Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c425d15-73fb-3411-aee8-b2e9dc2aff57.roa
File:                     9c425d15-73fb-3411-aee8-b2e9dc2aff57.roa (raw, json)
Hash identifier:          804858aT37EvuZl9l1FgEzvZnk69Iv6Fwztx5XKs4Zs=
Subject key identifier:   58:5F:97:7A:89:F1:B4:5E:31:A0:2B:3D:DF:6E:63:48:E7:11:EA:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7A4FA65FD3203F3BFBC7F200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c425d15-73fb-3411-aee8-b2e9dc2aff57.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     33668
IP address blocks:        68.61.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4f:a6:5f:d3:20:3f:3b:fb:c7:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=1802ae79-2315-41ba-a208-b15369d7a756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:50:cb:42:72:76:34:b0:a7:d6:47:88:ca:
                    96:a6:9d:17:a0:a8:86:b4:08:2a:4a:c6:d5:11:1c:
                    9d:4b:8e:a6:be:96:4f:2c:ce:05:26:0d:99:f6:e5:
                    cb:98:62:6e:6b:dd:5b:4e:07:d7:0b:62:0c:b4:aa:
                    db:d3:a1:46:a5:f0:70:af:3c:6f:72:db:cd:03:ec:
                    05:7a:13:5e:88:36:26:8a:f3:07:eb:de:3b:be:9f:
                    95:35:4c:f1:63:21:3a:3b:5b:06:82:93:b0:9f:db:
                    9b:13:b0:2c:b5:f6:87:47:ae:2f:89:65:37:b2:48:
                    ae:bc:09:08:52:7a:85:1c:9c:45:fe:41:d9:85:07:
                    55:0a:77:03:34:c8:47:df:48:5d:ea:10:83:5f:0f:
                    3e:47:19:83:bd:f1:35:fe:21:22:b4:e8:a8:d7:db:
                    6b:3a:4b:8b:0b:37:96:c9:d5:d5:d7:e4:55:61:8d:
                    f1:3c:9e:a2:70:1b:8b:99:9c:ba:54:96:91:db:cc:
                    76:60:e0:97:3b:60:d1:41:52:b9:ed:56:61:73:a0:
                    cd:1e:94:5c:0b:78:8f:fd:23:19:dc:b4:af:f1:58:
                    3a:d4:a7:ed:af:c9:02:55:16:e4:ac:bb:1b:34:89:
                    33:a0:0b:c7:3b:6b:e5:7b:4e:b2:f4:dd:d5:04:d6:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5F:97:7A:89:F1:B4:5E:31:A0:2B:3D:DF:6E:63:48:E7:11:EA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c425d15-73fb-3411-aee8-b2e9dc2aff57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:58:87:77:2c:e1:43:f2:5a:ca:8d:04:bb:89:71:88:37:82:
         5d:77:92:5e:9f:19:51:50:f3:6d:d9:46:f3:77:06:8c:22:ab:
         82:32:48:db:f1:86:0f:d5:89:d2:f8:8c:81:3c:9b:7d:d1:5f:
         91:8b:29:71:7d:72:4d:51:1c:83:62:d6:4d:03:f1:1d:c1:6d:
         03:c1:42:3a:e3:ce:99:ac:be:0e:a6:c7:a7:ab:c2:cb:4e:f2:
         e4:97:59:f8:f9:21:48:02:94:6d:14:24:36:91:4f:ae:34:bb:
         b9:31:74:1b:50:9a:4e:09:d2:2d:1a:29:26:72:8f:ae:e9:cc:
         ce:bd:30:7f:3a:f1:c5:de:eb:a1:82:de:82:29:97:e6:f3:4e:
         f5:24:b5:54:62:53:a8:4f:77:46:da:cc:55:a9:4b:d7:6b:84:
         90:e2:cb:06:6e:06:74:e3:27:13:2a:d6:21:39:df:bb:68:fc:
         76:b6:eb:ce:a9:4a:18:4f:96:be:37:4f:ae:c7:7f:85:49:a5:
         3c:a7:cc:f4:c6:9a:7f:00:a0:ea:0e:fc:ce:82:59:9f:06:d3:
         0c:7c:f3:6c:1d:d0:21:09:42:98:d2:2f:c3:ea:ad:c0:34:2d:
         15:4f:5b:ed:8a:72:6a:f9:99:cb:b4:29:2f:25:56:d3:00:2d:
         a7:5d:6b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:38:58 2026 by rpki-client