Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa
File:                     36234625-4a26-3605-90a3-4b465a3b61b7.roa (raw, json)
Hash identifier:          wdDLgiedPp04RHxx86hfYBcqiW8eA4hoj0gEEAfoyy8=
Subject key identifier:   B9:B2:EC:64:51:8D:97:2F:56:0F:93:58:DF:E0:25:28:7C:07:9B:FC
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584D3B34DE3B926E17C6379A89D0
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     4476
IP address blocks:        192.68.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:de:3b:92:6e:17:c6:37:9a:89:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=29a2d110-362c-4e65-a3a5-56c06d3c8db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:f6:ff:1c:a4:19:ea:7e:3d:0f:7d:5d:06:
                    22:16:a9:46:73:b8:a9:a3:e3:78:82:fd:64:7d:24:
                    6f:bc:19:2e:ae:4a:0a:f3:22:4e:48:ec:ed:71:76:
                    4c:18:0d:3b:b1:17:97:fe:3f:87:d9:2d:ed:7f:d4:
                    89:92:33:e4:56:65:50:0a:45:4b:60:dd:04:5a:5c:
                    cb:b2:af:2b:b6:f3:1e:d1:0d:c0:c4:d7:bf:b4:c2:
                    0a:25:bb:f2:28:0e:03:a2:54:ad:b3:48:1b:c5:d0:
                    c0:ab:45:0c:72:ef:c8:69:74:f0:3b:33:c7:0f:ee:
                    d5:1c:68:00:eb:61:84:c3:c4:5f:92:3b:fb:ce:98:
                    35:75:3d:81:46:67:0d:45:25:59:47:af:69:95:22:
                    7e:16:84:f4:64:9d:ac:e8:ff:13:bb:63:d5:1a:de:
                    cb:25:eb:81:29:1d:21:06:0d:ad:13:53:57:bc:cc:
                    ad:f5:91:60:76:55:b7:5d:ea:79:e3:27:1e:cb:80:
                    00:ee:bf:1f:f6:03:c3:20:63:52:46:f8:7c:70:e7:
                    c5:5c:e9:44:6b:51:6c:2e:6d:16:9b:15:5e:34:aa:
                    ad:c9:5f:a1:10:ce:96:68:8b:27:ed:6d:1a:dc:50:
                    6b:fa:7d:b8:16:31:52:26:a9:e6:df:eb:2a:f2:b8:
                    59:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B2:EC:64:51:8D:97:2F:56:0F:93:58:DF:E0:25:28:7C:07:9B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:db:1a:95:b2:88:1f:58:fc:40:08:83:f3:0b:e7:e4:25:
         84:53:0e:80:c7:e4:0c:4c:a1:db:7b:35:79:b5:dd:6f:5d:be:
         97:27:6a:b0:c8:4c:f2:ad:5b:cd:08:e3:28:4e:3d:b3:df:5c:
         04:94:c1:a0:37:b9:7c:be:fc:c8:31:69:b5:14:79:0e:3f:ea:
         41:be:11:44:e8:b7:45:1c:c8:9e:14:d9:17:b7:6b:db:ce:e8:
         19:de:d0:21:fc:75:ab:09:be:61:b6:bb:0c:78:c1:73:47:04:
         4f:a2:c2:70:66:24:fd:45:43:66:75:94:c0:7e:3d:ed:d7:07:
         c0:a5:c6:66:df:1e:a7:f8:c1:b2:47:f5:86:a1:b5:0e:79:f2:
         ae:4e:b4:f1:d9:7b:c1:6f:7c:07:67:8c:79:6f:71:9a:da:a9:
         bc:c9:61:0b:ff:2a:d2:3e:6a:82:6f:3e:f3:c4:41:76:4d:50:
         ed:2c:ba:53:2b:3a:b6:dc:3f:37:8c:d0:91:d0:4c:22:d1:4b:
         a9:b4:38:2a:c7:87:9c:e6:20:df:d7:52:6e:58:6d:8c:5c:fd:
         a6:01:69:fa:1e:ad:d2:3d:9b:21:47:57:14:bb:87:16:1c:1e:
         43:1e:0f:7c:f8:60:7d:15:98:8a:d0:1a:68:bb:08:d5:8a:f6:
         f3:78:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:19 2026 by rpki-client