Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28aa0793-79b3-387b-a9a1-3151df5c16bf.roa
File:                     28aa0793-79b3-387b-a9a1-3151df5c16bf.roa (raw, json)
Hash identifier:          WO/TIWL8Kt5H0U1JnIFS1y0E6+AXXCNpZvcDdlmfN3s=
Subject key identifier:   F1:1A:A2:4B:B3:49:65:F1:08:19:02:05:BB:8F:8A:5F:F9:81:C9:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E61452D201872B64B0E7B7900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28aa0793-79b3-387b-a9a1-3151df5c16bf.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     7725
IP address blocks:        68.62.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:2d:20:18:72:b6:4b:0e:7b:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=11571886-e403-4e81-9ca0-884de341f06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d0:b2:40:46:b3:79:27:3c:0d:e4:49:e9:4b:
                    45:65:62:6c:26:41:db:38:b0:97:79:87:c4:09:68:
                    01:d0:ea:43:b0:39:88:86:cc:44:ee:4e:a4:9f:7f:
                    79:f2:e9:25:b9:a6:86:0b:78:84:33:86:fd:84:29:
                    ab:6f:c0:ea:7d:20:c3:f9:04:04:0f:61:08:6c:d5:
                    33:76:de:a8:d5:d3:a0:ea:be:f9:9c:34:90:40:19:
                    34:5b:85:f0:88:9a:01:0a:37:8c:d8:03:9b:91:d8:
                    9f:dd:6c:81:af:7b:19:42:63:38:17:49:05:cd:1b:
                    eb:b2:ac:01:9b:ac:45:0e:da:79:45:97:6d:d8:06:
                    0e:60:e2:8d:b0:c8:0d:ac:fd:52:5b:cd:37:03:5b:
                    b1:55:5b:be:d3:c3:b8:fc:dc:99:0d:a7:3b:3a:8a:
                    c8:f9:1d:c3:b7:b8:73:33:c6:b2:a2:95:03:2f:7d:
                    82:40:d4:d5:94:8d:79:5f:8f:e3:b4:40:d2:93:03:
                    78:ed:fd:d7:b2:ac:48:50:dd:2e:98:b4:bb:f0:52:
                    fa:7d:13:0d:01:ef:59:3a:7a:dd:6f:bb:27:91:e4:
                    76:06:94:62:6a:e5:7d:08:e4:84:9b:ee:e7:b8:78:
                    29:3b:a7:db:1f:53:c7:10:7a:4b:72:82:2b:81:3a:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1A:A2:4B:B3:49:65:F1:08:19:02:05:BB:8F:8A:5F:F9:81:C9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28aa0793-79b3-387b-a9a1-3151df5c16bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.62.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:88:8b:4a:ba:f3:27:99:ca:bb:b7:10:45:9f:ad:a8:1c:2e:
         0b:c4:5a:93:10:31:3b:bf:e5:fa:5c:a2:6b:e8:29:0f:06:7b:
         a7:38:1a:41:54:de:ab:8a:d9:44:43:41:1b:97:ca:c7:41:bc:
         9b:e7:ea:bd:d7:7a:21:55:6a:e8:39:83:05:8f:2e:b0:24:16:
         54:38:59:51:9c:36:a1:d3:81:83:80:c3:f9:a1:bc:3f:e1:ff:
         d2:b6:25:f0:8d:1a:c5:5f:67:eb:cf:18:f3:ab:95:22:9b:b6:
         f9:f2:bc:a9:0c:16:93:bd:fd:84:16:ed:95:9e:b8:b7:8b:6b:
         51:f2:83:f9:0c:ae:d1:58:ec:40:6f:76:d8:d5:ad:5a:e3:f9:
         82:06:96:f0:e0:ed:3b:bb:99:61:cf:cb:d4:10:21:56:1f:be:
         6b:fd:93:4a:7c:55:6e:da:ae:05:e1:d4:2d:aa:9e:d4:78:1e:
         f4:75:02:43:5e:49:7d:50:7a:3b:d3:0f:57:64:36:5a:bb:8e:
         0c:39:1e:16:8e:40:86:73:7d:6d:95:70:4a:43:f6:d2:9c:34:
         67:c3:11:9c:56:ae:32:0e:2a:e0:e1:54:bc:1b:da:77:6a:b7:
         be:b8:63:87:2f:59:30:e6:e0:4f:83:29:2e:fc:71:be:19:92:
         74:98:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:33:43 2026 by rpki-client