Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa
File:                     86835d99-6480-31d7-9ee1-ae9b52b891c7.roa (raw, json)
Hash identifier:          vB1SJuUeV+qkjb3t5f5Oq1M6FsqY7pfE1mvkensSHD4=
Subject key identifier:   57:3F:2F:75:91:4D:2C:FA:29:EA:A0:8D:06:92:75:E9:9C:CA:16:07
Certificate issuer:       /CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
Certificate serial:       010D0C9F4328584CC7774C9F9C878933D6EFA080
Authority key identifier: A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     52423
IP address blocks:        199.33.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:4c:9f:9c:87:89:33:d6:ef:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f64cc24-ef62-4498-b9ab-965375ea0e8e
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=87ac504f-3f45-45ed-a3f1-ce7ce949da0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:9e:97:8a:a1:e7:4e:f1:d4:d9:c0:4f:e5:
                    60:fb:3d:f4:aa:84:5e:8c:be:80:e2:77:c6:c2:e0:
                    30:2e:b3:3b:73:ec:3c:40:80:b9:97:23:b2:06:3a:
                    89:85:52:0b:d7:d5:7a:04:cb:07:65:a5:6f:65:ee:
                    1a:7c:aa:f5:91:c3:00:cd:55:a4:a3:75:cd:14:1c:
                    35:2a:e2:55:e3:4d:84:77:3e:5d:6b:a4:b1:3a:ad:
                    e4:72:59:bf:57:6a:9e:d0:d2:96:11:af:cb:5c:bc:
                    2e:39:53:4a:e5:78:d5:ff:51:88:43:5d:bb:ca:24:
                    0d:34:f7:4a:18:8a:34:7e:35:72:7b:1a:9e:e6:3e:
                    3b:2f:8b:e3:f3:d0:dc:3c:20:f5:66:47:d1:70:cb:
                    fb:26:40:a4:8e:0b:6f:0e:c6:ac:66:3e:f3:b3:f5:
                    3b:5c:f2:ca:e7:b8:05:57:0a:d7:91:69:e3:f1:4b:
                    09:f7:06:6f:13:e5:86:e9:11:7a:5b:3a:63:99:0b:
                    47:e2:e7:ec:8f:4c:72:59:1e:36:ba:63:76:09:4f:
                    2c:81:42:cf:33:3e:cf:dc:bb:3b:6b:39:40:77:5f:
                    0b:c9:1e:42:a6:65:7d:2e:51:b4:b3:c2:c9:26:30:
                    b3:de:e9:f2:25:70:bb:12:3f:3f:2e:b7:24:cd:59:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3F:2F:75:91:4D:2C:FA:29:EA:A0:8D:06:92:75:E9:9C:CA:16:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/86835d99-6480-31d7-9ee1-ae9b52b891c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e/6f64cc24-ef62-4498-b9ab-965375ea0e8e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:6A:9A:E3:3D:66:0D:C4:7C:C8:A4:02:58:D8:FD:15:E1:90:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6f64cc24-ef62-4498-b9ab-965375ea0e8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:de:33:38:aa:ac:ad:2d:08:1d:f3:17:b4:c8:4b:90:e6:
         24:d3:f8:ed:e9:11:32:a9:d8:aa:90:de:16:cd:9d:06:c9:5a:
         7e:e9:f4:4b:fb:b7:7d:d6:1a:2d:e6:45:49:c0:b3:49:64:2a:
         c8:63:29:0d:3c:bd:f9:a8:76:ed:98:87:e8:27:89:a8:e3:7f:
         42:45:54:32:cd:17:99:c0:70:76:94:6a:2d:62:db:78:96:4b:
         b9:12:e9:43:b7:4a:ea:cf:fb:0e:bd:5b:a6:3d:75:aa:e1:b5:
         05:b5:78:eb:17:ff:7f:35:56:e7:bf:08:e6:e8:1d:38:6b:3a:
         25:f1:9d:d3:e4:1b:4f:d7:05:85:21:18:3f:e6:98:95:8f:c1:
         db:91:43:42:de:c9:e4:33:2a:8b:69:5e:57:92:1b:c5:88:f5:
         68:3f:46:31:3a:bd:4e:61:e1:d4:40:cf:ad:3f:5c:f8:5b:7c:
         c5:d9:23:2b:b6:9f:d0:47:d7:6c:66:1d:8a:b3:d8:3a:80:fd:
         91:3d:b6:31:7b:6b:0a:ac:a6:6b:de:ce:5a:ef:b6:4f:4d:e3:
         3f:a9:05:06:0b:56:00:60:c3:8c:ad:b1:7b:1d:37:d7:f8:a9:
         26:e4:5e:40:8a:39:75:e6:85:e8:04:e4:24:6e:41:ae:57:b5:
         1f:22:10:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:39 2026 by rpki-client