Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5437051a-8401-31cb-899d-8c26652e00c2.roa
File:                     5437051a-8401-31cb-899d-8c26652e00c2.roa (raw, json)
Hash identifier:          2rOlRySRK6x4hCmegHk+yAm7Pm0arBpPcK/t5dAxzgU=
Subject key identifier:   CA:03:87:07:DF:5F:A4:D2:C2:81:B7:C5:A7:BC:93:73:19:DC:6C:E4
Certificate issuer:       /CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
Certificate serial:       010D0C9F4328584EA7879247152BAABADA2C4480
Authority key identifier: 47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5437051a-8401-31cb-899d-8c26652e00c2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1054
IP address blocks:        68.68.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:92:47:15:2b:aa:ba:da:2c:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=49124b7a-6187-45fb-9e59-08fc0396dc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:64:4e:91:1f:46:2a:ea:d0:29:0a:1c:c8:
                    bd:1c:92:62:48:a3:f4:2e:02:39:b1:c3:92:4f:d9:
                    35:59:5a:19:4a:ce:93:00:3b:fb:9f:29:47:c3:69:
                    5a:e3:fe:f2:f7:1f:1b:e1:4e:77:ee:74:5c:fb:20:
                    ed:0e:5c:3d:24:46:d1:1b:9c:46:7b:9a:91:3d:a2:
                    92:d1:23:4e:db:fb:05:6f:95:5d:98:f2:a8:dd:2d:
                    9e:1c:1e:d6:93:95:78:52:81:d2:ba:50:a7:2f:dc:
                    1e:2b:79:bc:88:2c:5a:d0:ac:6c:05:74:4a:5a:69:
                    95:2c:f1:60:76:bb:83:93:e2:75:6b:f7:18:2f:24:
                    85:c4:c0:4b:30:a0:65:e8:c8:37:40:44:5f:82:ef:
                    a6:11:59:3e:50:a3:79:1f:a4:7f:5c:e9:e1:ea:a8:
                    f8:ff:e9:1f:bb:ca:36:52:b9:a8:8f:0f:31:e5:d7:
                    f0:64:e8:f0:69:9f:45:4f:2a:dc:94:9f:ca:10:07:
                    c1:b0:a0:68:47:ab:6b:93:f5:eb:34:44:44:95:e6:
                    18:35:7d:4e:07:cb:d9:2e:03:29:58:54:e4:5c:aa:
                    6f:09:21:48:01:5d:3b:ed:68:10:07:5d:df:57:5c:
                    bd:c4:a8:2a:1a:0a:e4:71:a5:67:f6:6b:d1:23:f5:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:87:07:DF:5F:A4:D2:C2:81:B7:C5:A7:BC:93:73:19:DC:6C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5437051a-8401-31cb-899d-8c26652e00c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:13:64:f7:6f:dd:c0:80:8e:76:f2:11:60:56:33:51:50:4e:
         78:c5:8b:d4:7f:52:a3:5e:6d:d1:e8:65:77:c5:e1:43:55:e0:
         06:57:4d:aa:17:1a:c2:52:e3:bb:6a:31:c3:a6:fa:6f:09:99:
         4f:94:90:5c:c3:22:4f:3f:4c:25:a6:e4:d0:58:93:c7:86:34:
         77:05:d4:a8:c1:ec:cd:cb:98:42:93:ff:28:60:82:4b:fe:86:
         dc:d7:36:db:72:ed:11:c7:a9:bd:1d:9a:73:f4:11:fb:48:a3:
         26:1c:18:4d:a7:2d:a9:af:f1:8a:af:1d:35:72:81:2f:9c:84:
         46:13:3a:62:98:d4:51:65:51:28:b1:4e:b0:cd:08:b9:3e:b7:
         3b:0c:b7:31:25:51:d2:2b:0b:9d:77:7e:94:cb:04:65:bb:ac:
         5b:a8:a7:47:64:4a:ce:0f:58:a6:2d:54:8e:4a:84:47:bb:37:
         0d:db:49:c3:74:b7:1d:8b:e1:72:36:00:d1:57:54:9c:17:03:
         49:e2:6f:5b:37:d4:c0:9a:34:40:8a:3a:45:79:e4:a5:23:4b:
         a7:d1:56:14:a8:c4:70:ea:94:9f:9e:ba:c2:22:fe:14:14:6d:
         82:9d:d0:a7:24:3f:39:47:32:c9:2d:83:17:c7:4f:66:a5:e1:
         32:ae:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:36 2026 by rpki-client