Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa
File:                     81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa (raw, json)
Hash identifier:          asAr0NJmhc9AcQWuvIu1+7eeH8gAqF03Fo8LrbhxH3Q=
Subject key identifier:   07:7B:E6:D9:64:0C:88:BB:15:22:83:D7:32:57:24:90:14:E8:9B:D7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE7C09D1615296C806B4B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     22909
IP address blocks:        68.53.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:c0:9d:16:15:29:6c:80:6b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=28f3fff7-2418-4023-b3b0-48d21d28cabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:e9:58:7f:2f:96:7a:33:a8:75:de:b4:0c:
                    c4:d5:12:6e:38:5e:b1:88:2a:b7:66:f3:11:df:e2:
                    46:f9:8a:d7:6d:7e:dc:5a:0e:36:02:c1:8f:5e:2b:
                    41:db:37:e7:0d:c1:d5:22:6f:57:b9:cf:53:05:64:
                    01:c0:e1:8c:ce:76:39:cc:d0:f6:35:fa:50:dd:7f:
                    5b:16:4e:f3:05:d9:36:e5:45:48:b8:6a:9a:a8:4e:
                    76:07:f7:68:e5:3a:ab:10:58:51:7d:d4:fe:e0:1c:
                    17:b6:11:00:c7:81:50:5a:27:87:76:56:11:53:6b:
                    fe:2e:15:f4:80:a4:5d:35:69:f7:ec:2a:72:45:d1:
                    a3:46:58:33:b2:08:5d:ab:71:ff:36:7c:b8:02:a3:
                    77:4f:0f:27:82:db:d4:84:73:3c:1c:7d:78:5f:c3:
                    dd:24:02:0d:cb:d8:25:55:1c:b6:d9:70:75:21:e8:
                    ba:7b:07:0c:00:9e:6a:86:35:27:58:06:91:95:c9:
                    e6:05:81:00:03:94:68:46:05:1e:a9:43:2e:33:27:
                    38:dc:55:0f:55:84:c9:dd:fe:ac:af:bd:d2:cf:6c:
                    ba:1b:07:2e:22:be:46:c2:ec:2f:62:14:c9:53:a1:
                    79:0c:b4:45:aa:ec:c4:f3:b0:35:11:bd:db:9a:46:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7B:E6:D9:64:0C:88:BB:15:22:83:D7:32:57:24:90:14:E8:9B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81e0549b-29ff-333d-8fb0-193e0d2ff47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:73:6b:66:e2:ce:53:26:e3:11:4a:a4:b0:9a:f5:f6:94:
         aa:69:fb:26:c1:b6:a6:c0:b5:d3:81:b9:a0:09:d4:ce:6b:49:
         41:3e:c4:a0:d7:de:a8:d4:9a:9a:77:6a:e0:14:4c:8b:31:4a:
         2b:a4:80:3e:82:20:7f:89:ba:96:6a:e8:41:92:7a:64:26:73:
         a9:94:a9:30:81:d7:9d:9b:4e:e4:3b:19:11:b5:23:ab:1a:a5:
         f7:ff:74:7c:fd:44:1a:bb:a8:87:63:fa:cd:6f:86:b9:52:a3:
         76:8b:b0:ac:d3:58:93:27:a9:df:46:70:fa:6c:18:d8:fb:72:
         12:33:a5:98:c1:58:04:c9:3f:5a:c7:8f:46:4f:f4:61:78:b9:
         36:15:5e:62:58:9a:ea:4d:a9:8b:99:6b:fc:6b:e6:28:f7:75:
         e4:40:99:e8:94:20:01:af:81:2b:07:44:94:7c:e4:48:0f:87:
         d4:f7:98:a5:62:cc:8d:bd:fc:b8:91:fb:62:77:11:d4:ea:d3:
         1a:1e:87:8f:33:fd:ec:05:4c:be:ad:1a:7c:ce:b8:f8:11:45:
         7e:8d:1c:c8:19:1c:9e:1d:29:df:5c:3c:71:e1:da:a6:88:3a:
         3d:6d:51:ed:6e:68:88:cf:95:50:41:20:bc:7f:42:45:14:e8:
         28:63:a4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:48 2026 by rpki-client