Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9c4dc60c-ba63-3e38-8e72-cb1eb57404d3.roa
File:                     9c4dc60c-ba63-3e38-8e72-cb1eb57404d3.roa (raw, json)
Hash identifier:          r1R8zUjt4zvMAjTwUuRn/2NLKRS1u8jE6zSL5YRDPhE=
Subject key identifier:   7E:54:11:C0:4C:27:D5:E4:6B:61:B6:6A:0C:A1:77:2D:28:B8:82:B0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE42352F18E19C0731E5BBD80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9c4dc60c-ba63-3e38-8e72-cb1eb57404d3.roa
Signing time:             Wed 19 Aug 2026 18:03:59 +0000
ROA not before:           Wed 19 Aug 2026 18:03:59 +0000
ROA not after:            Thu 07 Mar 2030 05:00:00 +0000
asID:                     8068
IP address blocks:        40.66.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:52:f1:8e:19:c0:73:1e:5b:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:03:59 2026 GMT
            Not After : Mar  7 05:00:00 2030 GMT
        Subject: CN=49ca94c7-b18b-4f9b-8c76-5f27f5f08349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:a0:3a:c6:a1:52:0f:5f:38:cb:be:07:ed:
                    4d:f2:3f:93:ca:04:85:b4:f0:cd:ab:46:22:56:17:
                    64:1e:1b:44:d2:ef:bb:92:5e:f7:41:f3:6c:35:ff:
                    be:cc:fb:5a:f9:0f:5a:02:ee:76:a2:c1:03:99:28:
                    06:03:cf:7d:ba:22:94:1a:67:df:36:a9:25:6e:9f:
                    13:83:3a:d7:ca:fb:66:f3:ca:73:16:87:cb:0c:78:
                    f8:4a:d6:6e:33:12:3a:5d:72:65:f0:b3:9c:63:de:
                    90:d0:d7:94:32:42:1f:6e:e2:a6:4f:e4:35:3f:02:
                    0f:0f:6c:12:88:42:0e:ad:a6:e4:37:91:4a:51:81:
                    10:da:cb:94:a8:bd:b9:a1:32:b6:20:6a:83:a8:da:
                    3f:87:3c:a8:bd:ed:7f:5b:8d:49:fd:3b:1d:73:01:
                    61:e3:c6:6e:b4:a1:00:6f:02:85:99:34:b6:78:78:
                    0c:23:64:0e:b8:ed:90:8c:4d:91:7b:a0:64:9b:e6:
                    bc:4c:0a:b0:d7:2a:0d:c4:19:ac:12:24:d5:1d:80:
                    5d:a8:3a:f2:5e:0c:21:39:8a:03:27:64:db:d8:a4:
                    64:fd:52:c9:36:39:62:e6:ea:a5:e6:c6:d4:9f:2f:
                    42:35:28:de:52:2a:f9:e8:32:3e:cf:38:c4:23:6d:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:54:11:C0:4C:27:D5:E4:6B:61:B6:6A:0C:A1:77:2D:28:B8:82:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9c4dc60c-ba63-3e38-8e72-cb1eb57404d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.66.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:da:92:e5:48:b0:66:42:b5:49:4e:90:58:44:5b:42:ff:
         f1:75:f8:82:d1:62:70:09:3d:3e:73:61:ad:19:21:02:92:42:
         ab:38:9e:59:01:91:c8:fd:45:bf:65:02:50:c6:60:6a:ea:01:
         81:21:18:a4:aa:5e:5e:6e:85:a4:ef:26:42:24:49:cc:9c:b1:
         5d:3e:3c:81:4d:82:12:d0:4b:d0:2d:c3:c1:79:eb:c8:a9:a5:
         2b:9d:8e:0e:8d:27:e6:50:73:5f:c1:35:d9:81:c8:19:8b:71:
         8e:89:e2:d0:d3:99:2f:d4:3c:e0:e7:a6:bc:fb:3d:51:62:bc:
         43:f6:24:38:f5:55:1d:54:8a:8f:f7:f4:f1:47:37:c3:8e:d8:
         98:c5:f5:6b:95:5f:d2:59:39:b7:07:cd:94:86:60:55:34:b3:
         a3:e6:3a:67:40:56:b6:2d:ce:03:8d:11:2e:a4:69:6c:37:0c:
         a1:33:af:71:4d:0f:b7:d5:42:26:30:38:f8:53:93:ef:58:c3:
         64:30:4f:a2:99:20:28:10:66:91:e0:08:5f:10:64:90:04:89:
         bb:66:d2:84:f5:fe:4d:0a:91:d3:e1:08:96:e1:99:55:37:a5:
         ff:4f:5e:55:8b:f0:56:dc:75:63:46:c7:55:60:7e:25:b8:fb:
         4d:a4:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:56 2026 by rpki-client