Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/959f505b-b531-349c-9fc1-8d50cba2eaf9.roa
File:                     959f505b-b531-349c-9fc1-8d50cba2eaf9.roa (raw, json)
Hash identifier:          0RQ66OyFpc/vxkoC/uQvmBL20fsDGyXpngfOWoSyvUk=
Subject key identifier:   54:74:DB:08:E5:89:13:C4:31:89:93:94:C7:2F:B1:A0:87:AA:65:A2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584F4F08132710A25C3722856300
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/959f505b-b531-349c-9fc1-8d50cba2eaf9.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     55293
IP address blocks:        68.66.210.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:13:27:10:a2:5c:37:22:85:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=58986b8b-b1a9-4a57-9414-c949e5deea99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:af:fa:01:9a:4f:26:b9:14:e3:4c:d1:d1:
                    e7:61:86:b3:70:60:f9:2a:ff:a2:5b:0d:86:67:44:
                    8a:50:fd:00:79:e6:43:48:16:53:bb:8e:40:2e:a9:
                    71:d8:01:a5:ee:54:cb:7a:ae:a2:b3:6c:fe:87:68:
                    54:63:75:6a:ee:fe:ec:47:45:28:f5:8d:04:84:10:
                    05:19:ba:e4:55:21:70:d5:c8:eb:9f:e5:19:05:53:
                    2f:2f:c6:1b:91:e0:5b:8a:60:3f:20:3c:f0:9e:b6:
                    e5:af:ed:c3:ec:29:11:96:fb:32:6c:ef:9e:28:84:
                    02:1e:ca:3a:8e:16:5b:09:bf:32:59:1c:c8:51:33:
                    99:5f:b5:dd:c1:ad:c1:23:81:87:08:67:f2:2a:70:
                    01:e0:7d:8f:77:62:27:76:8a:ec:05:d0:5f:a1:8f:
                    d8:6c:09:25:5c:63:45:d5:8e:ec:1d:e4:a6:62:b0:
                    ff:47:34:30:96:87:8d:51:0d:82:97:b6:db:02:d8:
                    58:01:fb:dc:ef:2d:f8:e7:3a:a5:7d:6f:fc:ef:4f:
                    40:33:59:f7:f5:b5:59:32:15:20:d7:ed:89:b7:8b:
                    aa:00:81:63:46:48:d5:a3:da:f9:eb:e4:89:78:f5:
                    e1:df:be:e4:10:e1:dd:11:7d:de:4c:44:31:07:82:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:DB:08:E5:89:13:C4:31:89:93:94:C7:2F:B1:A0:87:AA:65:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/959f505b-b531-349c-9fc1-8d50cba2eaf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1b:2f:c6:61:1a:a6:a6:62:2e:2d:d5:b1:5f:43:63:a6:68:
         6c:be:7a:83:51:91:2a:1a:e3:eb:e2:80:5b:69:1b:91:e3:93:
         64:e2:33:4d:f7:45:9a:58:3d:0d:b0:ac:4a:c9:3c:64:7b:12:
         41:5d:d5:ea:e3:bb:f6:78:a6:0b:c5:b8:ff:26:a3:0d:84:5f:
         21:13:c9:89:dd:ea:55:bd:76:e5:0d:b8:a4:d7:67:a6:4d:a5:
         65:5b:c6:70:8f:5d:e9:47:9c:17:8c:79:45:09:5b:83:b8:52:
         38:c3:cf:2a:37:3c:d5:64:56:e8:c7:42:38:fc:f2:eb:0f:cb:
         fa:d0:b0:a3:77:85:55:00:fc:e8:76:3f:04:d3:a1:71:e5:48:
         28:66:d9:70:cc:ea:1b:36:e0:3e:9e:55:8a:2b:4c:e5:c2:0e:
         45:30:fa:47:d7:71:f3:8f:3f:d6:87:af:14:39:ed:12:91:e6:
         48:8c:77:2c:6c:6f:39:97:1e:ff:69:c2:0d:93:cd:50:76:72:
         35:8f:fc:11:f2:ab:b7:36:26:49:92:48:11:38:d8:c1:f3:ea:
         dc:7b:4a:c1:fa:9d:0c:0d:b2:d0:88:bf:74:60:8c:88:e0:3a:
         aa:ff:11:57:c9:3e:2a:79:fe:c4:f5:74:b7:e8:ef:35:16:a7:
         e0:d2:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:47:50 2026 by rpki-client