Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3440362b-7f7c-33b8-b3a6-bb3857728e2a.roa
File:                     3440362b-7f7c-33b8-b3a6-bb3857728e2a.roa (raw, json)
Hash identifier:          X4LQlkhDIZ1TB2yxPw/9kERVV5zkhgTJuzGXAiMYEQ8=
Subject key identifier:   01:E1:D1:7D:A5:8C:07:90:5C:88:2A:AE:68:5D:C2:70:F0:3D:55:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE92F25590A6F4008824C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3440362b-7f7c-33b8-b3a6-bb3857728e2a.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        68.32.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e9:2f:25:59:0a:6f:40:08:82:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=9ea485d6-2a14-4c51-9258-95e3d0df4e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:a4:54:c8:a3:d8:96:d9:20:de:3a:f7:0a:
                    c7:84:c3:ba:68:b4:da:7d:27:61:94:d9:32:d6:0a:
                    8b:23:91:62:92:d1:e6:18:ec:57:9c:87:c5:ab:3d:
                    98:df:75:3a:24:e9:cd:5b:ce:de:23:1d:1e:af:db:
                    c4:2c:7e:c6:3b:15:84:9b:2e:7d:d8:26:96:67:e6:
                    e4:ac:10:7f:2a:6e:9a:f5:82:41:fd:ac:c1:68:f0:
                    cb:1b:02:4d:45:0a:cc:39:1f:04:07:26:f6:13:6d:
                    f9:a9:1d:a8:00:54:49:a3:c7:e9:fe:04:c7:45:94:
                    92:0c:8f:92:af:f7:e1:6b:e3:e3:00:b1:18:ee:2f:
                    16:c1:6c:61:dd:90:4b:65:b2:4a:c9:dd:31:22:71:
                    36:79:56:84:c4:71:40:3d:86:6b:2b:2d:ca:8c:4e:
                    78:6d:28:d4:33:ed:96:34:03:19:26:49:0e:1a:97:
                    3e:f5:ca:9b:b6:72:00:6f:a4:18:b6:ca:4c:20:ea:
                    6e:ee:75:b3:4c:43:60:15:10:d2:e8:aa:3f:d3:13:
                    3f:b7:61:4f:a6:5f:1c:0a:e2:10:9d:76:bb:7b:29:
                    75:f9:ef:08:d0:6b:dd:7e:8f:fa:be:d5:59:30:84:
                    0b:e5:fe:03:80:44:e7:4f:08:ff:46:f9:b2:d6:04:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E1:D1:7D:A5:8C:07:90:5C:88:2A:AE:68:5D:C2:70:F0:3D:55:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3440362b-7f7c-33b8-b3a6-bb3857728e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.32.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:ec:7b:26:bb:d6:e4:a3:9a:9d:c5:58:ba:5c:fe:ad:7d:
         a8:b5:df:02:c4:e5:e0:f0:4a:7a:eb:12:7e:9b:66:c5:e7:94:
         ff:73:9d:28:14:f2:1a:40:49:b6:2e:d2:27:fe:ca:7c:64:b9:
         00:d0:b9:b7:be:5f:37:40:50:55:00:43:1a:0b:b2:d9:21:37:
         c5:0a:eb:12:49:d9:e4:46:51:71:85:7f:48:9d:e6:82:b1:35:
         10:8d:a0:ce:f0:2a:24:43:11:50:77:4e:d2:56:6c:ba:51:b1:
         4d:a0:fb:96:98:11:f9:f4:e7:f2:e2:b0:5c:ce:76:6d:58:26:
         15:2f:5c:d5:4c:dc:bd:8a:b8:07:a5:d3:dd:d9:ba:8f:11:66:
         69:e4:df:52:fb:8c:59:b3:d2:5d:af:8e:73:24:9c:27:4a:c7:
         00:5f:ce:c4:34:ba:a7:df:68:99:2f:cb:78:a9:7d:30:47:9b:
         ff:5e:e3:6e:47:b8:d7:1a:c2:83:9f:7a:9c:28:fc:f9:52:ee:
         81:f6:c0:fd:60:26:f1:6b:6a:d4:43:ee:77:6b:ce:52:ce:2d:
         c0:ec:82:b3:79:55:6e:9c:ec:c2:55:81:9c:0d:e4:70:77:f6:
         14:55:37:bf:91:23:d0:2f:8d:0b:92:f8:bb:9e:22:36:6b:a8:
         81:c0:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:04:57 2026 by rpki-client