Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa
File:                     0c0f1667-bdd4-3810-ab75-9771278ab789.roa (raw, json)
Hash identifier:          ktdefuNYCBTChINuP0Lia4XO9bmQp2R5GjvEdUFtE08=
Subject key identifier:   CF:8D:92:C4:B7:7A:57:2D:C5:3B:DE:25:60:30:A6:DA:F7:B7:05:32
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584CB981D0B51F29B448230582C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        68.64.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d0:b5:1f:29:b4:48:23:05:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=4796005a-4e35-48d4-be24-70fb039f13ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:c2:6a:e1:22:73:e7:2b:04:a2:5a:5f:81:
                    c9:38:46:53:d2:b3:31:b2:7a:9b:b4:eb:5c:ee:73:
                    e2:43:4f:2e:fa:56:3c:ed:50:e9:15:13:61:ab:6f:
                    17:ed:cd:c3:c4:00:a7:73:08:b3:86:3e:fb:f5:3e:
                    7c:57:cb:b3:4e:97:ca:32:6b:15:15:2b:8c:9f:96:
                    2b:04:48:e7:ab:d3:08:76:18:85:73:0e:8c:c9:a5:
                    e1:e7:fe:67:16:9e:69:20:d1:3d:af:d2:a8:a0:b9:
                    9d:4d:d1:aa:85:2d:76:92:a5:c8:6a:67:6e:2e:04:
                    cd:22:45:8c:f2:05:04:63:c5:07:bc:0a:0f:d1:8a:
                    cd:0c:52:0d:d7:b6:1b:59:e1:e4:39:e4:83:9a:37:
                    d7:49:92:0f:80:2e:f8:2d:42:ad:ca:1d:fb:f3:39:
                    49:c1:91:27:1e:5f:c6:16:86:34:39:15:c3:ed:e5:
                    4e:e3:01:33:22:03:4c:7f:8b:43:e4:ca:58:da:fb:
                    7d:a0:64:18:ef:5d:88:da:aa:36:d0:76:7f:ff:3a:
                    94:e1:0b:2b:c4:fd:29:cd:71:02:eb:d6:b0:a2:02:
                    31:ee:9a:05:24:78:01:15:90:00:c6:d9:3e:2f:f2:
                    19:d8:a9:54:73:e7:7a:c2:ab:ab:27:08:30:96:a3:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:92:C4:B7:7A:57:2D:C5:3B:DE:25:60:30:A6:DA:F7:B7:05:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:f8:7d:0d:a8:99:87:d5:51:e1:cc:39:0d:d9:99:4c:40:42:
         4c:e8:32:64:fb:05:2a:b9:80:4d:f7:04:b2:88:a7:49:54:82:
         1f:a3:c8:68:7b:3f:59:49:0d:f3:5a:dd:a1:fe:8b:11:98:85:
         b4:45:e4:dc:21:21:9a:83:8e:36:e7:b0:5f:eb:1a:98:4f:b0:
         95:79:33:7e:d5:fe:b8:b6:fc:c9:be:35:91:5b:e8:14:e3:54:
         db:71:f3:da:0e:d7:19:d7:6f:96:50:ef:e4:6f:6d:53:c1:e8:
         d3:85:14:16:6c:b6:9c:14:52:e0:5e:b8:51:ac:5c:4f:aa:f3:
         41:4c:ba:1b:70:e6:61:1e:57:2e:ea:7a:ee:d4:d3:f9:56:cf:
         30:eb:91:0f:fd:66:7f:be:c8:dc:aa:2a:b8:06:36:56:6a:cd:
         08:24:6f:cc:c9:c2:e8:9d:f0:f3:43:ce:c3:49:3f:a6:3f:12:
         60:2a:0d:c1:47:24:d9:c0:75:eb:af:99:e7:b8:cb:0d:79:33:
         68:fa:33:d8:c3:0b:ac:49:bc:3a:46:96:9c:59:cb:0e:1c:63:
         79:5e:de:67:eb:96:89:c2:ce:a3:06:a4:9c:eb:3b:3e:a7:79:
         a6:8d:a7:ae:9e:cd:1d:a5:74:ac:da:19:e1:9d:8a:9e:42:03:
         cc:56:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:52 2026 by rpki-client