Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617545-861e-3cb4-a052-f3daf9a6c299.roa
File:                     03617545-861e-3cb4-a052-f3daf9a6c299.roa (raw, json)
Hash identifier:          V4p27UCgxtn/03eFhjOoj0PL5wUAVv+JSXV7ByiteKg=
Subject key identifier:   A0:12:80:7E:41:97:A5:10:7A:D8:07:4C:18:5D:AB:FE:26:9F:2D:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4E6F95D2FE769A6B33E500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617545-861e-3cb4-a052-f3daf9a6c299.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        68.54.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4e:6f:95:d2:fe:76:9a:6b:33:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=c7bcc17b-44a0-4dc2-a1db-35d1f3483a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:a6:7b:50:41:a0:30:bb:76:15:5d:2a:8c:
                    8f:02:43:1a:30:61:a9:65:3e:3b:1f:d1:0d:3b:b1:
                    19:8e:19:9c:93:b2:54:be:1e:03:71:84:9f:c7:cb:
                    7f:54:85:c8:e5:6d:85:cc:84:0f:00:21:71:6b:ec:
                    b1:60:5a:86:8d:cf:94:0b:62:f4:17:fc:0d:59:d7:
                    79:01:75:78:91:00:18:c9:5e:02:58:70:04:6d:ad:
                    fe:b1:7d:cc:ae:1c:29:5c:c6:46:03:55:63:bc:37:
                    e8:fd:e9:a4:a2:6f:f5:7b:e8:97:93:86:80:a8:7b:
                    ed:22:89:7b:9b:2c:cf:b4:e4:77:e6:3e:e4:02:95:
                    d6:e9:a2:47:e0:d8:b0:ff:60:b4:87:c4:b4:a3:f6:
                    d4:6b:1a:21:63:cb:7f:f3:4b:e1:49:d8:ee:c7:29:
                    0b:65:70:c6:eb:52:ab:44:e2:ed:52:c9:1c:60:ae:
                    cb:0a:18:3b:af:bc:4f:46:ca:b1:62:7e:95:37:ed:
                    e4:66:71:f1:34:4d:e5:bc:32:e0:2d:db:16:b8:be:
                    a3:06:f5:4c:22:a8:76:13:ad:c1:bf:81:41:4c:dd:
                    ea:46:19:23:03:30:65:7c:40:2d:15:d5:91:d0:c9:
                    f3:0d:51:15:bb:50:70:5c:ce:81:e4:79:01:5f:4a:
                    dd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:12:80:7E:41:97:A5:10:7A:D8:07:4C:18:5D:AB:FE:26:9F:2D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617545-861e-3cb4-a052-f3daf9a6c299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:5f:2e:8c:a2:e8:0f:cc:f6:c7:a9:75:97:ab:d6:03:93:a0:
         e1:d9:2e:6a:42:3b:03:6f:6c:28:9d:fd:04:3a:05:e6:f7:be:
         75:ac:a1:df:dd:fd:9a:3d:96:fb:b2:e8:97:cb:ce:cd:5f:89:
         da:01:92:50:e7:25:cb:96:2f:ea:b0:e3:0e:43:50:90:4d:b6:
         69:94:a6:8f:08:36:d3:82:2a:8d:78:7c:b2:02:45:9b:06:62:
         7f:bb:a7:d1:b8:38:f7:7c:79:4b:30:ff:c0:41:c3:e5:e6:10:
         5c:e1:d6:c3:06:9f:14:ff:ac:bb:91:0a:c3:9d:15:82:31:5d:
         ad:96:de:90:ee:d0:4e:bd:64:2d:bb:e9:a6:4e:30:f2:2b:29:
         db:b5:d5:bd:ed:7c:ac:be:34:31:1a:58:b5:e0:29:04:7b:5a:
         32:9d:dd:5b:01:87:4f:b9:87:d1:62:d7:d0:66:3f:13:bc:b1:
         c2:41:ce:d0:59:7d:a3:cb:ed:ac:3f:6a:e8:a8:e1:a5:f4:d8:
         5e:e4:12:27:f3:69:82:53:df:5c:7c:b5:dd:3f:bc:70:6e:17:
         a4:eb:3d:4c:5a:b2:78:75:27:31:e5:6c:91:ea:2a:28:66:b3:
         53:6e:9c:8d:30:27:a2:d5:20:0c:e5:28:e0:4d:5a:3c:0f:e7:
         6f:2c:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:02:43 2026 by rpki-client