Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f198a8a6-b6e5-3670-8d0a-6679cdab43d3.roa
File:                     f198a8a6-b6e5-3670-8d0a-6679cdab43d3.roa (raw, json)
Hash identifier:          nSPTuPlo2NTp8hOsY71LBJsLdSYhIU5HQ5Wm96Gel8k=
Subject key identifier:   61:9D:DA:68:17:4C:7F:8A:DC:7A:9C:0B:81:F8:AB:B7:01:8F:0F:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA8E26476D3980F14B57E8
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f198a8a6-b6e5-3670-8d0a-6679cdab43d3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14065
IP address blocks:        68.168.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:8e:26:47:6d:39:80:f1:4b:57:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3ce32e9f-c980-491a-9739-eaae20313da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:4d:f7:86:bf:3e:a9:d5:a4:7d:a8:74:63:
                    85:6d:c2:13:b0:e4:18:81:a6:a7:bb:40:8b:2e:e6:
                    c6:23:e8:66:91:1b:2e:30:9e:90:c2:62:8b:f5:ac:
                    e5:d5:22:52:57:71:cd:78:b3:72:7f:19:30:df:7c:
                    9a:47:56:eb:89:d3:56:c1:6a:0a:0d:8a:bb:4b:2d:
                    f3:a0:47:08:ed:85:e3:74:d3:05:c8:d1:5e:19:44:
                    a6:66:93:d2:69:e9:24:d6:de:2f:94:e4:f3:b6:ff:
                    71:06:3a:61:18:73:d2:0e:eb:07:27:f9:1b:35:18:
                    42:49:2f:8e:35:9d:62:a2:97:e1:23:fe:01:03:79:
                    3b:0e:a8:e1:fd:a2:c2:c2:64:8e:aa:34:ac:b1:f8:
                    37:74:9f:02:96:36:04:4e:00:5e:b7:f5:29:5c:f2:
                    a3:c1:12:70:c5:01:03:94:a1:33:c7:37:17:e5:1b:
                    ab:f8:5f:1f:1c:19:44:65:74:0f:36:f3:19:ec:73:
                    fc:e2:64:db:ce:04:79:ab:db:1e:6c:d9:7a:d8:47:
                    b3:4e:96:35:32:33:60:5a:04:35:30:cc:09:da:41:
                    fb:d4:85:d1:89:3a:4b:65:a6:f5:cd:e5:98:0c:ab:
                    05:bc:b8:b2:58:20:c7:f9:3a:1a:4c:8c:11:61:7e:
                    7b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9D:DA:68:17:4C:7F:8A:DC:7A:9C:0B:81:F8:AB:B7:01:8F:0F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f198a8a6-b6e5-3670-8d0a-6679cdab43d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:11:bb:2f:c0:41:b8:3c:cd:e0:72:a8:a6:69:b6:4b:30:
         54:90:ed:d1:a1:cd:56:11:d6:1a:d0:8b:96:22:53:0f:3c:cd:
         0a:44:0b:4c:61:d0:1f:70:6e:fe:a9:a3:14:79:9a:4a:50:7d:
         63:7a:f9:9e:2d:fe:89:29:39:51:3d:2e:c6:db:20:18:c5:3b:
         ea:0d:6b:e2:5e:eb:c3:5d:24:ec:a9:2b:07:ea:86:a1:2b:3f:
         d6:bf:0d:7e:e9:04:54:6a:9c:e8:41:0e:b4:22:90:a6:09:22:
         1c:59:d7:69:f9:c8:c3:3c:e0:1c:81:e0:df:0d:5c:fb:d2:c4:
         88:9a:35:71:c3:93:24:fd:dc:ae:e3:e0:9a:fa:ae:4a:99:b4:
         6f:b6:db:46:df:59:1e:03:99:47:ed:2d:6e:8a:61:a8:57:8a:
         0f:a7:af:9e:a8:df:82:45:49:46:af:2f:07:49:78:d6:e3:1f:
         31:e3:7a:0b:f1:ae:09:b8:8a:8e:1f:69:13:3c:68:b5:64:9d:
         90:ac:f2:0b:79:89:55:74:4f:f4:14:81:dc:a6:5f:43:70:ba:
         7b:b1:cd:b2:99:f4:15:18:fe:12:4a:31:0d:e1:60:aa:76:59:
         26:60:7d:00:36:25:04:34:95:0f:8e:29:9c:ec:3b:12:37:46:
         ff:6a:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:31:16 2026 by rpki-client