Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dcc5044-c9a4-3aa1-9031-2f245ecd91d1.roa
File:                     7dcc5044-c9a4-3aa1-9031-2f245ecd91d1.roa (raw, json)
Hash identifier:          ty7zIobrXBQMJ8GRwX+PxIN1RBx7aymbKSJmU8CsfNM=
Subject key identifier:   D1:04:04:B6:48:E9:72:CB:9B:20:63:C3:BC:65:90:BD:B1:02:58:30
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81006F6D568B5F5CE8C37740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dcc5044-c9a4-3aa1-9031-2f245ecd91d1.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        68.54.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:6f:6d:56:8b:5f:5c:e8:c3:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=6f1e13c0-5ebc-44e5-84ed-812953ebd306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:5a:ee:c0:fb:a1:42:c7:d5:4e:0d:73:6a:
                    bb:2e:24:7b:f2:48:35:56:b9:48:fa:95:55:82:39:
                    ec:3e:2a:e7:ea:b4:cc:13:15:b3:8a:f7:29:32:43:
                    f8:1f:55:01:cc:1d:59:e6:8d:92:b5:96:2e:07:04:
                    fc:96:14:87:4d:e1:ba:cc:89:58:f3:cc:de:dc:e6:
                    68:fd:12:30:42:b8:75:eb:c9:5c:27:ca:56:66:89:
                    30:8d:0a:2f:82:fa:3f:32:ff:f3:59:b1:2b:61:10:
                    0e:a2:e8:ff:35:60:1b:29:9d:72:99:37:92:23:73:
                    c5:a6:31:fc:11:d0:2d:59:6e:57:fe:ba:57:1a:83:
                    fb:29:75:5e:d7:2b:16:8c:44:9c:b4:2a:6d:88:05:
                    79:be:72:f9:7e:83:f7:a1:e4:fb:2c:67:ea:91:8b:
                    06:86:33:d8:08:3f:50:75:79:5e:5e:ef:8f:30:7c:
                    3b:ac:51:ab:5f:56:94:cb:f4:28:58:f1:e0:57:91:
                    7e:42:97:d6:d5:19:b5:7a:6b:37:de:6b:46:3b:25:
                    d2:50:e7:90:c4:74:b6:bd:62:0b:80:bd:a0:e0:69:
                    60:e5:af:f4:24:84:be:65:9c:49:df:b7:6f:69:be:
                    09:80:0b:16:75:38:19:18:29:e3:8d:fe:b0:62:6d:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:04:04:B6:48:E9:72:CB:9B:20:63:C3:BC:65:90:BD:B1:02:58:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dcc5044-c9a4-3aa1-9031-2f245ecd91d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.54.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:d4:5a:51:98:6e:38:9c:64:4f:a8:37:a4:30:98:04:df:
         bc:00:8f:c9:54:a9:15:4a:47:1f:79:a0:21:46:68:e2:bc:2b:
         18:ee:b7:b8:7a:f3:5b:1b:e2:ce:76:a7:5d:fe:17:ed:5c:14:
         a5:df:40:5c:7e:72:7e:06:ca:12:d9:f6:08:1b:9f:b6:e9:2e:
         68:cf:7b:32:ca:d9:86:ea:f4:a3:5b:0b:a0:e6:cb:90:a7:c9:
         63:04:e1:de:ea:32:ed:88:12:63:3e:f8:c5:d2:03:e2:43:10:
         7e:7b:aa:f7:18:ba:68:39:2c:a0:3d:8d:9a:6d:e7:4b:f2:26:
         2c:fc:45:f6:b4:7e:de:fa:43:71:5c:f0:b8:d9:9f:89:a7:02:
         9e:84:f1:28:48:f2:17:49:d0:12:1c:96:42:ac:0b:88:a6:d4:
         d3:ed:b2:8b:b2:46:ba:55:ec:8e:53:83:d8:f1:eb:ff:ab:7a:
         a4:e7:df:01:50:b9:75:57:06:bb:e4:7c:13:a9:f7:41:67:73:
         78:13:89:1d:be:46:c3:77:4d:d6:24:01:57:c0:e9:a4:fd:1c:
         61:6c:bd:cb:bd:56:52:28:8c:80:19:30:40:90:64:59:d1:24:
         95:2f:20:c7:47:3f:89:07:f8:01:c8:9c:1f:21:a6:82:76:4a:
         25:1f:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:40 2026 by rpki-client