Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576535b1-dbc1-3c91-8301-f73e230f5531.roa
File:                     576535b1-dbc1-3c91-8301-f73e230f5531.roa (raw, json)
Hash identifier:          n3vjbyFtVzGSXdykf5Hylc3DuaerOrNFM7tGWXJW2Nc=
Subject key identifier:   30:A1:F8:65:C5:70:6F:30:80:29:CB:4B:68:23:7C:C3:DF:32:41:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3A68961D47B8255B015880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576535b1-dbc1-3c91-8301-f73e230f5531.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33659
IP address blocks:        68.83.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:68:96:1d:47:b8:25:5b:01:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=2607b7eb-d0d8-458a-9b4d-b0369a5bde06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:2a:87:68:a7:68:cc:a8:59:d8:2c:b5:66:
                    18:31:85:49:b8:45:10:5b:6b:76:24:82:4d:29:2d:
                    0f:ad:4f:d0:33:66:84:8a:5c:1c:41:dd:8c:98:13:
                    ea:e8:79:ec:8c:ac:e1:2c:d5:f7:72:1d:41:4e:d9:
                    89:d3:7d:da:ae:2a:46:3f:48:25:14:45:ee:55:49:
                    a2:c6:c6:58:a7:12:51:95:f7:62:5d:a0:a1:08:92:
                    5a:02:02:0a:c9:40:a8:76:6e:d5:85:7f:de:59:99:
                    9e:f6:e7:fb:19:ff:92:67:a9:1a:11:15:f6:19:f0:
                    d7:a3:92:59:40:bc:45:25:06:f8:2d:18:04:94:c9:
                    3a:20:7b:95:c4:e1:12:2a:c5:f6:a7:93:88:6c:4e:
                    36:c2:bf:45:49:8a:0c:85:e1:2c:3a:d5:ce:90:90:
                    09:a5:0f:5e:d3:d0:76:3e:08:9d:c8:c1:46:f5:b6:
                    01:83:18:a6:83:b7:8e:d6:7a:69:bb:06:d4:0e:80:
                    f7:18:ff:51:f5:b0:d4:21:44:eb:16:10:b9:d2:01:
                    02:a4:20:a9:f1:d3:c8:32:47:79:ad:20:f7:78:e5:
                    71:81:af:65:2d:a7:1f:c7:03:9b:6a:f2:70:d6:68:
                    30:bd:8a:a9:ee:28:3d:4d:2f:3b:8e:f7:6f:0d:74:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A1:F8:65:C5:70:6F:30:80:29:CB:4B:68:23:7C:C3:DF:32:41:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576535b1-dbc1-3c91-8301-f73e230f5531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.83.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:97:ef:de:cc:ec:0f:e2:53:31:60:c6:f1:d7:db:0a:af:f2:
         e3:34:fc:c8:4f:31:28:3c:5a:de:d1:cd:64:d5:53:d4:a1:54:
         0d:16:9f:c4:a9:d3:d2:f2:6c:6d:62:24:ee:ad:07:d9:95:69:
         5d:bc:92:5d:03:0f:71:f5:d1:77:11:a3:81:30:55:75:8b:7e:
         b8:cf:03:a2:3f:81:2b:8f:b8:c3:06:a8:88:fe:22:8c:8e:40:
         45:90:9b:17:e2:6e:0e:ba:10:b4:2b:2f:d2:cd:46:a1:35:78:
         e9:c8:49:86:36:6f:23:3d:4a:93:1e:41:9e:38:b6:cc:3d:7b:
         ca:d8:26:df:ea:a3:79:ab:55:5e:b4:3d:9f:71:6a:18:23:c6:
         37:f4:13:b1:3b:a6:f1:28:43:90:fc:68:e9:d7:d7:8d:c5:85:
         f0:33:2e:b5:a4:fe:5d:f7:1e:d7:9e:9e:47:a1:38:e7:d4:f5:
         b3:19:b2:13:a8:dc:e6:d6:80:fd:5f:db:7a:9f:7f:c4:bd:f9:
         59:4c:65:f1:d2:aa:8e:5f:23:2f:62:1d:98:0b:88:a7:dc:45:
         8d:32:d0:cf:b8:f2:a3:b4:59:ae:75:9a:c1:d6:6d:ea:23:13:
         43:3f:15:4f:9a:bf:88:9e:8f:dd:5f:04:2a:97:15:c1:ac:dd:
         84:7f:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:19 2026 by rpki-client