Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa
File:                     81cffdf8-b98e-3c19-815b-5041ea92309b.roa (raw, json)
Hash identifier:          RVHwxXYD90aUaSKwyw9mgzKV6T6/0LsMVtA6uzvWpnM=
Subject key identifier:   E7:ED:08:90:E8:36:C4:F3:6C:55:DC:59:0F:CD:96:B0:8B:EA:E5:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600F45CF7AFDD414DCC1F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        68.36.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:f4:5c:f7:af:dd:41:4d:cc:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=0429444b-f746-479b-b955-6cc4d42f9a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:bd:c5:e1:ad:58:ab:1f:e0:c6:f0:2e:9c:
                    40:82:95:36:78:6e:94:c2:85:cf:42:4b:2d:03:87:
                    c9:df:17:ab:e8:e1:76:32:d2:c9:c2:36:3e:f7:5c:
                    31:d6:26:b3:14:07:11:71:5a:52:da:7b:4e:23:a2:
                    14:35:6e:8b:eb:0d:49:54:94:6a:b7:9c:77:f4:8b:
                    e1:fa:87:1b:8f:8d:e5:5b:02:bc:c0:5c:a7:a2:ac:
                    63:e0:c0:3d:24:e1:1c:18:3b:85:0b:22:d8:00:ea:
                    73:22:42:48:c9:47:3b:18:40:45:4f:dd:70:34:72:
                    9b:74:76:46:68:16:10:46:e6:6e:ad:1a:92:ee:ed:
                    3f:9c:c2:99:da:e1:b3:09:8a:b0:74:ba:4f:db:f8:
                    34:d5:cc:1b:9a:7c:68:63:04:e3:87:91:fc:83:f3:
                    96:99:60:ef:5f:a8:43:82:41:ea:f6:f1:eb:80:78:
                    9b:b6:76:e1:14:a9:5e:a2:59:ea:76:e6:41:55:49:
                    88:7f:7b:4d:ea:6e:a6:43:1d:7b:66:6e:1b:7f:09:
                    d6:d3:ad:59:f6:a4:63:01:77:66:ae:7d:86:8d:e8:
                    e3:be:30:26:53:b7:ac:72:27:85:70:68:e2:0e:0a:
                    c3:25:b7:f4:13:a1:14:47:a3:36:8e:df:9e:2a:49:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:ED:08:90:E8:36:C4:F3:6C:55:DC:59:0F:CD:96:B0:8B:EA:E5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81cffdf8-b98e-3c19-815b-5041ea92309b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:f8:f3:69:dc:80:be:82:af:d8:b3:f2:ce:57:d4:b6:b1:90:
         8e:af:39:66:82:75:90:a5:dd:e9:5c:68:f8:72:6d:d7:eb:f3:
         a7:df:db:de:72:f4:94:c8:d9:29:58:8b:c8:a2:81:46:c2:02:
         db:e4:ad:0a:5d:df:59:f3:57:cd:33:9a:4e:28:b6:22:ca:aa:
         18:0e:13:47:d7:b7:86:82:05:63:ed:fe:6e:38:cc:cd:db:96:
         17:29:09:a2:54:2d:86:f5:2c:69:f3:dd:8e:d6:1f:62:69:a1:
         09:08:a2:d0:77:ce:e0:04:87:f2:76:50:42:c2:58:7c:eb:45:
         38:d6:7b:c7:59:16:82:64:d2:3a:69:b3:5b:a5:ab:30:57:99:
         23:d3:01:0e:a6:76:79:12:e7:e9:4d:da:27:d4:b0:e8:e8:e1:
         88:c3:25:3b:da:83:b4:2f:1c:d7:8d:f2:69:42:6e:c6:dd:e8:
         8c:4d:80:79:3e:4b:df:ed:bc:98:8e:96:bc:d3:0f:3d:dd:4c:
         af:23:4b:17:8e:59:69:ab:0f:a9:de:6e:bb:b7:13:f9:d2:f6:
         99:e0:4d:5b:76:13:66:99:eb:bc:bf:53:f0:d1:04:86:0b:0f:
         45:6d:1f:6d:ee:92:c8:a1:b2:da:1c:80:29:a1:bb:00:db:64:
         d8:56:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:32 2026 by rpki-client