Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea70d333-1416-3593-8532-6cc6629cb060.roa
File:                     ea70d333-1416-3593-8532-6cc6629cb060.roa (raw, json)
Hash identifier:          oQXRvhzHTMQHemB1z/ukqAO0hIfP21KmcnkJA7alCpE=
Subject key identifier:   13:D1:B2:EC:92:59:D9:5D:37:5A:06:3C:A0:DE:A8:83:08:3F:DA:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED862AA69A63F3B74AB38B200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea70d333-1416-3593-8532-6cc6629cb060.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.36.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:aa:69:a6:3f:3b:74:ab:38:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=edbb55be-f06b-48bb-aada-57d3201b160f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:ef:14:ad:8b:02:c7:fe:a9:76:c3:b4:e5:
                    58:80:6b:d8:2f:3d:47:5e:8a:b5:76:c0:c5:0f:7b:
                    0c:da:f5:5b:50:a9:08:7e:24:81:f8:97:6e:8a:55:
                    43:73:44:3f:2f:3d:e7:1c:4f:0f:f7:d7:24:c7:77:
                    86:4c:bf:ee:01:9c:77:87:4b:00:2d:11:17:bb:b1:
                    b0:be:e6:ad:1d:29:7b:eb:3c:0d:4c:39:83:2f:c4:
                    5b:bc:ab:8f:8d:31:3f:aa:87:5d:4a:24:32:9a:a6:
                    df:92:b4:c2:bc:30:e3:8d:6e:c0:c3:b6:86:af:26:
                    3f:91:9f:de:8e:c0:40:3e:08:a6:8c:19:c5:0b:c0:
                    b5:7f:c2:1d:ab:78:e9:35:7e:93:93:d1:1d:e7:f6:
                    56:de:93:57:7c:c3:63:ed:10:6f:25:16:e5:6e:1e:
                    cf:b2:69:4e:03:49:8f:97:85:c5:b8:10:6b:c7:30:
                    9f:b8:90:5c:45:7b:1c:9b:b6:17:22:70:40:8d:21:
                    cb:a0:4c:a9:fd:1a:9f:98:99:1c:9a:ed:c9:e4:ab:
                    98:7f:25:2f:15:39:a5:44:b2:40:fe:c7:52:bd:0a:
                    03:44:4c:44:b9:b0:63:a7:6a:65:6d:d2:51:67:2e:
                    34:d4:37:06:f2:f2:9e:a9:af:fe:b3:b8:9d:b3:77:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D1:B2:EC:92:59:D9:5D:37:5A:06:3C:A0:DE:A8:83:08:3F:DA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea70d333-1416-3593-8532-6cc6629cb060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.36.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:8d:15:4a:fd:2d:ac:72:97:e8:2c:82:9f:f3:d3:55:49:
         58:db:67:bf:a0:46:80:10:cd:8e:f6:1d:9b:9c:47:65:28:cd:
         58:f7:85:40:55:15:fa:25:fa:9a:65:5a:61:25:12:08:29:cd:
         88:0d:d1:93:91:87:61:58:6c:5d:a1:c4:2f:46:e5:b3:db:e4:
         8a:b4:d2:85:8e:9b:2f:23:ec:3b:48:5f:28:2a:6c:44:fb:c6:
         2c:33:2f:d6:f0:f3:e8:08:c5:7e:d5:b5:4f:85:1a:20:27:98:
         51:88:29:51:46:d1:22:bf:ec:62:78:52:81:ba:ce:b8:e1:e4:
         a9:dc:81:8f:bb:c4:08:52:98:93:9a:a8:27:39:b1:a4:df:ed:
         af:2f:a3:77:ef:da:48:20:b5:9e:12:1e:88:c0:f1:d1:0a:1d:
         2b:98:af:b3:4c:cf:0d:24:5c:bf:41:a6:db:39:76:79:79:4e:
         66:4e:a4:f1:c6:58:9d:16:31:91:23:67:23:2c:81:4c:28:04:
         55:b2:d8:85:6b:0d:d5:6c:a9:98:29:15:19:7e:2e:e9:3f:76:
         3a:3a:e9:8f:3f:8f:e1:88:f5:82:6f:96:73:9c:c0:c5:78:91:
         2f:fb:27:1d:c9:42:28:28:a6:ba:aa:bb:89:ab:80:8f:81:68:
         93:d6:99:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYqpppj87dKs4sgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
ZWRiYjU1YmUtZjA2Yi00OGJiLWFhZGEtNTdkMzIwMWIxNjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGfvFK2LAsf+qXbDtOVYgGvYLz1HXoq1dsDF
D3sM2vVbUKkIfiSB+JduilVDc0Q/Lz3nHE8P99ckx3eGTL/uAZx3h0sALREXu7Gw
vuatHSl76zwNTDmDL8RbvKuPjTE/qoddSiQymqbfkrTCvDDjjW7Aw7aGryY/kZ/e
jsBAPgimjBnFC8C1f8Idq3jpNX6Tk9Ed5/ZW3pNXfMNj7RBvJRblbh7PsmlOA0mP
l4XFuBBrxzCfuJBcRXscm7YXInBAjSHLoEyp/RqfmJkcmu3J5KuYfyUvFTmlRLJA
/sdSvQoDRExEubBjp2plbdJRZy401DcG8vKeqa/+s7ids3dIPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPRsuySWdldN1oGPKDeqIMIP9qQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWE3MGQzMzMtMTQxNi0z
NTkzLTg1MzItNmNjNjYyOWNiMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCTKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkfjRVK/S2scpfoLIKf89NVSVjbZ7+gRoAQzY72HZucR2UozVj3hUBV
Ffol+pplWmElEggpzYgN0ZORh2FYbF2hxC9G5bPb5Iq00oWOmy8j7DtIXygqbET7
xiwzL9bw8+gIxX7VtU+FGiAnmFGIKVFG0SK/7GJ4UoG6zrjh5KncgY+7xAhSmJOa
qCc5saTf7a8vo3fv2kggtZ4SHojA8dEKHSuYr7NMzw0kXL9Bpts5dnl5TmZOpPHG
WJ0WMZEjZyMsgUwoBFWy2IVrDdVsqZgpFRl+Luk/djo66Y8/j+GI9YJvlnOcwMV4
kS/7Jx3JQigoprqqu4mrgI+BaJPWmeQ=
-----END CERTIFICATE-----
Generated at Tue Sep 1 13:23:16 2026 by rpki-client