Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a22305ff-9540-344b-8c34-b91a4923d929.roa
File:                     a22305ff-9540-344b-8c34-b91a4923d929.roa (raw, json)
Hash identifier:          EcN3hnj6hIqTAJnnKBs6rkE3rAn9bdF85pmO811xzg8=
Subject key identifier:   72:26:B6:B6:2A:08:F2:63:F7:CB:94:91:A3:F4:9E:71:FA:71:29:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F06725D31AB82768070E64280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a22305ff-9540-344b-8c34-b91a4923d929.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     33656
IP address blocks:        68.85.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:5d:31:ab:82:76:80:70:e6:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=4b1ce700-f486-43ac-a7cd-bb3f224eb251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c0:d0:e5:fc:86:f0:1f:43:31:2a:a1:06:d7:
                    61:1b:4a:8a:0b:8c:b6:0f:33:85:3c:bf:b7:66:32:
                    b9:98:50:ba:24:c0:f0:80:d4:3e:5f:d7:0c:2a:5e:
                    c3:e4:77:43:3e:0c:eb:01:35:92:3c:e4:73:4b:60:
                    89:39:c0:c3:b6:86:14:e8:8a:9c:17:d3:8e:40:91:
                    9c:f2:d1:da:f7:1d:59:f1:92:fc:f1:ab:2c:f3:f0:
                    de:c4:c8:cf:54:55:26:dd:dd:d6:47:03:ac:4f:b9:
                    31:c5:09:c8:0a:2d:6c:e7:17:b0:9e:a6:31:c2:47:
                    1d:d6:56:16:c3:57:b0:8d:64:e9:38:00:be:a9:02:
                    71:b7:a6:83:6c:be:82:40:ae:16:84:9c:91:a7:b2:
                    b2:26:a9:7a:9a:06:9a:84:28:c4:19:d6:af:e3:f1:
                    9e:d4:fd:93:d0:a8:36:cc:3a:01:3b:e4:d1:19:02:
                    af:4e:ea:7f:6c:30:68:3d:da:74:3f:11:21:df:b3:
                    a2:28:38:4e:15:51:e8:95:ec:66:f7:ab:92:5d:69:
                    02:96:63:1a:f6:d1:48:fc:a4:3a:9d:88:64:64:bd:
                    ba:bc:e7:bd:71:cf:42:a6:1b:14:e8:21:25:7a:f4:
                    d4:98:24:9a:d3:64:a9:97:35:94:99:3f:12:d6:ec:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:26:B6:B6:2A:08:F2:63:F7:CB:94:91:A3:F4:9E:71:FA:71:29:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a22305ff-9540-344b-8c34-b91a4923d929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.85.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:eb:dd:3d:73:30:08:90:fd:b6:45:9b:82:5f:ed:ac:aa:
         4e:fc:fb:36:80:98:78:e9:b1:e3:76:19:31:6f:6d:e8:c4:74:
         8e:54:08:a4:f4:16:b1:91:30:25:fd:93:16:66:e1:6d:c2:15:
         b5:6e:c9:c2:63:84:8d:ce:fc:86:ae:89:e3:55:2c:5e:c6:c3:
         6e:c9:c4:e5:40:f9:ca:5a:15:61:12:1f:ba:f8:e6:d3:01:0b:
         7f:e4:79:77:18:e8:7c:cd:ae:cf:82:2a:c2:a3:50:92:88:e9:
         3c:88:7e:75:85:7f:90:0d:4c:6b:24:fb:98:5b:8c:46:ae:41:
         88:fd:ae:0b:b5:31:a2:6e:d7:80:c8:44:b4:2c:a9:84:3d:f6:
         f2:66:44:9b:0b:75:75:04:e3:51:d0:34:7f:e4:c2:70:f5:c4:
         f5:d7:6f:db:81:6f:8d:3d:1c:ff:11:35:be:4d:2b:1d:c5:5a:
         12:60:4a:52:b3:c3:2e:4f:15:fe:99:45:74:f2:31:aa:a6:4a:
         c6:48:a9:a6:25:e4:9d:df:7a:b7:b8:fe:2a:46:c4:d1:a8:ca:
         fe:90:42:79:a6:0d:85:5e:a1:33:12:93:0e:b7:73:af:4a:34:
         bf:61:2b:72:65:7c:70:eb:83:d4:29:d2:26:e0:42:27:73:c0:
         26:b0:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:38 2026 by rpki-client