Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/bbde01bf-09e8-34ef-ac65-33475597aa73.roa
File:                     bbde01bf-09e8-34ef-ac65-33475597aa73.roa (raw, json)
Hash identifier:          kfAu/rOuuT5aryhlNAsZCbliMVcQJWpcYSKhMykZJBI=
Subject key identifier:   61:10:AE:DB:6A:2A:4A:24:3B:E5:94:1F:13:EC:97:CA:96:55:37:37
Certificate issuer:       /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b
Certificate serial:       010D0C9F4328584DF3BF8B65E65C92DBA97DF980
Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/bbde01bf-09e8-34ef-ac65-33475597aa73.roa
Signing time:             Mon 25 May 2026 15:28:57 +0000
ROA not before:           Mon 25 May 2026 15:28:57 +0000
ROA not after:            Sun 23 Aug 2026 15:28:57 +0000
asID:                     6079
IP address blocks:        68.232.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:bf:8b:65:e6:5c:92:db:a9:7d:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b
        Validity
            Not Before: May 25 15:28:57 2026 GMT
            Not After : Aug 23 15:28:57 2026 GMT
        Subject: CN=2f7225eb-024c-4dd7-a034-4ef3ed9fa428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:86:2e:f8:28:06:36:0d:85:97:1b:e5:7b:6b:
                    34:71:bb:fa:1b:a3:f4:9d:80:72:36:9c:de:3d:ec:
                    e3:85:6d:d1:e3:72:03:a5:f6:3c:9d:a9:ae:8f:23:
                    72:ff:fa:90:b3:91:e2:b2:72:87:03:3c:2e:6f:19:
                    5b:01:ac:62:1e:6d:fc:00:d5:82:88:ba:23:29:24:
                    b7:33:52:a6:56:81:66:d8:38:6f:62:e7:69:72:58:
                    e4:b9:5e:c8:c1:7e:7a:73:0c:51:85:50:dd:44:dd:
                    f4:bf:de:5e:54:27:95:dd:6a:97:8f:42:5d:72:f7:
                    e2:8e:ea:2b:70:0e:d8:5d:47:73:4a:fd:8f:9d:ca:
                    3b:d0:b2:12:2d:96:61:6a:43:92:c8:fa:a5:ed:2e:
                    d0:be:87:ae:c1:61:e5:27:4b:5c:f6:a8:d3:06:be:
                    1e:2b:da:2f:1a:42:e9:57:00:29:dd:ab:89:a7:d8:
                    1e:1c:99:a7:25:50:1d:7a:50:2d:d2:e2:47:74:20:
                    7a:df:7f:d2:76:68:c5:67:66:a7:0f:b4:e0:69:04:
                    2a:6d:c6:8c:91:a9:45:83:eb:b4:4c:fd:b4:bc:d4:
                    cb:4a:74:be:32:a6:fa:e7:5d:1e:5a:fa:4f:67:8f:
                    01:ad:a7:f1:a0:41:b2:c6:f6:7d:5a:c9:bd:fa:43:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:AE:DB:6A:2A:4A:24:3B:E5:94:1F:13:EC:97:CA:96:55:37:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/bbde01bf-09e8-34ef-ac65-33475597aa73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl

            X509v3 Authority Key Identifier:
                keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:ce:24:3a:43:93:db:dc:4e:e9:7e:6b:fc:f7:c8:97:ef:
         2b:6b:76:43:1e:94:b3:16:9c:2a:e1:ba:6b:6d:a5:a7:b7:a6:
         fc:68:b4:93:b8:eb:eb:ac:4f:d5:94:98:e5:8d:ac:0a:95:61:
         11:13:6d:4c:c9:53:27:32:bb:64:ad:c6:b9:e8:e7:ba:45:09:
         1e:7d:ea:4e:bd:6e:7a:66:4e:80:7d:03:8a:34:e8:fa:84:33:
         aa:ba:13:da:14:b8:2a:cc:7f:9d:4d:9c:5c:23:8e:10:ee:70:
         8b:94:17:91:a3:64:ab:ba:f6:11:3b:94:f7:1e:03:0f:cf:ec:
         3a:e3:b2:bc:90:72:6c:83:7d:a3:83:0b:c5:4d:ef:5b:70:33:
         ac:b6:18:0f:79:7e:b4:ef:1e:d7:62:12:f7:bf:6b:43:e4:b2:
         48:dc:0d:d1:f7:f4:48:7e:03:92:a8:86:e7:e3:8f:d8:8a:55:
         e9:94:bc:4c:59:2d:0c:d2:b7:19:83:a7:4c:59:98:4b:73:82:
         0d:6a:04:44:a5:c5:e2:18:23:27:c5:f0:6d:f3:8b:a8:55:42:
         e5:99:fb:e0:9c:3c:ad:f5:d5:7b:ec:ea:a4:56:7c:7b:ec:0c:
         3a:0c:a7:66:ab:4e:3d:5a:a5:a5:42:56:cd:7c:48:ca:95:93:
         3d:b9:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:33:14 2026 by rpki-client