Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa
File:                     b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa (raw, json)
Hash identifier:          JtC02gYXnTrP3GGZtqEOwYpCNP0EteTOINWdSlwI6vY=
Subject key identifier:   E9:E2:5E:51:ED:F8:03:79:7C:AF:BB:1B:0D:4A:CA:5F:CE:94:5E:D8
Certificate issuer:       /CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Certificate serial:       010D0C9F4328584DA6B0282320524D76F5447B00
Authority key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     0
IP address blocks:        192.111.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:28:23:20:52:4d:76:f5:44:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=a72bc3f4-fdc9-4720-b86e-5272d97282fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:8a:08:70:85:b0:de:6b:e3:d3:60:cb:7a:
                    45:b6:82:fd:e5:ab:ff:0a:d6:e6:68:57:8f:ec:87:
                    a4:dc:74:c8:06:d9:09:67:94:6f:c1:7b:c7:a3:e0:
                    0c:19:b8:42:5c:a2:7b:67:43:13:74:b9:99:f5:15:
                    97:27:a4:77:3f:df:c2:08:06:2a:51:4d:0d:69:51:
                    13:c8:43:7d:93:08:59:e7:70:9e:d6:29:94:03:9d:
                    c4:6e:20:f8:c3:48:e2:ff:94:57:0e:5e:ed:9e:e3:
                    c1:b5:98:f1:66:b6:7f:78:05:7b:de:da:87:b6:47:
                    36:f7:bd:cc:79:84:fa:81:b8:ed:8b:13:9a:3d:e4:
                    cc:66:00:db:20:dc:e3:74:29:9d:9c:0e:04:52:fb:
                    45:d1:2a:81:16:33:91:6a:eb:59:48:27:56:2b:ad:
                    b8:6a:ec:cb:ae:2a:b6:fc:a9:ef:ff:9a:f4:ed:60:
                    01:b6:05:06:f9:16:2d:df:67:fd:d7:90:0a:c3:66:
                    31:79:d3:3a:e2:ca:ef:11:da:0e:ee:af:6b:80:e5:
                    37:5a:6a:19:ec:c8:74:6e:b1:da:87:6f:b2:e0:46:
                    f7:7d:e7:dc:45:dc:7b:d9:78:6e:b8:9f:d6:39:31:
                    f5:c7:96:a0:2d:3e:a8:2c:9f:22:1f:88:dc:e7:ec:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:5E:51:ED:F8:03:79:7C:AF:BB:1B:0D:4A:CA:5F:CE:94:5E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3a:17:b9:86:56:1f:42:bd:89:3f:c1:72:86:35:dc:93:55:
         d9:6a:e1:98:70:b4:83:9b:cf:3d:b7:84:6b:62:b8:92:95:ca:
         68:76:ab:cd:8f:f5:0f:6c:a2:60:55:08:48:e6:1c:d8:72:8c:
         ca:8f:ee:4d:a6:10:68:42:f9:66:e1:8d:9e:04:d4:3a:a3:44:
         07:02:b7:f3:6b:08:c1:84:f8:8f:08:ad:91:e1:21:65:8b:13:
         1e:e4:6a:63:5d:a4:15:75:f8:31:0e:a9:2e:10:2a:74:6c:2f:
         24:bb:7b:cd:e0:38:90:7f:16:3b:0b:1d:5f:53:43:de:23:65:
         ef:82:0a:9a:db:1a:7c:4e:c9:05:d2:75:2b:55:11:3e:10:fc:
         f7:74:ba:af:6e:1b:a8:3d:d3:89:4b:61:e0:a6:9a:bf:82:01:
         26:12:e3:b1:50:e7:9e:ee:1a:6b:30:4f:43:aa:56:4d:f2:fc:
         da:25:b8:84:41:37:bd:0c:8f:cf:f1:9e:42:1f:e0:44:ee:c0:
         82:55:6c:d2:9d:6a:df:53:46:87:4b:b1:7f:50:bc:65:23:76:
         63:93:12:e6:79:83:8a:23:27:ad:6c:e4:b0:7a:98:7e:a4:41:
         8e:a3:46:e9:c4:b7:e5:18:ed:23:10:db:54:e6:85:5a:d1:61:
         ee:08:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:33:51 2026 by rpki-client