Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
File:                     b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa (raw, json)
Hash identifier:          LN4KnyHQQCMasCHtE3uMUeQ/3LAtd5ZkbXEwlnSXQPM=
Subject key identifier:   91:61:B7:E2:82:8F:55:20:D5:F2:89:63:A5:4F:F2:2F:CC:D9:82:BB
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584ED9C74133FE71C7B7189A8FC0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16904
IP address blocks:        68.169.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:41:33:fe:71:c7:b7:18:9a:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=1d15b62f-3ea4-4a40-bfde-790cc834c3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:5e:2f:ef:04:b7:5b:00:aa:6c:ec:3c:94:
                    0f:44:a7:2d:d6:f2:45:0c:0d:e4:df:ed:b9:3f:15:
                    1b:3c:af:5c:67:da:fc:57:94:e0:30:fd:f6:df:8a:
                    82:d8:6e:50:af:91:93:0e:d7:a7:9f:cf:86:7d:fb:
                    5d:bf:a9:87:89:d7:4b:7d:f4:04:a3:03:3e:d5:20:
                    ff:03:5b:e2:33:94:24:92:bc:7f:55:8c:0d:06:94:
                    c3:8f:05:61:33:96:94:91:73:28:65:16:e1:d4:47:
                    a4:16:ce:aa:3e:97:4f:63:50:c4:cb:00:0c:50:c2:
                    5e:2d:6b:77:e1:65:63:88:fe:5d:b8:f2:dd:f7:e8:
                    cd:8f:62:c1:73:e6:50:9b:a5:b1:1e:ea:82:0f:18:
                    a3:34:52:dc:c7:d3:3b:f3:36:d5:f6:b4:a3:78:36:
                    ff:1e:90:5e:9a:8b:79:3b:00:ef:87:06:b4:ad:74:
                    6b:02:d0:38:cc:9c:9a:7b:46:14:83:f0:8c:0f:09:
                    a7:65:ec:a9:2f:60:6e:dd:83:a3:b1:87:2c:a6:ac:
                    89:86:6c:11:cb:09:65:cb:f5:8f:09:48:5c:c9:36:
                    76:f0:e6:4d:97:88:ff:3a:8e:71:cf:03:74:52:32:
                    f7:52:d5:12:50:21:8b:44:6d:47:f2:57:09:50:39:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:61:B7:E2:82:8F:55:20:D5:F2:89:63:A5:4F:F2:2F:CC:D9:82:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:56:98:e3:d3:4d:48:ae:49:43:2a:43:02:88:8f:1f:be:
         93:1f:36:18:44:fd:4b:53:1c:a1:cd:87:c6:c0:df:29:07:fc:
         91:95:fb:c8:94:46:04:3e:cf:56:90:8e:cd:b6:35:93:fd:b7:
         67:14:94:9b:60:ca:d2:28:c7:a0:44:1d:eb:5e:b5:3c:67:1d:
         c6:52:10:b8:ae:b5:c4:76:ae:84:4f:2e:87:f9:05:f2:b5:87:
         d1:12:ca:a6:3c:ed:39:62:9d:ae:22:41:c9:58:30:8d:f5:b4:
         ea:40:8b:77:fa:ab:4f:2f:4a:25:64:2d:fe:ff:c0:62:da:10:
         50:f1:c1:c3:ec:69:82:c4:7c:4e:a2:0c:27:50:58:de:29:cc:
         29:89:ce:67:6a:13:8a:bc:30:a4:75:e9:2b:bd:d7:8d:7d:48:
         14:15:6e:ee:cb:f3:30:13:84:08:89:54:ed:c3:05:d1:88:74:
         7e:42:71:a6:de:bb:35:28:ed:b8:56:ab:fb:94:c6:19:b0:62:
         53:5f:a1:5e:71:a4:ce:48:c6:23:71:44:a8:e2:e9:57:a0:96:
         ba:3b:2c:d2:01:5a:25:87:bf:67:d0:2a:21:31:72:c3:22:22:
         74:8b:f0:5e:29:a3:f4:5a:b2:13:13:30:3a:91:6a:d2:9d:10:
         0e:c4:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 19:33:02 2026 by rpki-client