Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5/68660331-58a1-356e-8772-9d6b58721fdd.roa
File:                     68660331-58a1-356e-8772-9d6b58721fdd.roa (raw, json)
Hash identifier:          hiMtFgcr4M1LxecOXUlagwNboM8dROjloT1WPtOyBTU=
Subject key identifier:   A0:99:84:BE:32:FA:00:E2:BA:EF:DA:A5:8C:63:1E:3D:30:11:80:5B
Certificate issuer:       /CN=7548a048-8730-44a7-b12c-ce3b55abf6e5
Certificate serial:       010D0C9F4328584F674B9A3B64EC74FE7EB9D780
Authority key identifier: 2D:30:0C:EA:AD:C3:D2:E5:65:EB:16:C9:42:B4:E6:55:2E:4C:D1:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5/68660331-58a1-356e-8772-9d6b58721fdd.roa
Signing time:             Mon 05 Oct 2026 17:36:02 +0000
ROA not before:           Mon 05 Oct 2026 17:36:02 +0000
ROA not after:            Sun 03 Jan 2027 18:36:02 +0000
asID:                     32363
IP address blocks:        199.34.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5/7548a048-8730-44a7-b12c-ce3b55abf6e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5/7548a048-8730-44a7-b12c-ce3b55abf6e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:4b:9a:3b:64:ec:74:fe:7e:b9:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7548a048-8730-44a7-b12c-ce3b55abf6e5
        Validity
            Not Before: Oct  5 17:36:02 2026 GMT
            Not After : Jan  3 18:36:02 2027 GMT
        Subject: CN=635923ad-6b9b-420c-9adb-86f999ef6480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:e4:00:ef:a9:42:4f:7f:ee:56:72:81:03:
                    25:49:b5:12:aa:19:b1:56:63:5f:a1:58:01:55:56:
                    96:4f:2a:c7:31:ee:1c:24:10:81:17:1b:4b:9d:dc:
                    26:52:40:38:a9:c3:d4:02:97:26:8c:f3:df:3d:49:
                    79:a7:ae:93:f1:02:77:25:87:2d:a2:30:e5:f2:3f:
                    70:2b:66:42:8d:e4:ca:54:17:2a:9b:e0:2a:48:1d:
                    a6:37:4f:60:92:d4:ec:ad:a0:9a:42:0c:77:6c:27:
                    4e:09:23:e4:a4:8b:c2:84:65:ca:8b:a7:fd:0c:70:
                    f0:fb:35:15:dc:43:69:a8:fe:e0:4e:d6:18:4f:52:
                    9c:3e:89:ba:c3:d5:b9:37:e0:18:1b:ef:66:2a:88:
                    15:bb:b9:f5:91:91:8b:8f:16:ab:80:f1:bd:e8:2c:
                    99:82:63:fd:eb:b2:58:b0:66:1a:7b:cb:74:f8:a2:
                    fd:77:f0:d4:43:b5:b4:5d:3e:60:99:7c:59:50:c1:
                    6a:5f:8c:a9:9d:2d:60:34:a3:f3:00:f1:22:47:c5:
                    eb:cb:4c:f6:5d:14:20:5c:9f:aa:e5:ff:1a:fe:e8:
                    03:5b:92:6e:e7:44:5e:6d:45:39:85:7d:c1:80:1e:
                    cf:ea:81:eb:76:18:e3:39:14:53:69:df:12:e9:5a:
                    13:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:99:84:BE:32:FA:00:E2:BA:EF:DA:A5:8C:63:1E:3D:30:11:80:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5/68660331-58a1-356e-8772-9d6b58721fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5/7548a048-8730-44a7-b12c-ce3b55abf6e5.crl

            X509v3 Authority Key Identifier:
                keyid:2D:30:0C:EA:AD:C3:D2:E5:65:EB:16:C9:42:B4:E6:55:2E:4C:D1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/7548a048-8730-44a7-b12c-ce3b55abf6e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:56:e2:0e:ba:79:7f:4e:40:28:cd:72:00:41:b9:e1:1e:82:
         68:eb:ae:ae:8e:52:d0:77:31:6f:af:69:64:ff:fe:be:98:f5:
         fb:df:c7:f5:85:3a:1c:95:95:c5:01:4a:ad:26:70:69:9c:5a:
         40:fc:ff:ab:31:35:d4:a6:ab:66:de:3f:1f:b9:c2:56:00:86:
         eb:d3:ad:1f:3d:e5:fb:56:e3:6a:82:44:a4:16:ab:85:47:1e:
         31:8e:62:bf:1a:67:f8:2b:76:be:27:da:85:ff:df:04:5e:e4:
         4e:aa:5b:20:de:7a:1d:c7:b4:ad:d4:52:cf:98:13:c4:7b:ce:
         4b:ff:14:45:b2:1d:b2:24:99:17:eb:4f:39:87:31:bd:7c:3c:
         be:50:85:28:a7:25:f9:6d:6c:01:62:52:00:e4:b0:de:49:3a:
         d2:06:0e:ef:53:50:fb:e5:28:0d:f5:ff:26:d7:9f:c9:58:c9:
         20:5f:3e:aa:76:98:e7:2a:19:44:09:61:9a:cc:9b:84:52:b8:
         10:68:77:8f:18:fb:0b:c7:ee:19:9c:28:db:97:22:78:94:bb:
         3f:d0:90:65:27:23:fc:39:4a:aa:7f:24:af:02:54:91:b8:4d:
         10:cf:37:04:28:f1:91:da:1d:8a:29:e7:61:d5:dd:89:66:05:
         cc:d4:27:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:34:15 2026 by rpki-client