Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/ebee498e-a59d-3902-a93e-7010a05ad4bd.roa
File:                     ebee498e-a59d-3902-a93e-7010a05ad4bd.roa (raw, json)
Hash identifier:          72ky/yxNmoBrcccC9ySJVCBCkQU7OxNHzeIA9pEAi1c=
Subject key identifier:   61:75:83:B3:3D:91:9D:EF:AD:34:A0:36:BB:A6:38:07:EC:59:3D:2B
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584CED278585FB4F31681DE67FC0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/ebee498e-a59d-3902-a93e-7010a05ad4bd.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     36103
IP address blocks:        68.68.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:85:85:fb:4f:31:68:1d:e6:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=2f75f818-c702-4156-8b26-302f05da7093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:1f:30:27:80:76:32:0c:de:cc:12:b6:8d:
                    64:0d:37:0d:16:46:a3:fa:8d:1e:20:65:0b:ab:b0:
                    8a:4c:60:02:33:99:30:8a:61:ed:44:70:c3:1b:74:
                    ea:76:d4:73:b9:df:9f:da:7a:e6:3a:df:2f:e6:c5:
                    a3:8c:66:ff:a7:fd:e0:04:83:50:f4:53:a4:81:e3:
                    a5:13:50:52:52:96:1f:f8:c1:29:1b:0c:93:ea:2d:
                    9a:ae:10:dc:46:76:71:34:bc:ef:78:fc:3b:27:d4:
                    d6:e5:ad:8a:71:9c:de:67:49:67:c6:33:54:6d:34:
                    89:f2:9d:f2:b6:cd:38:47:18:f7:77:e3:0c:4e:eb:
                    bc:f0:be:84:7d:e9:84:71:44:15:00:c3:49:29:d8:
                    e5:4f:58:4c:35:8c:28:18:de:82:d4:6c:b0:07:51:
                    c9:fc:4c:3a:fb:6f:fb:a8:ca:84:07:31:a4:68:d4:
                    c0:47:c4:00:b9:25:c1:f7:fc:0c:8e:90:d3:ba:31:
                    48:b3:d5:ad:98:b9:95:a6:6c:67:d5:2d:88:e7:dc:
                    23:14:24:89:1d:8e:12:be:98:7d:c9:71:18:57:db:
                    87:7c:55:b2:bb:97:79:fb:49:c7:21:d5:9e:44:9d:
                    82:48:b3:66:55:06:30:b7:3e:c4:1a:8f:31:b5:d0:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:83:B3:3D:91:9D:EF:AD:34:A0:36:BB:A6:38:07:EC:59:3D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/ebee498e-a59d-3902-a93e-7010a05ad4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:26:58:6b:36:bf:6d:38:e4:e0:8b:ea:0c:41:1d:94:de:
         51:0f:90:05:e2:b7:38:5f:2b:4a:1f:e8:55:2d:9b:fc:3c:f2:
         7e:73:16:18:06:6c:c1:8f:43:dd:5d:ff:2e:17:97:2e:dc:26:
         b5:57:c4:5d:83:6b:7e:9c:87:be:1a:60:55:f2:f3:b5:d9:c7:
         8b:5c:71:e4:d7:b5:76:7b:e1:09:b0:fc:f5:5a:c9:6f:92:26:
         f1:fe:0d:d9:2b:37:dd:3a:c5:49:8f:dd:27:6f:2a:17:26:26:
         7b:2a:c8:30:8b:95:85:e4:53:4b:00:5b:87:04:d8:4b:e0:a0:
         9b:02:cd:3a:08:0f:0c:d3:7b:b5:0e:7e:02:61:bc:e4:d0:d1:
         10:33:1e:4c:41:48:4b:40:46:19:0c:96:7f:85:ce:66:d9:e4:
         c0:f1:1e:8d:91:85:fb:93:a8:2e:88:fb:96:f8:d3:b9:9b:b8:
         9e:cf:5b:60:a7:fd:2d:db:bf:ca:ec:c1:df:aa:5c:4f:3a:eb:
         0a:9e:c4:d1:3a:8e:46:3f:f6:88:b4:59:dc:90:fa:20:97:14:
         59:66:62:11:7c:ed:60:c4:a9:8f:65:f5:bc:56:e6:68:06:51:
         58:4a:70:64:06:1d:98:4e:c5:aa:83:42:1a:91:fb:54:0b:2c:
         cf:65:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:46 2026 by rpki-client