Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6907fba5-fe73-36d6-a7c0-509fb9579113.roa
File:                     6907fba5-fe73-36d6-a7c0-509fb9579113.roa (raw, json)
Hash identifier:          kp9jnpWU/K61OygrN6eySfnkN+GNdYFbxdtGJkSmdQA=
Subject key identifier:   88:E3:DE:72:1B:C6:1A:F9:1F:20:66:F0:70:B8:D0:68:06:F9:BA:3C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863DEA6F6B17EDDC87C9A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6907fba5-fe73-36d6-a7c0-509fb9579113.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.42.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:de:a6:f6:b1:7e:dd:c8:7c:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=58b03cfb-7b73-4672-91b8-11c55eac9c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:07:37:14:57:e8:2a:22:4f:0e:c3:e6:c8:
                    6b:6e:67:70:87:c9:41:47:d3:ea:27:b7:f5:6a:e6:
                    a9:07:97:94:86:e3:a2:6a:82:8f:b3:8c:18:bb:4a:
                    6b:90:1c:d0:d1:3c:fd:7b:e9:80:a1:30:8c:e3:b0:
                    e1:c7:1c:a0:8f:26:4f:e5:9a:6b:c0:af:bf:d6:9e:
                    ea:13:1d:2d:db:f6:0e:dd:d2:60:a1:dd:58:c9:ce:
                    d1:9f:fe:b5:30:90:86:6d:82:65:ac:ef:2e:68:21:
                    50:47:fb:b3:e5:82:e9:62:c7:8d:d1:43:44:b1:3a:
                    e5:e7:bf:c1:33:99:3b:81:cb:fd:a5:d4:30:b4:12:
                    c1:5e:79:2b:ad:79:71:c7:74:55:dd:0e:ac:3c:a9:
                    f8:52:62:fd:e2:8d:37:6b:8a:a8:05:7f:33:50:25:
                    d7:e9:27:21:8f:d1:05:8e:53:79:c7:6a:54:b1:0c:
                    c5:1e:59:71:7b:90:0f:99:84:7c:45:ff:bd:28:6c:
                    86:f3:d5:98:e3:e6:0a:9b:94:1a:cb:7c:ca:49:e8:
                    97:33:ce:97:3f:85:09:11:15:85:9e:10:9d:4f:4b:
                    6f:5e:bd:16:fa:36:b8:00:77:fa:f5:2a:22:05:3a:
                    49:90:3a:33:a3:15:da:2e:38:8b:89:b9:8c:b6:d0:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E3:DE:72:1B:C6:1A:F9:1F:20:66:F0:70:B8:D0:68:06:F9:BA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6907fba5-fe73-36d6-a7c0-509fb9579113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.42.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:1d:72:a5:4c:dd:6a:0f:ed:bb:0f:99:b4:bb:7a:dc:5b:ef:
         9b:50:86:3e:08:28:01:62:4c:87:5e:aa:35:b1:07:0b:09:b5:
         41:dd:93:87:b1:fa:18:cb:e1:a8:c8:a7:a7:36:fa:ec:cc:3c:
         aa:a0:94:da:8c:20:54:72:f1:be:78:01:b4:3e:43:35:e3:7d:
         6f:37:0b:ef:d6:e1:89:0a:9e:1f:cb:ec:0f:a2:97:76:f4:50:
         e2:c0:23:28:10:e6:be:c4:09:41:0b:e0:89:3f:53:d4:d4:c4:
         57:5f:b5:f5:06:d0:42:6d:d0:fb:af:55:e7:fd:5b:cb:29:81:
         04:9c:b1:99:71:33:39:2c:c3:cd:8f:8c:3c:cd:a6:c4:e7:db:
         87:8d:f6:d3:ab:7c:e3:58:7f:d0:0f:62:67:5f:33:d8:f9:2c:
         d6:ea:e4:49:9f:df:fa:80:4e:55:3f:16:e5:12:c6:02:13:c7:
         5c:c8:07:51:2d:a4:60:e8:94:60:c5:9b:81:52:61:56:eb:98:
         a7:e0:b5:7c:a3:26:25:ad:1e:03:3c:f1:73:6d:55:50:64:64:
         41:12:fc:68:e5:70:38:a1:9c:3d:39:d8:14:33:f6:de:5a:fd:
         24:64:fa:0a:52:99:c8:40:81:88:3d:c3:da:89:81:42:13:1d:
         5f:b8:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:08:26 2026 by rpki-client