Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a05b22bc-68f6-34e7-8a80-82fd428383e7.roa
File:                     a05b22bc-68f6-34e7-8a80-82fd428383e7.roa (raw, json)
Hash identifier:          wUlWN1F5xjxgKjMcexN3u5RyO+ZInf+ZUNGbc6ppR1U=
Subject key identifier:   F0:DA:9C:14:F7:3A:6F:84:A5:FF:E5:45:83:1A:0F:47:27:9C:EA:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DB8F8F32EDD90BDCF5500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a05b22bc-68f6-34e7-8a80-82fd428383e7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        68.50.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:b8:f8:f3:2e:dd:90:bd:cf:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=f33e258f-afc7-4286-99ad-3857a24b808f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:e4:b3:d7:3c:54:a6:52:a6:53:ef:c4:b0:
                    53:2b:de:95:8d:cc:34:68:a4:1f:01:fb:3f:4f:62:
                    3d:72:42:00:8f:e1:8c:7b:4b:89:44:f1:7c:27:8e:
                    bf:aa:c2:42:58:d4:e0:04:06:68:28:4e:93:89:1b:
                    25:5b:d3:b1:50:b3:04:67:74:7c:77:a2:39:9d:09:
                    67:c9:14:69:41:76:7a:66:16:5f:3c:49:14:49:f7:
                    64:5b:16:25:4f:3a:14:5b:1f:84:c4:57:c1:c0:a0:
                    09:61:18:94:51:ab:cf:c1:31:df:e6:cf:1f:ec:54:
                    26:56:0b:da:3c:cb:7d:44:8e:8b:a9:2d:f6:a3:c4:
                    f0:6a:64:0c:7e:4a:96:91:5f:26:73:96:63:fd:d6:
                    21:e0:5c:e4:5a:5e:43:6f:bb:44:3e:6d:1a:d5:62:
                    29:9e:ca:f5:bb:d1:76:cd:5b:2d:b8:68:b0:7c:3d:
                    24:8d:b3:20:8e:66:35:b2:be:96:6f:b0:cb:c3:fb:
                    1f:f3:86:45:89:c8:5e:f4:92:2f:80:0f:97:88:b1:
                    38:4f:73:51:8e:0a:a7:3c:5f:57:de:13:9e:22:2e:
                    76:b5:75:f6:3a:0d:72:fa:92:b9:c7:e4:5d:61:a3:
                    6f:93:c5:ba:ed:b0:0b:c0:a8:72:bc:61:b4:ca:bd:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:9C:14:F7:3A:6F:84:A5:FF:E5:45:83:1A:0F:47:27:9C:EA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a05b22bc-68f6-34e7-8a80-82fd428383e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.50.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:de:63:b9:9e:22:23:82:eb:3a:cc:60:4e:b2:d0:59:26:a0:
         1e:2c:64:ae:3f:98:2f:3e:7f:20:04:6b:70:9a:33:ed:ce:55:
         c3:0e:a7:4c:3d:98:f4:d9:2a:5f:df:fb:93:1e:cf:21:e0:f8:
         e0:56:84:dc:ff:03:f3:67:4b:d2:9a:1a:90:2d:99:8c:b4:a7:
         0a:49:9f:6c:3d:c4:e8:9a:95:46:f0:f6:bf:be:7e:d6:c2:c5:
         f8:77:68:8c:80:28:0f:df:2a:04:03:20:54:d9:ae:a6:70:c7:
         65:a5:1e:d6:39:b6:c5:3c:62:9b:b9:57:ce:9f:97:4b:f1:e9:
         50:69:4d:3e:a5:d5:65:3f:ba:23:1e:b5:f6:8c:64:58:1b:0d:
         93:ae:e1:1b:88:6b:7b:84:36:71:7f:96:34:4b:9c:20:65:e8:
         6f:a0:24:08:56:f4:1d:75:2b:0c:98:27:76:5a:af:8c:61:ea:
         8e:1e:be:44:c0:66:f8:c8:ea:d6:f8:f1:b7:e9:39:2d:4e:74:
         1f:6e:c8:59:77:ca:ed:9f:f0:5e:30:41:a4:99:64:e1:16:d1:
         c0:2a:b0:7a:41:3b:2a:80:a1:f7:ef:d1:62:06:d0:ed:7c:8d:
         1c:47:f8:f0:6c:9f:07:74:d4:80:f2:86:9b:52:e7:19:eb:cf:
         69:2e:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:21:25 2026 by rpki-client