Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32c13755-c59c-3426-8751-940e42a865e8.roa
File:                     32c13755-c59c-3426-8751-940e42a865e8.roa (raw, json)
Hash identifier:          zNijdZjyWql/4J4/z+YWf3ZAVZkdkK7AS1AHr22OoZs=
Subject key identifier:   2A:69:91:E6:AE:96:24:A5:0E:FE:04:DB:33:CE:46:FA:A4:3D:FF:20
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4989445C4C0D5872D3B17238
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32c13755-c59c-3426-8751-940e42a865e8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9304
IP address blocks:        68.165.106.0/23 maxlen: 23
                          68.166.188.0/23 maxlen: 23
                          68.167.64.0/23 maxlen: 23
                          68.167.68.0/23 maxlen: 23
                          68.167.70.0/23 maxlen: 23
                          68.167.144.0/23 maxlen: 23
                          68.167.182.0/23 maxlen: 23
                          68.167.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:44:5c:4c:0d:58:72:d3:b1:72:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f25226ac-2a1d-430d-9f28-ab1b44e3e938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:ec:7e:85:90:6d:73:b5:30:8f:4a:86:b3:
                    d3:9f:0b:29:58:ef:4c:f9:8a:5e:bd:c9:62:94:e4:
                    67:74:a9:aa:4e:b9:f5:8b:5b:70:65:11:43:31:ac:
                    14:01:34:9b:21:13:d9:ff:a7:c5:a8:69:2e:3c:61:
                    73:3b:37:92:b8:5f:07:11:18:5a:eb:e3:e8:2f:9c:
                    0e:ef:b4:4d:01:4e:7a:25:ca:f4:66:41:7f:63:a7:
                    75:7f:e0:b0:31:af:0d:b8:8a:14:ed:4e:cd:5c:e8:
                    79:66:93:bd:89:1b:e2:97:48:05:6e:cc:28:05:20:
                    3e:a3:7d:0f:7c:78:24:82:26:2c:e7:46:72:38:2e:
                    38:cc:c3:ec:b6:b1:2f:0f:3a:56:2d:e7:16:f0:53:
                    23:55:61:25:3e:37:b9:35:61:91:5f:da:a1:a1:49:
                    32:0a:59:d1:ca:5b:88:2a:52:7a:4e:cc:5e:cf:a6:
                    7c:e4:db:71:8a:d1:5a:49:c4:af:68:a6:bc:2f:0d:
                    44:79:4d:00:59:9a:33:d0:53:a3:51:cf:db:c1:22:
                    e9:68:71:7d:25:77:ca:17:ac:ce:47:57:aa:9b:87:
                    00:7a:19:c3:88:f6:ab:fd:75:9e:9e:1b:5a:a1:c2:
                    73:9f:c3:fe:33:e3:25:77:d8:f5:64:2e:4c:d3:bf:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:69:91:E6:AE:96:24:A5:0E:FE:04:DB:33:CE:46:FA:A4:3D:FF:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/32c13755-c59c-3426-8751-940e42a865e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.106.0/23
                  68.166.188.0/23
                  68.167.64.0/23
                  68.167.68.0/22
                  68.167.144.0/23
                  68.167.182.0/23
                  68.167.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:b5:b4:59:57:26:31:7d:3f:b7:5c:2c:12:0f:08:75:50:
         e1:5b:61:35:c0:a5:81:fc:d8:c2:0f:ea:1d:87:83:c8:c2:db:
         05:a9:d6:9e:9b:c9:1c:38:d8:cc:7e:f9:a4:0f:a6:9a:39:bd:
         2b:0f:4c:c5:8b:c1:90:82:41:08:d2:4c:03:e9:c1:36:42:2a:
         24:3f:ca:60:a6:57:d3:6f:d9:63:3d:69:e0:84:97:3c:aa:08:
         91:10:7a:3d:06:11:5b:67:36:00:13:be:28:79:21:43:16:7d:
         44:71:ee:b0:f3:92:4b:d1:c5:92:25:d9:ea:c2:87:f7:c9:44:
         a3:35:c6:db:46:05:65:1a:e8:80:42:86:80:45:af:f0:66:7f:
         48:d7:b7:fb:b4:30:6d:e4:f4:a3:34:b0:b0:f0:49:15:73:f4:
         c9:95:3c:47:c3:1d:ab:96:59:c8:6d:0e:22:5c:0b:80:4a:86:
         df:cf:4c:c1:d2:d5:8c:b7:45:66:0e:5f:36:c3:79:f3:5f:25:
         43:65:8e:94:4f:77:62:3b:1c:1a:f9:19:c4:7e:d6:bd:38:5e:
         c5:7d:10:80:e9:7d:b4:ae:8c:bd:91:6d:db:dd:d3:02:19:d0:
         d1:91:8d:2f:96:07:e6:27:4c:4f:3f:32:81:e0:71:f0:06:b5:
         75:3d:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:34 2026 by rpki-client