0e:ca:6b:22:99:0e:02:0d:7d:8f:79:ed:67:30:37:
                    0e:c5:d0:8c:48:41:80:40:b0:cc:0d:f1:3d:d1:dd:
                    1e:8c:6a:8c:f9:93:12:bc:65:5b:9b:cd:6c:bb:6b:
                    c6:7e:2e:86:eb:53:2d:6a:52:37:6d:14:e0:ad:44:
                    e0:96:90:1c:8d:4b:39:f3:3c:c8:df:cf:6a:5b:3c:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3E:DE:D5:62:F4:58:5F:41:DA:18:0D:9A:7C:29:17:89:7B:AD:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d80dfd5b-fead-3ef8-b950-1dbda16a8efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.37.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:26:75:6e:3b:f5:b9:4f:4e:00:44:43:67:b1:3c:fc:5d:a7:
         b9:15:b0:d0:66:59:c7:e0:fe:c9:67:40:e5:26:94:dc:4a:fd:
         bb:53:e6:f1:de:0c:04:a1:4c:19:91:f9:d4:43:81:7f:37:a4:
         c7:86:81:d2:9c:5f:af:36:77:a7:ea:95:74:0c:f7:b5:eb:e0:
         9b:e4:63:dc:1a:d1:40:ab:2c:c5:f1:25:81:e5:6d:36:de:73:
         e3:ab:00:1b:18:78:e5:18:b6:69:56:cd:4c:d9:23:95:54:d8:
         81:df:76:81:5f:60:58:2e:2c:ef:bf:dc:db:18:ef:10:98:8a:
         9c:8e:bf:3c:1b:3c:5b:df:36:48:c3:e4:94:ef:4b:0d:18:e9:
         33:92:a8:11:db:90:07:fb:c5:c1:dd:fb:6d:5c:f9:9f:e0:b4:
         04:ad:82:3f:7d:3c:88:a4:0d:2e:6d:97:ca:ad:e3:54:08:ee:
         2b:88:4e:07:57:0a:73:e3:c5:22:21:23:f6:e8:76:b0:ba:21:
         0f:e3:ba:44:52:8d:25:2b:c1:37:aa:28:95:b0:80:e8:04:53:
         0e:dd:9d:64:c6:90:51:72:80:6a:1a:9d:c4:f4:0c:99:3f:fc:
         01:5f:14:a2:db:71:5d:7b:c7:74:3e:30:60:74:9d:33:b2:ee:
         45:01:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:04:52 2026 by rpki-client