Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd8b3860-62fa-3e9c-88ff-07f35e58f72c.roa
File:                     cd8b3860-62fa-3e9c-88ff-07f35e58f72c.roa (raw, json)
Hash identifier:          sd867aweW8hva6F8xVEhHcKlGEVSG/1BxRWQM94NPH8=
Subject key identifier:   3C:81:D7:9D:3A:0F:7A:9E:2D:AB:D8:9D:A3:0C:76:C8:F3:5D:E9:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F48C09DCBF687EB83775C4B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd8b3860-62fa-3e9c-88ff-07f35e58f72c.roa
Signing time:             Thu 24 Sep 2026 19:01:45 +0000
ROA not before:           Thu 24 Sep 2026 19:01:45 +0000
ROA not after:            Wed 23 Dec 2026 20:01:45 +0000
asID:                     701
IP address blocks:        68.236.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:c0:9d:cb:f6:87:eb:83:77:5c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 24 19:01:45 2026 GMT
            Not After : Dec 23 20:01:45 2026 GMT
        Subject: CN=b6a4aeba-d197-43d6-808e-aa537689ad21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:20:16:32:01:e8:c0:d3:2d:37:16:eb:ff:
                    f5:74:fe:1c:0b:34:34:2c:59:20:64:b3:7f:49:6c:
                    d7:f6:57:71:0d:9d:77:b9:fa:06:d2:df:5f:2a:71:
                    e7:fb:8f:bf:fc:07:6c:54:cc:67:5e:e4:dd:be:ce:
                    7c:f9:6e:e7:df:d6:52:40:c4:d7:79:83:55:5c:3c:
                    fa:07:78:16:1c:7f:e8:cc:1b:ed:72:02:81:fc:9a:
                    4d:c4:83:d3:0e:c2:39:22:ad:36:50:ff:9b:84:37:
                    e1:7d:61:3e:d3:b4:71:57:21:df:66:bb:d5:fb:92:
                    ec:77:ed:d2:41:23:f3:d3:07:c6:0c:a0:b2:7a:e3:
                    ee:c1:44:08:49:f5:a0:ea:06:61:3a:a1:03:9f:f5:
                    fe:41:e1:c0:f1:8f:28:81:87:62:0a:51:83:c0:b7:
                    04:98:d3:7a:54:51:79:31:0c:76:3c:ad:13:4c:48:
                    6d:09:bc:4f:7e:bc:ec:64:c9:8b:78:cc:43:86:3b:
                    b0:e2:f3:15:b5:38:fe:3c:2c:e8:be:eb:d2:9a:aa:
                    f8:c4:47:6b:59:82:2f:d7:4c:d8:45:79:85:28:0a:
                    7b:f3:02:86:bc:00:2b:d4:c8:d3:1c:75:88:8d:67:
                    89:f6:73:f0:58:67:da:8f:3d:a5:d2:a3:d9:d5:a5:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:81:D7:9D:3A:0F:7A:9E:2D:AB:D8:9D:A3:0C:76:C8:F3:5D:E9:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd8b3860-62fa-3e9c-88ff-07f35e58f72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.236.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:83:5d:cd:bd:b6:a4:a3:ce:0a:9e:74:85:15:39:c5:36:07:
         78:72:6a:3f:74:d5:22:0b:20:11:b7:f0:e2:0b:ce:d7:a1:21:
         28:32:c3:d7:aa:22:7b:4d:ec:7b:d4:58:98:d0:96:ce:6d:df:
         59:a3:25:41:5c:61:db:61:97:40:4f:71:c8:6b:08:f4:8d:dd:
         c7:57:fb:f5:2f:d8:94:b2:26:92:90:18:ae:54:25:6c:32:a5:
         10:dc:ef:27:b4:13:f2:a2:cb:02:97:06:d0:df:43:8d:c9:31:
         c1:b9:9d:7d:9b:7d:8d:9b:1b:e0:c4:8b:89:a1:70:5e:da:b8:
         bf:98:a2:4e:56:6b:3a:bc:fc:3f:04:5e:13:a4:48:be:14:11:
         12:6b:c1:83:eb:c4:32:73:a6:00:c3:8f:d7:e5:78:70:c7:8c:
         72:68:e1:eb:db:65:f6:67:5b:3c:58:a7:25:14:46:7c:22:5e:
         4e:dc:af:81:f9:cd:2b:8b:c8:dd:82:cb:75:f5:d2:4a:28:f5:
         e8:63:eb:97:7c:73:83:55:e4:92:d5:ef:a8:9e:8f:55:1c:05:
         f0:ff:be:fb:21:cd:eb:37:c4:70:20:37:61:22:d7:e7:ef:4a:
         d6:fc:83:be:df:c6:3f:29:a8:8a:5e:4a:ff:65:a2:de:a4:34:
         65:fd:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 04:09:54 2026 by rpki-client