Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/6752ba81-5480-36b8-ac6b-3a15656070f0.roa
File:                     6752ba81-5480-36b8-ac6b-3a15656070f0.roa (raw, json)
Hash identifier:          jkjmSAaiesgfJjJ+uZyp4qdeMK2w5NffH55yOcXE+A8=
Subject key identifier:   EF:5B:9C:A3:87:89:51:1B:83:CC:5B:DA:65:98:D2:98:86:0E:43:8F
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584F6F22E828B8B38CBD5580B780
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/6752ba81-5480-36b8-ac6b-3a15656070f0.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     30059
IP address blocks:        216.68.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e8:28:b8:b3:8c:bd:55:80:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=63d31ad2-3127-4aaa-81f6-74adf304afe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:7f:96:c0:ec:91:d9:36:0f:06:3d:2d:69:
                    36:3c:9d:ac:a0:db:1e:58:c7:f5:f7:55:b4:9a:87:
                    83:e9:72:98:ce:b5:15:0c:b1:98:40:06:16:00:6b:
                    87:b3:d7:0f:0b:88:58:9f:a6:7f:c6:19:db:0f:58:
                    c5:0b:10:58:82:7b:c2:eb:a0:11:40:0b:1d:b7:29:
                    d3:aa:b0:46:a9:e7:8f:bd:6d:92:62:c7:b9:86:d5:
                    79:f6:82:30:b5:c7:4d:44:db:bb:2c:16:7e:2c:a8:
                    62:8e:99:69:d4:c2:63:8f:ee:04:1c:a4:19:fa:69:
                    2c:34:e6:5d:f5:57:a9:95:35:af:f4:a7:46:6e:7c:
                    e6:62:58:f3:fe:7b:43:bd:1e:2c:ba:7b:07:26:7a:
                    41:9b:0e:44:04:d8:46:0f:95:25:93:a2:9a:89:ff:
                    96:64:8c:71:10:fa:4b:8a:5a:8a:c0:74:41:ae:33:
                    46:00:1b:23:cf:14:85:88:15:d7:bd:f4:5a:a5:d0:
                    38:9f:85:22:77:32:ee:3c:a9:6b:c0:d9:3e:b6:3b:
                    e7:c7:99:ef:a4:2a:18:b2:70:bd:be:44:e4:e0:13:
                    1f:e6:e8:ea:46:01:e6:be:4f:de:1c:62:23:fc:87:
                    b4:15:2d:f2:d2:8a:40:93:94:7e:19:b4:09:97:bb:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:9C:A3:87:89:51:1B:83:CC:5B:DA:65:98:D2:98:86:0E:43:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/6752ba81-5480-36b8-ac6b-3a15656070f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:6c:ba:6c:3b:6b:fc:9b:3f:ab:ea:79:33:5a:ab:08:3c:
         cf:6b:af:64:e6:73:64:4f:ad:6a:eb:b2:d5:df:60:2f:f3:a4:
         f7:f7:d2:86:62:52:30:f0:4e:d1:8f:25:9e:ac:de:bc:95:fc:
         2c:50:2a:7c:90:fa:b3:34:6b:97:ac:92:8a:1e:fa:c8:4a:68:
         66:a1:6f:ca:cd:8f:59:90:70:7c:ab:70:a2:6e:20:d9:38:5b:
         56:af:ed:b3:34:e1:7d:71:64:b9:4d:69:95:a5:95:b8:50:b0:
         6e:ec:30:06:00:33:ae:59:1f:e5:b4:ba:fb:b5:86:b2:b3:7a:
         8c:31:7d:7d:f4:bf:d5:ec:fc:71:87:4f:95:17:76:85:12:19:
         ea:85:67:92:29:ad:2f:f9:8a:39:4c:89:52:5b:38:3f:21:d2:
         3e:0e:9e:8e:1b:0c:fa:54:c6:1f:60:02:07:84:a9:94:2c:24:
         78:6b:d9:1d:43:05:23:b9:7a:97:05:f3:cd:17:74:07:65:fa:
         ae:78:8f:63:8f:6d:14:21:4d:51:70:52:e4:e3:dc:4c:11:a1:
         69:aa:2d:71:e6:a3:e9:c1:94:b0:d3:00:bf:e2:db:05:43:20:
         df:5a:85:31:8e:5f:d4:01:1e:f6:ca:d6:d5:f2:ed:b6:0e:ff:
         76:db:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:28:34 2026 by rpki-client