Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/0bf675c4-28ff-3657-899d-f546725b735f.roa
File:                     0bf675c4-28ff-3657-899d-f546725b735f.roa (raw, json)
Hash identifier:          jAtRlqLjyWJs/IUFrBN1gWPtj/OppkkPIQyqIu4xnaQ=
Subject key identifier:   39:0E:63:BE:A4:54:84:D8:E5:E1:DF:77:7A:DF:6A:6C:A1:B3:2B:A7
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584EE7BC9B69D68EFB6E5828278B
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/0bf675c4-28ff-3657-899d-f546725b735f.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     27281
IP address blocks:        192.184.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9b:69:d6:8e:fb:6e:58:28:27:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=24d01736-b31c-4ae1-821f-d72ec9dfa71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:c7:6a:c0:19:06:b1:5f:ec:7d:22:b1:4a:
                    a3:79:62:10:6a:72:b4:90:9b:3d:3d:e0:5c:1a:19:
                    35:5e:2d:f7:7e:c3:77:10:43:1c:69:01:0e:b3:81:
                    7f:3c:1c:6c:95:e5:52:72:73:31:e0:58:03:67:34:
                    7b:1b:90:84:c5:3e:0e:60:92:c5:f3:62:b3:78:e8:
                    f1:98:38:c4:b6:cc:12:0e:41:e2:dd:94:79:e7:a0:
                    91:9b:3a:ee:76:ad:e9:24:cd:81:64:52:8d:78:22:
                    ed:99:0b:86:11:10:ce:ab:0b:19:6a:46:ee:c3:77:
                    de:f1:f8:5a:31:ee:ef:28:23:2c:75:92:72:4e:46:
                    b6:89:79:3a:d8:36:e6:4f:3b:9b:44:65:02:e6:db:
                    3b:c7:b7:e7:6e:85:d5:dc:ee:e0:8c:83:f6:4b:63:
                    a7:e4:6a:63:cd:99:82:92:22:07:e9:26:87:7f:ef:
                    e4:a2:6f:83:51:d1:e3:95:6e:28:67:2c:1a:44:b1:
                    e1:4a:b3:9f:5d:d5:dd:92:d7:4f:4c:c6:49:51:e6:
                    30:b3:c1:71:46:03:a2:bf:ea:24:1a:2e:04:83:43:
                    68:e7:07:c1:76:ad:08:16:ae:8d:8a:59:b4:c2:0a:
                    08:2d:dd:5a:b6:99:1a:79:a9:8c:26:32:99:73:34:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:63:BE:A4:54:84:D8:E5:E1:DF:77:7A:DF:6A:6C:A1:B3:2B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/0bf675c4-28ff-3657-899d-f546725b735f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8b:a5:0f:91:59:a4:32:13:77:27:3f:09:e4:31:8e:c8:2a:
         58:91:dc:71:3b:5c:dd:51:93:ed:b3:29:a3:51:10:d9:d9:fe:
         d5:a7:7d:38:d7:d1:b3:a6:24:4b:80:4e:7c:ae:cb:58:ef:db:
         ef:4b:0b:96:d0:c2:c6:3a:e0:9e:7b:2b:88:ef:21:b3:2f:63:
         88:df:7e:3b:64:e0:1b:11:21:10:8b:93:c0:77:73:bd:1a:37:
         e5:2b:15:84:84:bc:81:1b:28:7c:1d:ae:ce:cf:6e:c5:16:e9:
         8a:dd:58:e4:4c:0f:6d:6b:a2:42:d6:06:0d:1d:bb:ee:58:f0:
         b8:c0:81:8d:96:b7:68:ed:30:1d:5c:f4:ab:19:1c:6f:80:8a:
         46:13:5b:fb:3c:13:a6:ca:81:3e:14:b9:a2:31:bc:71:7c:de:
         b2:e7:e0:a3:c9:13:31:21:14:64:19:94:02:c5:37:1f:bb:ec:
         71:c9:78:3e:77:87:08:99:cc:a3:a2:d0:40:23:3a:17:3c:e8:
         7a:89:25:20:68:89:a1:85:46:5c:76:b4:d2:b9:0d:50:13:a1:
         9e:99:c6:69:c7:c7:7f:57:83:f6:59:33:64:f8:fb:e4:c3:f4:
         67:ee:23:7b:52:7f:46:e3:e1:5e:c5:8d:ba:54:e2:7d:bb:a9:
         4c:6e:99:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJtp1o77blgoJ4swDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5
Mzc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
MjRkMDE3MzYtYjMxYy00YWUxLTgyMWYtZDcyZWM5ZGZhNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKDHasAZBrFf7H0isUqjeWIQanK0kJs9PeBc
Ghk1Xi33fsN3EEMcaQEOs4F/PBxsleVScnMx4FgDZzR7G5CExT4OYJLF82KzeOjx
mDjEtswSDkHi3ZR556CRmzrudq3pJM2BZFKNeCLtmQuGERDOqwsZakbuw3fe8fha
Me7vKCMsdZJyTka2iXk62DbmTzubRGUC5ts7x7fnboXV3O7gjIP2S2On5GpjzZmC
kiIH6SaHf+/kom+DUdHjlW4oZywaRLHhSrOfXdXdktdPTMZJUeYws8FxRgOiv+ok
Gi4Eg0No5wfBdq0IFq6Nilm0wgoILd1atpkaeamMJjKZczR1LQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkOY76kVITY5eHfd3rfamyhsyunMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy
MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMGJmNjc1YzQtMjhmZi0z
NjU3LTg5OWQtZjU0NjcyNWI3MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz
MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0
OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi
MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6LpQ+RWaQyE3cnPwnkMY7IKliR3HE7XN1Rk+2zKaNRENnZ/tWnfTjX
0bOmJEuATnyuy1jv2+9LC5bQwsY64J57K4jvIbMvY4jffjtk4BsRIRCLk8B3c70a
N+UrFYSEvIEbKHwdrs7PbsUW6YrdWORMD21rokLWBg0du+5Y8LjAgY2Wt2jtMB1c
9KsZHG+AikYTW/s8E6bKgT4UuaIxvHF83rLn4KPJEzEhFGQZlALFNx+77HHJeD53
hwiZzKOi0EAjOhc86HqJJSBoiaGFRlx2tNK5DVAToZ6ZxmnHx39Xg/ZZM2T4++TD
9GfuI3tSf0bj4V7FjbpU4n27qUxumX0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:50:48 2026 by rpki-client