Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e0db787-1e2a-37d1-9fb5-d40cc19ffe10.roa
File:                     4e0db787-1e2a-37d1-9fb5-d40cc19ffe10.roa (raw, json)
Hash identifier:          ZdV7DWmgUl5aGNjumjsBEiYpSWm305lg5tKTRO6gSxM=
Subject key identifier:   44:EF:FC:4F:A5:E2:76:D7:0B:55:AB:F7:32:88:54:73:F2:A1:95:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4978FA645B99A9509D64D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e0db787-1e2a-37d1-9fb5-d40cc19ffe10.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7015
IP address blocks:        68.85.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:fa:64:5b:99:a9:50:9d:64:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bf21d141-fca1-4de0-a2bb-6c992d7d8f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:e3:c5:02:28:5c:b4:3c:1c:ec:03:81:38:
                    f8:fd:6b:9f:8c:b5:23:f8:a1:5e:0b:80:e3:2b:bb:
                    29:fa:33:ed:52:69:ec:17:3d:c3:26:d0:9b:d3:6c:
                    21:0f:8b:35:84:d7:36:76:16:1e:67:15:b9:18:62:
                    91:1c:bc:58:87:42:10:30:5a:c1:29:21:62:07:4a:
                    96:ee:50:51:d3:aa:b2:98:c0:21:42:87:c5:ce:87:
                    3d:d9:10:9c:8b:cd:37:cc:d5:36:54:29:32:0f:53:
                    d2:81:8c:60:5a:e6:82:11:2b:75:f8:3f:01:36:c6:
                    a9:80:7e:25:ae:39:5a:0d:77:bc:e2:37:75:f8:3a:
                    e2:54:c1:fc:e0:6f:f5:5d:24:7f:d9:94:be:3d:26:
                    18:15:0e:e0:87:80:8c:2c:dc:38:c1:f9:c5:4e:c7:
                    89:34:e9:89:7b:c8:87:a9:a8:48:ca:b4:7c:9b:56:
                    6a:51:39:18:2f:56:2b:fe:9b:8e:2e:cc:18:5c:2c:
                    2f:6e:52:c4:59:8c:ad:1b:c4:5c:48:07:65:58:3d:
                    04:0d:8c:86:1f:89:ed:a0:a4:bc:8b:c1:8f:71:87:
                    66:10:0d:9d:ee:19:a4:e7:8c:cb:6d:a5:78:8f:20:
                    86:6a:df:d4:3e:27:1a:ca:27:07:0a:e2:da:66:85:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:FC:4F:A5:E2:76:D7:0B:55:AB:F7:32:88:54:73:F2:A1:95:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e0db787-1e2a-37d1-9fb5-d40cc19ffe10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:08:dd:95:76:5d:39:00:4f:96:67:37:cf:e9:00:96:9b:87:
         f0:5d:94:99:56:68:b6:4d:ea:25:60:8a:9b:7e:cc:a3:17:53:
         75:a0:44:8b:9f:ce:42:41:0e:86:10:2b:85:fb:a3:3a:e4:b8:
         3b:e8:6c:e8:f3:60:2c:82:e3:d8:7e:37:58:ac:8d:9d:15:84:
         7c:7e:e5:c4:9a:e2:26:76:88:ef:41:49:7b:3b:a9:50:68:4a:
         7f:1a:70:2e:e5:65:a3:af:76:1c:96:fe:f9:07:7a:20:96:c0:
         ad:2a:50:79:17:60:f0:6f:51:90:e1:5f:a9:63:ef:42:d0:5f:
         03:c5:79:ed:6b:25:42:1e:3d:06:8d:fa:21:3e:46:7b:fb:50:
         28:96:2b:7e:0f:c6:dd:58:99:68:cd:dd:6d:bb:a2:44:7b:d6:
         db:a3:3d:67:9e:62:4e:67:c8:07:d0:fd:ba:4b:3b:a8:a6:57:
         f6:62:1d:3f:aa:d9:3b:7e:0e:55:e4:7c:47:05:95:b4:01:d9:
         5c:4c:cf:85:68:9a:4e:61:96:aa:9d:36:8e:30:b0:35:0f:c1:
         d8:21:f6:26:b0:03:9c:fd:e3:bb:45:13:17:f8:b7:56:20:e4:
         df:87:ca:20:f4:65:0c:e2:0a:25:ea:c0:07:72:b8:8e:be:5e:
         99:f6:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:57:53 2026 by rpki-client