Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7431dad7-bd36-3801-8f59-e9cfd625f104.roa
File:                     7431dad7-bd36-3801-8f59-e9cfd625f104.roa (raw, json)
Hash identifier:          TIe57ddoid2VfKw7zVXB+KJQtpWrG6sxbD5Y+pWXhbY=
Subject key identifier:   64:F7:9F:EC:06:A6:94:BB:5F:4D:8B:93:1E:80:03:16:C7:FE:9A:69
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED863DEF500AE0DF1BE142B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7431dad7-bd36-3801-8f59-e9cfd625f104.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33668
IP address blocks:        68.43.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:63:de:f5:00:ae:0d:f1:be:14:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=06108961-fddb-4ba8-b174-5caaeea6ce25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:64:e7:2b:c6:2d:04:92:bd:40:57:58:c9:
                    df:42:1d:ea:a3:f3:a2:cb:b0:4c:82:be:66:b9:f7:
                    0b:86:d4:ed:4c:28:aa:ad:52:ba:ad:ea:fb:a1:61:
                    cc:5f:4e:b3:35:fa:7f:b5:40:a9:3a:00:24:44:19:
                    75:f8:00:de:81:54:7a:df:83:ab:c8:57:6d:cb:06:
                    b9:31:58:51:5f:cc:4b:91:69:e8:02:86:f1:ca:e5:
                    32:37:4c:e8:b1:d9:fa:ce:51:28:3c:d4:d1:2f:54:
                    ef:55:ef:97:c0:dd:10:56:a3:b4:70:0d:c6:7a:03:
                    13:3c:d5:c9:53:57:7e:e9:f1:7f:34:d3:f0:3e:86:
                    a0:3f:5d:97:7e:11:fc:ac:7b:ef:38:2f:01:28:bd:
                    d5:a3:a9:18:15:7e:45:79:02:03:c9:25:35:84:a7:
                    91:3f:16:86:fc:a7:66:80:a9:1a:53:2a:6f:2f:db:
                    d2:e7:4b:4a:a8:f8:9e:5c:22:30:bd:48:30:82:4e:
                    6e:fa:d8:1a:c9:ed:63:76:9b:20:ea:dd:ca:05:5d:
                    39:1c:ef:47:3b:c4:17:49:38:ab:10:61:58:b4:22:
                    91:8b:75:57:ac:9c:93:32:b0:9b:88:c9:f6:fb:ed:
                    0d:6d:f1:23:2d:cb:2b:8a:6d:d0:24:2b:98:ae:41:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F7:9F:EC:06:A6:94:BB:5F:4D:8B:93:1E:80:03:16:C7:FE:9A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7431dad7-bd36-3801-8f59-e9cfd625f104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.43.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:cd:a0:e8:db:b1:0f:03:f2:8d:f2:97:41:0e:b3:91:f0:
         d0:48:07:58:9c:0d:a0:0d:98:3b:3b:c4:98:89:3f:bc:94:4f:
         49:92:cf:38:8b:b5:f0:d2:06:d4:15:54:48:96:5c:cc:87:45:
         51:f0:79:b5:8b:5f:14:c7:47:c2:aa:d7:dc:8f:e6:2e:14:53:
         96:66:24:d5:93:0d:79:07:2c:d5:28:fd:6e:e2:8f:b2:27:fd:
         4c:71:ce:d1:4e:ba:f4:5f:7d:46:05:70:68:4a:4e:fd:c5:d2:
         3a:b4:3c:7b:aa:a5:12:11:25:66:1b:18:ea:f3:a6:67:f6:c3:
         3c:99:c0:23:79:b4:84:c1:2b:d2:22:c9:1f:da:72:1e:45:74:
         ed:d8:3b:ac:0b:a1:f7:27:c3:af:54:d5:94:f0:cd:1d:0f:4c:
         8a:ae:8f:1a:dc:b0:c2:32:26:b6:39:c0:26:48:da:50:a7:8f:
         8f:cb:ac:36:09:2b:57:18:de:6e:4f:09:8c:18:c2:53:88:be:
         b8:7e:81:68:bb:be:df:ce:57:cf:89:13:35:e3:fb:a4:06:13:
         d0:d5:d2:56:a8:19:cd:b4:c4:a4:72:32:8d:18:b5:1f:2f:2d:
         88:22:87:02:51:ce:97:d9:b5:f4:19:30:6b:a8:de:4c:47:f1:
         79:9d:55:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:31:42 2026 by rpki-client