Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d47b61-d0a0-3339-9189-dba06cb68759.roa
File:                     68d47b61-d0a0-3339-9189-dba06cb68759.roa (raw, json)
Hash identifier:          oGXES7fxVFK5dzFddZVW4g3QlSwkDePOAnT0imGefHs=
Subject key identifier:   75:D4:38:0D:99:A4:DF:B1:9A:29:21:D4:96:9C:60:CC:11:D8:F4:1B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E885A58A9F2BDF0A9EAEB4780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d47b61-d0a0-3339-9189-dba06cb68759.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        208.76.71.96/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:58:a9:f2:bd:f0:a9:ea:eb:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=a6a16144-1518-4ef2-8842-766a578cbfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:15:fe:52:50:d6:8b:fe:82:54:5a:77:2a:
                    8c:38:5b:e0:71:0f:c7:fa:19:c2:e3:bf:4d:90:3d:
                    07:4f:f4:97:a1:bf:3d:9b:bd:14:1a:d3:07:a4:fa:
                    cc:d4:60:07:ee:74:46:97:16:09:ae:e4:f5:4d:56:
                    82:ad:a7:e4:5f:1c:2e:59:98:97:2e:80:bc:54:ed:
                    b9:b4:3f:54:94:18:5c:c5:2e:91:e5:c3:02:67:82:
                    41:42:f5:6c:73:64:95:01:22:f6:8a:aa:4a:f3:9c:
                    5a:05:c8:f9:64:a5:4c:07:ee:85:5f:32:2b:28:71:
                    bf:bd:19:7d:80:1d:68:9a:7b:38:5e:6d:41:12:db:
                    5b:68:53:f4:6b:cc:9a:21:22:5b:4b:0a:9d:34:9d:
                    ff:71:8c:9f:72:ab:03:3b:3a:47:b8:52:36:cb:2c:
                    5c:85:6e:27:59:87:48:5a:1b:69:5c:18:8b:fc:3c:
                    6f:d3:2a:ba:15:53:a2:d8:ce:e6:c5:32:98:57:bf:
                    45:95:ae:ae:20:85:da:5c:d0:5d:ec:a1:5e:2c:a9:
                    2d:62:d0:ed:2e:e1:9c:ec:51:b6:b0:15:c7:5e:3e:
                    18:7f:55:93:33:ed:7e:a4:42:1e:02:c0:25:64:68:
                    6e:1e:5d:c2:dc:28:69:fd:1b:73:29:08:7b:b0:a9:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D4:38:0D:99:A4:DF:B1:9A:29:21:D4:96:9C:60:CC:11:D8:F4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68d47b61-d0a0-3339-9189-dba06cb68759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.71.96/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:69:0e:b7:28:80:cc:ee:92:f8:e8:82:be:17:0c:7a:ed:31:
         e9:1e:e0:df:e9:07:3c:35:45:25:80:30:9f:bb:51:df:8c:25:
         f9:9b:b2:37:6e:aa:34:fa:42:ee:73:d8:c0:46:57:f7:15:6f:
         90:94:4a:af:74:c0:a8:f7:75:84:66:0d:14:3d:d5:20:7b:32:
         d1:7a:87:a6:26:43:6e:c9:f3:3f:9d:05:ca:63:50:d3:54:ae:
         0e:f7:31:a1:fe:8f:bb:b0:fd:a7:7b:07:ae:42:d8:1b:bb:e4:
         87:b6:e9:ec:d2:ba:5a:c0:f6:80:43:a1:50:eb:b4:1b:f9:db:
         ca:57:94:f8:12:d7:6e:61:b2:53:7c:2e:da:65:7f:94:32:21:
         f8:eb:91:d5:5d:e8:82:0c:86:30:a8:16:b4:4c:0a:ac:8e:a2:
         13:cf:89:09:55:4f:36:14:b4:1c:72:73:80:b5:f0:4c:a1:25:
         c3:ab:36:d1:ee:a1:e2:ad:db:41:08:bb:76:ae:15:dd:98:9f:
         a7:17:70:34:80:a8:b5:0a:29:ac:7e:4c:fa:e3:dd:6f:e9:e8:
         e6:28:06:71:47:76:2f:28:42:70:15:bb:0e:c4:f4:92:dc:25:
         30:c7:51:d9:fe:a1:01:30:84:3b:54:70:e4:7e:f1:e2:68:75:
         ee:de:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:03 2026 by rpki-client