Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa
File:                     2a107519-0ec5-30d7-9c54-2f762d58dd15.roa (raw, json)
Hash identifier:          qfnISszwv/Enp+RLw8yoeHlZ3LTb2BQWkk5VZEo2hVk=
Subject key identifier:   EA:DC:37:6A:1C:A2:5C:42:E5:7F:5E:65:09:2B:F3:FD:71:71:16:74
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584E482489C79A94C8ACCD407280
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     22765
IP address blocks:        68.170.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:89:c7:9a:94:c8:ac:cd:40:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=9d9e3b77-a213-4550-a10f-b5f05cbc6b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:d1:07:10:be:38:9b:a5:76:d8:90:ba:41:
                    cb:0b:4c:c9:fb:0e:2f:e9:9e:58:27:3e:cf:c3:21:
                    36:16:d6:57:8e:71:be:82:c1:b4:b9:bf:99:3a:46:
                    75:e0:9e:3e:b8:65:58:cb:bb:91:0a:a9:4e:19:f5:
                    40:dd:d5:70:4a:35:aa:53:f9:f0:e7:c0:8d:30:a3:
                    e5:ce:e3:ee:b7:02:01:5b:8c:40:66:b3:e6:7b:16:
                    54:f8:d1:34:38:63:57:14:77:81:36:9f:68:b7:9d:
                    83:76:31:f4:4f:b0:84:51:69:6f:31:30:f3:3d:59:
                    f8:23:d0:6d:70:ca:7e:14:a1:87:56:ed:a7:45:97:
                    dc:9c:6f:31:26:4b:22:ae:1f:8c:fe:2e:2b:a9:9f:
                    20:8d:72:81:ac:a9:d6:94:09:cb:7f:2c:f3:ca:7e:
                    b8:bb:43:69:94:a8:a2:cf:ff:2f:ee:1c:15:de:31:
                    a5:84:f2:cf:4c:41:7d:d7:cd:fd:dd:54:77:80:4e:
                    09:d2:3e:83:cc:a5:d1:20:50:b9:a6:51:f8:2d:8c:
                    68:68:29:d7:07:c1:57:b6:6c:05:aa:d0:38:f8:92:
                    c9:07:2a:e1:af:37:e6:60:f2:36:79:2b:ad:45:bf:
                    e7:41:a7:34:0e:03:19:5c:cd:e4:16:9f:9b:fb:74:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:37:6A:1C:A2:5C:42:E5:7F:5E:65:09:2B:F3:FD:71:71:16:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:09:bf:e8:a9:9d:10:7b:f7:77:e5:c3:fb:5f:27:21:e0:
         32:78:8e:df:0e:4d:ea:5f:f1:10:5b:6c:43:ae:ba:c1:ff:d6:
         72:d2:2f:f2:9e:de:2d:1f:72:4b:48:46:cc:bb:1b:b3:0d:5b:
         03:92:72:bb:3c:fc:aa:fa:1d:32:8a:1c:3f:be:a0:5d:7f:dc:
         b7:15:81:7e:06:bb:7b:50:55:ce:5a:69:fc:d5:3a:26:3e:0d:
         61:e8:e1:78:6c:c5:c0:1c:62:61:2d:b1:e7:be:d7:f9:01:49:
         1c:dd:a3:99:8e:3a:26:61:f0:7e:7a:59:3c:8a:3e:46:48:43:
         85:50:2b:b4:67:d8:68:41:76:ee:da:2f:53:38:ec:c2:fb:a4:
         83:dc:d0:11:9b:b4:7e:28:e6:63:76:0e:7b:4d:52:43:c0:4a:
         40:5b:d4:7b:73:d3:1e:27:df:98:34:3a:e4:2b:0b:43:c5:65:
         d7:29:16:8a:35:25:4e:26:f2:c2:d5:f7:9b:4f:2f:b9:29:b0:
         30:47:83:08:62:ff:7a:fb:a4:c4:0c:3b:ec:2b:ad:26:7e:eb:
         d0:68:86:ec:b8:3c:0d:cf:58:e0:44:32:12:b4:cd:b7:90:28:
         9f:b0:11:87:e5:d7:83:a4:70:39:d7:59:0e:e2:79:44:eb:95:
         eb:2b:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:48 2026 by rpki-client