Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa
File:                     93db8749-21a8-3ed7-b681-b51e2692f9ec.roa (raw, json)
Hash identifier:          DBbn7n2nWIf3kovrNez19dvwmMi6gaEeHASBglpuVq4=
Subject key identifier:   5B:11:55:73:BF:B8:E9:5F:02:ED:6E:61:A9:AF:17:D6:FA:46:3B:EE
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F49757C2055821BD9B9BBB8E0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        68.64.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:7c:20:55:82:1b:d9:b9:bb:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=546a7f30-d4f3-4a9a-8803-3c34964ece02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:93:32:0b:a4:98:15:bf:44:bf:09:bc:23:08:
                    da:7a:2f:f8:77:3d:79:91:49:7d:99:1e:f7:62:d9:
                    a5:e3:a3:e9:cb:9b:c2:df:cb:dc:fd:bf:d1:15:63:
                    40:ba:c2:49:d6:0d:50:34:10:37:27:08:93:11:dc:
                    8b:7b:23:95:79:4a:1e:aa:ba:6f:e9:04:25:b0:f2:
                    21:44:52:47:a6:6d:5c:d4:9d:2e:72:f0:e2:5d:b6:
                    0b:e7:91:ec:d9:5f:77:09:c9:93:4b:25:be:cb:f1:
                    77:3d:ef:1a:ae:4c:68:dd:ee:9d:c8:9b:e2:c5:59:
                    c8:d6:80:54:b8:21:55:f8:b2:c8:d9:2b:1b:2d:4c:
                    7e:91:6b:11:89:27:b4:fa:dc:d8:b8:ad:50:f6:5b:
                    30:b0:de:f0:be:d8:82:e3:b4:49:4b:22:3d:6b:26:
                    3f:38:75:e9:9b:91:b4:f3:4c:c4:dc:37:d4:9b:dd:
                    c1:7f:ff:a0:15:06:14:08:68:c3:56:12:9c:15:34:
                    24:79:4f:5e:e0:ab:37:77:f6:b3:91:0d:c9:12:90:
                    d1:a1:d7:7f:1b:32:20:8a:f3:e7:4f:83:e6:e7:20:
                    ad:75:a3:bc:45:ca:ed:52:9a:4f:4c:77:52:dc:d9:
                    d0:dd:04:8d:8b:6a:83:af:da:b2:e7:18:3e:0d:1d:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:55:73:BF:B8:E9:5F:02:ED:6E:61:A9:AF:17:D6:FA:46:3B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/93db8749-21a8-3ed7-b681-b51e2692f9ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:2f:2f:34:ef:d2:df:dc:41:a2:52:ed:f5:0e:9a:a9:c3:
         f5:1d:ce:6b:ef:10:2c:bc:8f:3f:0b:ad:95:ca:ea:dc:f0:7a:
         c8:e1:18:c2:79:20:cd:38:85:e5:c7:07:a6:58:a0:04:31:89:
         5b:0b:ed:bc:a9:11:f6:1d:a0:42:ec:cb:bf:5d:0a:a9:56:f3:
         ba:ad:23:f8:a5:58:c2:09:fe:10:5d:3e:5e:7d:e6:75:9a:01:
         09:9a:be:5d:39:86:0d:da:28:21:a5:3d:8d:33:b5:b7:e6:f6:
         63:86:98:8d:a3:a8:ab:07:e4:ac:6e:fb:22:e9:94:1a:e3:88:
         5b:fc:23:62:4d:75:a6:59:e7:87:1f:1a:7f:0d:9d:59:29:49:
         36:d0:71:ca:11:bc:98:22:69:f5:ad:c6:50:dd:6a:35:5d:2d:
         23:c3:97:56:7d:93:49:e6:10:a8:7e:06:87:17:3d:98:50:95:
         59:9b:38:7f:fc:6e:8d:34:e3:2d:92:37:13:6c:3e:0f:b0:b1:
         90:df:06:5b:61:81:57:f1:a4:5b:67:4f:5b:b6:23:66:47:57:
         a7:3e:41:eb:e8:23:d9:01:a7:43:eb:3b:9f:88:2b:82:5c:da:
         93:24:98:69:45:e2:42:85:9e:ea:6d:dc:52:75:c8:f7:50:54:
         22:e3:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:40:22 2026 by rpki-client