Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
File:                     68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa (raw, json)
Hash identifier:          5dqmRRmBEFCGCbnjdeUrbRiUc6IOFKL/WRWZ//Hzxis=
Subject key identifier:   CF:E8:62:1D:07:3A:A4:37:3E:4A:1C:F9:5B:28:68:56:1D:E5:B4:19
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584DEDE09223C3AA4311477FD8A0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     46606
IP address blocks:        67.222.32.0/19 maxlen: 24
                          69.89.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:92:23:c3:aa:43:11:47:7f:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=8d360aff-aaa0-422d-aeb6-3f10d46ce629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:67:d1:19:bc:79:3d:52:96:1a:5e:a1:90:d5:
                    85:e8:e5:2e:8d:68:57:1c:ad:ab:c6:39:25:30:d2:
                    16:2a:0e:5b:7d:28:d0:a5:bb:0e:8f:e4:f6:eb:1e:
                    a5:90:51:c5:77:38:34:57:30:91:46:ee:e3:ba:45:
                    ae:61:5e:32:1b:89:e2:d5:9d:d8:2d:af:5e:30:94:
                    6e:ed:1b:e8:1b:6b:4a:3f:9d:de:a6:9f:13:c6:4e:
                    3f:6a:64:07:28:81:4e:9d:51:11:52:e5:88:fa:c7:
                    a2:96:6b:69:2a:c3:de:1a:3e:43:a1:b8:83:3c:fd:
                    0c:13:5d:ec:93:83:0d:8b:15:39:af:89:5e:e7:88:
                    6e:ec:5a:88:77:5a:5c:18:3d:3f:8a:ca:35:9a:3f:
                    fc:ef:ae:cd:4f:ec:e3:67:bf:eb:5c:0d:5f:da:51:
                    0a:5b:da:f2:ae:13:14:5f:1e:0f:f3:d5:f2:f7:b3:
                    da:b4:8a:aa:c4:fa:4e:98:4f:fd:06:8d:08:53:63:
                    52:84:48:de:0d:9e:17:41:29:1c:94:b3:74:10:f1:
                    61:e7:e5:f2:72:11:5d:0f:c2:00:30:c6:8a:f8:db:
                    e1:5e:6a:d9:3e:e1:26:b5:f6:a1:7c:0b:5d:37:d0:
                    7f:51:bd:6f:00:ae:dd:d2:28:9c:44:d1:3e:82:83:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E8:62:1D:07:3A:A4:37:3E:4A:1C:F9:5B:28:68:56:1D:E5:B4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.222.32.0/19
                  69.89.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:d7:ef:56:83:1f:47:14:bf:bf:df:8e:04:ac:10:10:1e:
         c8:48:44:36:0e:5b:f4:be:a9:f4:32:8a:3c:9b:e6:88:57:90:
         ad:c0:63:b1:c0:8d:01:13:79:cb:56:31:ee:c1:ef:e9:ff:2d:
         16:08:8d:e8:37:48:85:15:2d:62:cd:0a:1f:c8:c5:2c:0b:58:
         3b:25:29:7f:bb:14:7b:3f:f9:20:e0:f1:69:90:90:65:9e:4c:
         4b:69:78:61:09:22:98:6e:c0:5f:54:bc:9d:84:91:2d:c3:a4:
         96:8c:77:71:b2:c4:d5:f7:87:2e:39:85:3c:f8:03:e4:fc:dc:
         f9:3d:8d:e8:c6:89:53:6e:98:83:c1:c2:1b:a3:ff:e1:9f:bf:
         8b:ef:c5:62:30:1c:d7:00:0f:5a:37:fb:a4:77:7a:b6:5b:dd:
         22:34:90:d9:6f:91:50:46:77:30:3b:11:4b:9a:ff:3a:03:08:
         3d:16:cb:cb:6c:6c:f7:2c:8a:72:fb:9d:65:7c:9d:0f:45:9d:
         d6:ff:6e:67:c9:57:67:98:a2:b9:e4:a8:ad:bc:53:a5:2c:1b:
         b6:2d:5e:93:e7:c0:0e:2d:6e:c1:5a:97:f0:60:b0:55:41:d5:
         ad:2f:aa:f1:3a:5b:af:33:70:82:d8:1f:cb:c3:02:4a:24:b8:
         7e:50:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:44:56 2026 by rpki-client