Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79e5a0eb-bd4d-3a10-84ef-392f39b2cbfc.roa
File:                     79e5a0eb-bd4d-3a10-84ef-392f39b2cbfc.roa (raw, json)
Hash identifier:          BUf6R6Sh8W7D50aiiRlzYQmCe/XbEdUF1D2Z1YqO4go=
Subject key identifier:   A6:BF:63:30:15:83:43:C3:A2:D9:48:B7:CC:B2:1E:F9:2F:EC:4E:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497778C73580E48CB8DB4B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79e5a0eb-bd4d-3a10-84ef-392f39b2cbfc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        68.53.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:78:c7:35:80:e4:8c:b8:db:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=772333da-2b29-4c18-bd39-3d7f6a22cc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:9a:1d:5f:a1:09:0d:67:56:95:ea:c0:9b:
                    74:61:2f:ea:bf:69:9a:26:e4:96:6e:7c:92:c5:19:
                    9c:0a:3c:71:7e:47:96:54:10:49:8c:0d:fe:80:d3:
                    8f:84:ba:42:89:70:8a:8a:97:2a:d7:b0:b7:02:e8:
                    e1:b5:24:2f:5f:17:5e:85:2d:02:be:c6:15:ba:36:
                    b5:ee:c9:10:2e:52:5c:69:1f:c1:ce:b7:1f:f7:e1:
                    39:2a:74:96:7e:71:a4:9c:4d:61:15:fc:81:08:1f:
                    26:d5:99:e7:cc:a2:23:39:02:20:62:1e:64:69:07:
                    05:72:8b:f8:51:76:97:2f:fe:33:72:c0:87:b9:f5:
                    63:f7:c8:16:c7:d8:38:31:6e:d3:2f:70:cb:a3:67:
                    e0:2a:53:21:70:1b:41:4d:2a:20:d2:94:2d:d9:18:
                    2f:50:3e:8b:6a:a4:f1:83:2c:e5:9c:34:7c:5c:40:
                    41:f5:1a:b6:30:22:73:d4:54:89:0c:e5:ba:59:95:
                    f5:4d:d4:69:8c:0a:74:4a:4a:db:32:b9:6f:61:62:
                    51:67:c1:73:04:4b:4d:ee:4b:b0:d4:42:5f:9b:31:
                    db:17:81:d8:f0:25:26:77:ca:a9:7d:61:9b:38:8c:
                    52:6d:1e:a4:cf:d9:03:29:0e:1d:64:10:60:c3:58:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BF:63:30:15:83:43:C3:A2:D9:48:B7:CC:B2:1E:F9:2F:EC:4E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79e5a0eb-bd4d-3a10-84ef-392f39b2cbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ff:2a:47:b1:d3:cb:70:fd:e3:bb:30:77:c7:5f:3b:66:fa:
         a2:55:88:c2:48:93:16:a4:03:fb:de:c3:6d:d1:d1:d2:af:dc:
         d6:2a:a4:fa:22:b2:3b:a2:6b:43:04:02:42:a1:de:da:31:f7:
         06:55:c6:77:95:2b:63:64:d8:12:2c:b9:fb:d7:38:27:45:4b:
         56:99:ac:3e:16:1f:d8:11:a6:39:53:b4:f8:79:a3:4a:30:b5:
         34:a2:61:d3:66:08:cb:aa:75:80:66:bf:9f:71:b3:0e:bc:eb:
         f7:ec:2e:4a:39:94:c5:0c:52:d7:f7:74:2f:02:fb:2e:bc:92:
         14:83:09:03:23:1a:34:48:42:c0:aa:a8:65:ea:7b:b2:73:27:
         c3:0c:80:ae:80:d5:4c:3f:e9:74:e8:ef:2b:7f:01:9a:2f:47:
         c9:77:d6:aa:47:c1:9f:00:d9:67:6e:f9:8f:a7:17:c8:b7:6e:
         4e:8c:10:bf:3e:f9:98:c6:e2:23:57:51:58:c5:5c:bd:bc:cc:
         e0:9d:71:17:af:a3:46:d2:4c:fc:70:07:e9:3b:a4:e4:7a:9e:
         34:fd:9c:c8:da:b0:96:d8:52:68:74:20:8d:6e:05:6c:ee:7e:
         b2:88:2e:ae:81:0d:b9:68:ac:e1:68:ee:50:94:ba:99:ad:40:
         67:26:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:13:28 2026 by rpki-client