Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa
File:                     13e06fb3-a846-3ab0-944b-535af99476d5.roa (raw, json)
Hash identifier:          RjmhC9oV2hwfj61t9HFvx2HFm+Yo7cBRNDi2HZprKmk=
Subject key identifier:   3C:F2:AE:25:0D:B6:8A:48:D8:1B:8B:36:B6:BF:05:E0:2C:9D:9C:C2
Certificate issuer:       /CN=45fe4043-69f6-4f38-9003-897cd909fb3b
Certificate serial:       010D0C9F4328584CE8F75BF50582A80685A62800
Authority key identifier: D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     21534
IP address blocks:        199.59.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:5b:f5:05:82:a8:06:85:a6:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fe4043-69f6-4f38-9003-897cd909fb3b
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=f6927f77-048b-4492-93c2-5ba0e8c9ed47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:3d:9a:e4:dc:fa:0b:a2:18:70:bf:b6:da:
                    ee:28:ec:c9:33:02:29:93:99:90:39:6f:7e:ae:d7:
                    82:0f:9f:94:19:25:26:33:b5:38:3b:85:61:77:8b:
                    ee:c5:6d:d5:7b:90:fa:59:2a:7d:fb:19:a6:a2:fd:
                    98:09:f0:e7:37:2e:4e:24:65:a2:86:03:89:00:7b:
                    10:61:11:ee:70:53:37:d2:d9:db:18:2a:d0:97:67:
                    9a:b1:67:7d:fd:0c:43:13:49:d9:bd:7c:4c:cd:4d:
                    31:1a:55:d2:a0:7a:08:65:21:89:fb:ea:d5:db:9d:
                    e3:c0:93:22:7f:77:d6:8b:28:d9:fe:9d:8b:d4:63:
                    12:58:e6:4d:e2:18:d9:84:cb:27:f3:2d:ec:14:71:
                    79:18:4a:89:73:a1:dd:1d:c6:9f:07:ee:28:aa:28:
                    40:d0:a2:3d:39:02:81:8b:02:81:fa:ec:39:a7:e3:
                    e4:41:ae:1c:12:33:39:33:b5:81:e3:31:33:22:a8:
                    ec:e4:97:36:6d:e9:1b:69:a8:5b:69:aa:e0:bc:b0:
                    a8:76:fa:eb:1c:9c:f4:87:50:99:b1:b5:a8:80:e7:
                    34:ed:14:6f:9f:54:6b:29:85:c4:1c:77:54:8f:df:
                    d0:df:a1:a5:58:27:e4:b9:75:fa:ff:64:4b:a7:06:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:AE:25:0D:B6:8A:48:D8:1B:8B:36:B6:BF:05:E0:2C:9D:9C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/13e06fb3-a846-3ab0-944b-535af99476d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b/45fe4043-69f6-4f38-9003-897cd909fb3b.crl

            X509v3 Authority Key Identifier:
                keyid:D0:31:C8:68:F7:13:5C:D1:51:FE:FC:08:83:5F:D5:29:CD:A3:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45fe4043-69f6-4f38-9003-897cd909fb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:13:a5:a5:57:10:0d:b0:46:d2:a3:e8:a9:cf:63:74:30:20:
         95:f4:e7:61:5e:67:0e:c4:91:a7:1d:17:04:af:31:e4:5c:9a:
         d5:f1:f5:de:9a:54:1c:1a:29:49:55:95:a1:ea:57:a2:a6:21:
         6d:27:4b:fb:94:49:d8:7f:3d:fc:57:ad:0d:05:ce:ca:e5:8a:
         79:10:ac:f8:b4:b3:8e:a4:81:c2:48:e8:d6:3b:a8:13:fb:2e:
         28:c1:7a:fb:d6:a9:55:85:a4:94:68:cc:cf:2b:20:d5:90:37:
         36:74:88:ac:f0:04:d6:4e:7e:64:0a:86:47:37:67:7b:ca:63:
         92:f0:ed:fe:f1:7e:59:81:24:7f:7a:db:94:9e:d9:d3:1c:a0:
         65:76:06:65:b1:ca:47:33:73:47:1d:fe:08:b0:8c:e1:18:3a:
         c2:68:df:15:47:c3:23:5e:5f:f5:ec:54:38:5c:f1:b1:81:27:
         db:5c:8b:05:6c:ba:21:12:88:d9:25:f9:19:c2:f1:9c:9b:c3:
         57:ef:11:c5:71:75:f9:3d:c6:9e:8d:5f:d9:35:5d:6b:6d:98:
         13:a5:67:f7:1a:23:91:1d:c5:1a:b2:b6:9c:b4:cc:c2:cf:79:
         f2:2d:86:2b:b3:9b:f4:54:4b:24:07:e3:4d:dd:b4:26:7f:b6:
         2b:54:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 13:47:47 2026 by rpki-client