Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa
File:                     36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa (raw, json)
Hash identifier:          3pm9MjuQoNfyTQEfNsjpAcvwtNHks7+5IWNfy6dFc90=
Subject key identifier:   E6:F9:E8:FE:CE:F4:FE:D3:8E:0F:50:70:44:56:F3:DD:11:77:E2:E1
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584DADAADDC4842F4D3F67426E40
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     26744
IP address blocks:        68.170.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:dd:c4:84:2f:4d:3f:67:42:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=47788ba4-1d7e-48ec-87bd-380f6599a661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:9a:de:79:b0:ff:80:77:ec:93:fc:f7:e7:
                    09:a3:e1:95:fa:4a:98:3e:16:df:e0:d4:72:b7:02:
                    e8:2a:12:69:59:67:65:31:5d:38:7e:28:c1:67:cc:
                    57:96:14:9a:99:35:47:95:72:1e:87:bd:1d:89:01:
                    4b:10:23:56:15:0c:c6:47:55:d2:35:14:0f:8a:ee:
                    ca:ad:07:cd:fb:01:8f:c3:2f:e7:ad:56:df:87:ed:
                    40:e6:27:6b:f0:0a:b1:13:61:3f:8f:cd:c5:db:7c:
                    93:10:34:7d:6d:db:d8:1e:35:6b:d0:75:88:f3:cb:
                    a9:68:e8:63:37:5a:6b:67:4b:e4:03:b2:20:4b:6d:
                    e4:31:e0:58:15:4b:fb:40:79:91:03:46:79:c5:6d:
                    6b:bb:c5:e0:6b:06:3c:0b:2b:92:a9:14:0e:10:6e:
                    8e:d9:b7:26:7a:5f:c5:fe:05:6d:5b:cc:f4:12:a6:
                    65:89:4b:cf:65:6c:ff:3d:09:7d:fa:b4:1d:4b:1a:
                    c1:42:c2:08:51:f9:05:24:c8:48:a0:5c:e9:f0:06:
                    a5:7d:bf:ea:6a:64:93:34:c0:b9:b7:2b:c8:b4:e7:
                    5b:da:88:4e:26:35:d9:77:ee:8a:c3:93:c6:9e:09:
                    e9:df:c8:18:38:54:37:af:07:32:92:ae:12:c5:71:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:E8:FE:CE:F4:FE:D3:8E:0F:50:70:44:56:F3:DD:11:77:E2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/36dcd74a-01ba-35bf-a6aa-95841d136d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:eb:27:86:49:9d:f4:78:36:8e:ba:1e:23:73:4f:3a:ee:b5:
         c4:8a:84:ec:3f:4c:23:d2:a8:28:04:77:c2:57:2a:94:54:dc:
         07:24:27:42:ea:7d:7e:d8:ec:9e:4a:08:70:21:65:fc:50:65:
         13:64:ba:a8:e3:f7:d0:b5:05:b5:97:a6:d8:63:26:dc:eb:e4:
         35:68:0a:5b:99:d7:64:b3:fe:0e:5b:c4:23:8d:30:6a:d0:f5:
         18:7f:00:52:25:d3:36:df:00:8d:9c:00:cd:40:57:39:94:70:
         fb:4f:ab:0c:25:80:db:36:ae:4f:26:75:00:df:e3:fa:03:8b:
         38:22:b8:f0:66:e7:3e:70:5a:33:da:dc:e9:b6:7a:d2:7d:fb:
         7c:38:5a:e7:0a:dc:30:e3:15:04:95:c0:50:67:e5:d2:9c:88:
         12:0d:ad:2c:a1:0e:21:8e:df:a1:c0:f0:24:4a:46:61:68:86:
         d9:5f:9f:95:35:38:78:60:e3:80:b5:85:22:25:5e:59:63:33:
         cb:c9:fc:bb:45:da:ed:48:2b:4b:ca:7f:09:93:52:97:84:a5:
         13:11:ce:e5:3a:43:37:26:4c:53:5b:16:1d:3f:89:ca:c4:07:
         2d:a4:6b:b8:b3:ea:48:07:81:89:94:9a:8a:27:7c:9c:61:aa:
         ef:04:04:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:55:53 2026 by rpki-client