Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5ba05c4-fe38-3799-a54b-ff9d81cd336c.roa
File:                     a5ba05c4-fe38-3799-a54b-ff9d81cd336c.roa (raw, json)
Hash identifier:          pe64lJxU31EAtEk1FjEAVV+zUc8/+zf2kFHyu1U/jhk=
Subject key identifier:   F8:1D:3E:3F:3F:C3:45:C2:29:F9:EB:73:EF:CA:D5:29:6B:1C:23:28
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119DBD07992B7C94894F9900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5ba05c4-fe38-3799-a54b-ff9d81cd336c.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33491
IP address blocks:        68.58.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:bd:07:99:2b:7c:94:89:4f:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=15616bf3-97c9-47fe-a657-800819ff2e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:12:3c:25:0a:67:b6:53:fc:8d:5d:4e:53:ad:
                    b3:9d:16:6f:f4:46:9e:50:9b:93:ae:3b:8b:df:5b:
                    54:4d:0d:7d:6c:57:8a:6d:ab:8d:4c:0b:c4:34:27:
                    4c:5b:bd:b2:68:ab:16:30:28:6d:ba:ce:ba:c7:cb:
                    7f:c4:73:bd:be:76:f9:5d:26:9a:1b:af:88:98:8d:
                    74:33:ec:b8:0d:7b:05:90:34:e3:b7:64:b6:a3:47:
                    0c:7f:92:d5:3e:4f:e3:af:ac:df:73:5c:3d:2a:8d:
                    86:b5:6a:65:bf:73:35:5d:54:6a:e3:fa:ad:13:b1:
                    11:d0:47:63:20:30:74:4a:97:ca:32:a1:00:55:92:
                    ea:e5:1a:7f:07:96:ef:80:90:d6:86:2b:10:fe:87:
                    fd:b7:d2:3b:9c:8b:4b:6e:94:b1:f6:26:f0:ad:48:
                    cd:c1:0a:cc:11:36:9b:ad:1c:1f:3b:9a:57:3a:bd:
                    21:28:3d:ff:19:7a:13:ad:94:2e:d8:cc:db:75:b4:
                    ec:27:e9:da:d7:e5:82:fa:ec:53:d6:75:75:5d:54:
                    61:f1:92:a3:b3:3f:c3:d9:4d:1e:35:bb:aa:b0:2f:
                    45:76:5c:dd:70:02:00:50:dd:3d:38:ac:37:32:9e:
                    5d:87:88:ff:45:48:10:1f:d9:14:d2:74:2a:59:c6:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1D:3E:3F:3F:C3:45:C2:29:F9:EB:73:EF:CA:D5:29:6B:1C:23:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5ba05c4-fe38-3799-a54b-ff9d81cd336c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.58.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:4b:fd:c5:92:69:77:4b:5d:e2:6f:9b:a1:96:97:05:d9:20:
         1c:9b:a5:cd:81:52:46:b3:bf:bf:49:f4:55:d4:c0:2e:d9:7e:
         7a:37:b9:1f:ff:f6:08:fc:9d:9b:19:5c:c8:00:d0:c1:a0:c5:
         7c:8c:65:02:01:33:b1:76:b8:c1:f5:ea:c7:78:b0:66:ba:37:
         c5:f7:14:05:eb:39:51:a8:e0:b3:d1:ed:44:be:84:fc:0b:e7:
         3d:b9:5e:b8:81:cc:87:da:a1:82:a5:ef:8e:c6:33:c6:f4:0b:
         2a:27:e0:29:b4:36:7e:9e:9c:ef:ff:2b:d4:1b:0d:02:f7:2c:
         cf:49:fb:10:3b:9f:1d:c0:e6:60:96:17:34:cc:b9:a9:b0:94:
         28:e3:aa:bf:e7:f5:16:47:50:6a:c9:cd:ba:0b:2f:77:1e:45:
         73:04:f9:92:07:bc:a9:a2:2d:4a:de:ce:08:e9:12:0e:dc:d3:
         a5:8b:17:53:f1:a7:6e:a4:41:39:d4:00:86:96:e9:97:ae:92:
         e2:b5:ba:33:a8:f3:4d:21:64:3d:74:75:b5:f3:9b:39:27:13:
         11:85:0c:bc:81:19:c1:20:40:ca:5c:47:89:73:1f:f8:e1:f8:
         28:ae:5b:b1:48:d9:e2:ea:80:19:89:53:17:98:53:b4:03:07:
         f8:67:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:58:48 2026 by rpki-client