Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0016c99b-5a61-3371-91dd-b7567103b3f2.roa
File:                     0016c99b-5a61-3371-91dd-b7567103b3f2.roa (raw, json)
Hash identifier:          gZBC8MgNhh7Rjaq3/qg4QbMojh+uOxOyX5TXRPa0uEc=
Subject key identifier:   3D:AB:60:89:06:88:BE:7C:30:25:FC:14:49:D8:8D:78:C3:79:08:A4
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584F4112B464C959438BE0F27900
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0016c99b-5a61-3371-91dd-b7567103b3f2.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22652
IP address blocks:        68.67.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b4:64:c9:59:43:8b:e0:f2:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=7144b3da-1374-4e28-918b-6109a5d72dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:78:0e:8f:75:b8:27:0b:09:00:26:01:75:
                    6f:89:89:7b:03:1c:9e:82:40:f2:87:71:a9:f1:3c:
                    8e:c8:2a:26:d2:80:ec:75:87:ef:1c:3a:18:07:c9:
                    15:81:f7:3e:0c:9f:44:ce:77:70:d6:10:29:50:14:
                    26:b8:2c:81:8f:aa:11:a8:b9:29:2e:b4:5f:02:2f:
                    f4:d2:bd:5d:d7:9e:12:95:7e:ea:29:d0:92:87:b7:
                    c5:eb:3b:52:d7:1c:13:fc:ca:40:20:6c:a4:f4:b3:
                    af:13:8b:9c:c8:33:3d:24:1e:65:74:86:ef:0e:68:
                    b7:8c:ef:91:d6:70:91:3b:aa:01:52:47:e8:02:50:
                    fb:92:a0:ad:17:9a:32:23:d2:97:25:5e:7f:b5:98:
                    b2:21:a5:5d:59:59:4a:ed:44:1a:2f:7b:31:b3:6c:
                    69:e3:f3:48:83:90:b1:65:18:63:66:51:fb:04:b0:
                    79:90:fa:64:6a:a9:f6:e5:de:a2:bd:a2:3e:9a:39:
                    5f:33:e1:95:a0:4d:d1:cf:84:92:10:b0:7e:27:d1:
                    bc:7b:4b:e3:72:9f:9b:06:04:8f:1b:5e:25:6b:8c:
                    3c:d1:cd:73:f9:bd:5d:bb:7e:0e:aa:7c:ff:7a:f6:
                    9d:f1:2b:53:2f:d5:41:f2:bc:9e:44:ac:97:75:6f:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:60:89:06:88:BE:7C:30:25:FC:14:49:D8:8D:78:C3:79:08:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0016c99b-5a61-3371-91dd-b7567103b3f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:05:19:ed:f4:ce:f4:45:50:92:8a:f8:20:20:00:6c:7a:bc:
         d7:a5:45:39:27:cf:b4:cd:bd:2c:94:46:8d:0e:53:8d:3c:ae:
         78:35:c2:f2:b6:5b:30:bf:46:e8:36:32:28:b8:e9:c1:cc:fb:
         0d:2a:8d:38:3d:24:75:0a:6a:ae:26:e1:65:86:12:a2:08:0e:
         6c:b2:49:d4:b2:e6:c8:2a:ee:93:3e:90:5b:cf:92:f5:64:cc:
         cb:66:39:7e:c2:c7:fc:b6:42:9c:ad:b6:70:4d:dd:93:8d:df:
         58:e7:33:d1:a7:b1:26:b0:89:a6:4b:f3:c0:2d:30:b2:ce:d1:
         ae:3d:d1:e8:4c:4f:ff:e9:e8:03:e6:d9:87:6a:49:83:c0:71:
         53:62:b5:5e:0f:30:68:27:b7:8b:cd:08:4c:51:3e:be:bf:49:
         be:69:3d:c8:be:a1:74:89:a9:68:bc:a8:3b:b2:0a:24:06:75:
         6a:6c:d2:36:d7:5c:46:2e:9c:30:a3:29:ef:73:17:d7:d8:21:
         cd:f1:2f:b6:e4:e6:1f:e4:fc:37:38:e6:e6:99:34:4e:40:72:
         f2:8c:64:7a:9e:d9:e2:fd:19:d6:5c:86:df:e9:66:52:78:f5:
         8f:79:a7:f4:23:fa:c5:e6:29:3c:43:7d:61:b8:aa:f0:12:b5:
         10:78:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:50:53 2026 by rpki-client