Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa
File:                     4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa (raw, json)
Hash identifier:          1NHUnCkXlB0+I4xquOrDWMYhs+FafPx3mouclWfn1WE=
Subject key identifier:   1D:A0:EA:4D:E5:EA:8C:4E:E7:E6:51:A9:E0:EC:9E:4E:0E:A0:77:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584DDE879AE8E66F8AF3A5BA1480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     13367
IP address blocks:        68.47.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:9a:e8:e6:6f:8a:f3:a5:ba:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=0b60d071-f5ba-4af9-9f75-8dc273e93e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:db:d5:fc:f1:81:d0:8f:4e:0e:5a:f9:9e:da:
                    58:90:33:b9:cd:bf:3a:70:40:b8:04:4d:da:89:fd:
                    5a:90:63:06:86:56:41:9d:d7:88:29:09:a1:3f:43:
                    b3:be:22:c5:d9:e4:54:3e:79:5d:88:b7:37:4d:ad:
                    44:44:54:f9:d9:7d:f9:0f:88:78:8f:c0:79:b8:ea:
                    40:21:92:d6:38:06:24:90:2d:d9:3f:ea:38:20:90:
                    60:64:56:f8:50:76:a0:44:96:8a:11:a7:d6:50:92:
                    bf:a3:65:35:82:b5:39:f9:48:64:14:5e:96:32:ad:
                    18:9d:4b:96:13:94:6e:df:a5:71:6f:08:b0:54:ba:
                    f3:d5:d9:a7:3b:94:56:ef:3e:f5:a9:37:b4:51:88:
                    fd:bc:61:e8:e5:5c:56:5b:94:46:bc:28:e6:f8:30:
                    0f:44:7a:d5:e6:e0:5e:c8:07:0c:b9:2e:d2:ff:84:
                    c4:e2:03:35:5d:9a:ba:08:9b:67:b9:b0:fd:a2:18:
                    d9:9a:b0:ab:70:51:22:45:65:f0:48:f6:3c:2e:ad:
                    b2:9e:be:53:3b:67:4f:eb:ba:f8:aa:8f:c9:03:5f:
                    73:c0:c7:83:a9:e5:11:fa:c6:00:96:6c:f0:27:75:
                    11:b3:17:07:41:ad:83:ad:5d:bc:94:a0:25:da:f3:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:EA:4D:E5:EA:8C:4E:E7:E6:51:A9:E0:EC:9E:4E:0E:A0:77:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4afdcc4c-7e2d-3468-862c-2b8ea7f1bac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.47.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:01:03:67:fd:c9:f8:b6:9e:f4:bc:8f:1c:e4:6b:e2:a0:18:
         a0:75:22:ea:05:76:57:88:e7:1b:1d:89:a7:a9:f2:c9:3f:61:
         a1:31:c3:4d:80:58:2f:7f:73:d7:8c:80:f2:02:2c:dc:1a:11:
         ec:4d:28:2c:ca:93:49:5b:ae:32:44:a5:19:f2:3c:08:c3:44:
         ae:fa:a0:a8:ef:f9:bb:3c:43:16:a6:d8:3d:32:08:e4:f6:21:
         2e:47:b2:0e:00:a4:06:f0:c3:06:db:f3:24:73:90:82:47:0a:
         e5:af:b3:dc:ef:93:ad:82:76:24:6c:68:4e:81:47:22:5c:34:
         ce:b7:8f:29:0f:11:55:f9:17:a3:bf:5a:63:4a:46:b0:47:7a:
         ef:48:86:e4:9e:fe:dc:69:6e:db:d0:ea:be:4a:0e:0b:8a:76:
         f8:c6:37:fd:59:47:ad:13:f7:aa:3a:f4:92:17:ba:05:15:ac:
         1f:3c:5d:b5:15:23:08:1e:35:17:f7:cc:b9:c7:50:55:ca:fd:
         ac:bb:70:63:e8:81:35:b3:f1:2e:7d:9d:e4:08:c6:0a:81:7a:
         fa:a5:5c:c5:a2:a8:75:f4:d8:6a:af:22:6a:e0:37:c3:d0:7d:
         fa:89:dd:f0:ed:e1:c8:58:fa:f8:15:03:29:67:af:b9:85:74:
         cf:f9:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:30:59 2026 by rpki-client