Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ddb1def-7c61-3864-9658-671507345f25.roa
File:                     2ddb1def-7c61-3864-9658-671507345f25.roa (raw, json)
Hash identifier:          e1KUtNvEygIFqzChmXxjvNzRbBk/NKCN23yY7M3IZ5c=
Subject key identifier:   1F:0B:DA:15:39:9D:F0:BB:C7:5D:40:28:02:0A:58:6A:44:11:3A:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED861F8D0B2F2E5F438545380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ddb1def-7c61-3864-9658-671507345f25.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        67.168.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:f8:d0:b2:f2:e5:f4:38:54:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=95bcddb5-eec9-4547-a92d-cc229362506e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:65:18:ec:eb:87:0e:ed:f3:2a:e8:7f:3f:
                    5a:c7:69:b6:c2:48:1e:9c:fb:a4:9b:3c:7d:42:de:
                    48:a4:27:15:09:9b:d3:94:77:e7:66:53:5f:75:82:
                    78:76:6b:ca:c8:2b:68:fd:75:18:be:6a:ce:31:03:
                    fc:ee:7d:20:89:e4:64:92:76:b4:9d:c2:6e:6b:36:
                    bf:74:4d:02:c9:57:b1:f8:4d:0f:7e:2d:e4:ca:af:
                    48:e1:fe:90:c0:98:33:a7:bb:36:84:33:b0:a7:c0:
                    2a:a9:0f:de:43:75:aa:8c:33:a9:f2:60:8e:07:f5:
                    61:40:12:85:f1:fe:9b:88:44:1b:a5:ce:b2:74:96:
                    f4:81:74:8a:73:b5:a9:55:67:64:ab:24:57:eb:dc:
                    f6:85:ed:de:55:e2:07:e5:53:ed:29:cb:4e:aa:c1:
                    1a:76:d7:2b:49:a7:7d:95:7d:ce:97:a4:90:91:68:
                    2e:34:e9:6c:09:df:ee:1b:c8:f4:86:83:e2:1d:bb:
                    f4:65:5a:15:32:df:56:25:5d:4e:88:4c:6d:40:4f:
                    7a:28:48:ca:b4:bd:6f:72:f7:0b:6d:1d:32:60:a6:
                    ce:38:1d:00:6c:33:2b:91:cd:68:ce:24:57:20:67:
                    38:2b:be:73:7a:a7:c6:9a:84:07:cd:ce:76:b7:13:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0B:DA:15:39:9D:F0:BB:C7:5D:40:28:02:0A:58:6A:44:11:3A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ddb1def-7c61-3864-9658-671507345f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.168.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:81:1c:1d:05:3b:69:80:80:78:42:d2:67:98:8f:84:57:
         fd:6f:e7:b2:ba:78:2c:74:3e:6d:f8:11:3b:af:95:48:f3:b1:
         e0:af:ec:3d:ce:c8:9b:7f:bc:b1:1a:be:bd:5c:15:4a:11:ae:
         6d:7e:89:5b:e4:15:33:49:9a:f9:0c:29:41:5c:a2:41:9e:ad:
         1b:ea:0b:c5:63:1c:f3:bb:e1:f3:fc:0e:29:43:c1:6e:85:a7:
         99:ee:df:98:a6:98:de:52:5b:77:63:0a:92:b1:18:70:86:6d:
         4e:de:87:ac:25:fd:13:46:d8:69:6b:9c:c4:3a:4a:28:bf:c7:
         42:14:d9:14:e3:f3:46:99:be:d9:b8:58:02:1c:d7:71:20:b7:
         d3:c8:41:de:cc:64:e6:aa:b1:71:e4:bb:40:38:11:a3:7a:b1:
         2f:5d:1c:17:e9:28:3b:6a:0c:33:c3:ae:97:d4:5a:9a:cc:0e:
         e5:46:35:b8:b0:36:eb:f9:9d:01:8a:8a:01:a5:61:38:d9:59:
         e7:83:79:6c:b4:46:ea:57:e0:24:94:2d:ad:ca:27:21:c5:23:
         e3:9d:23:06:64:a4:1f:2b:a3:a1:30:03:36:a8:6e:9b:80:c4:
         c8:3e:00:04:37:97:b7:28:8d:a6:0f:50:5b:6e:41:cf:f7:d6:
         9b:57:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:50:16 2026 by rpki-client