Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa
File:                     0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa (raw, json)
Hash identifier:          7uo9vbmtGsaydbIdnv9VD2lo0tTK9dEq5tAp6tE0xKY=
Subject key identifier:   7D:FC:16:D6:50:ED:A3:35:25:29:52:B4:3A:83:E8:59:FA:74:1B:0E
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584EF87CD1563ED40A6D9FDC8E00
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        149.112.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d1:56:3e:d4:0a:6d:9f:dc:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=66266c53-ab5f-4841-b84f-14906e2f05a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:7d:37:99:21:2e:68:9c:95:95:98:d8:b7:
                    e0:7c:ea:43:d4:08:64:1e:be:a2:3f:d0:e2:47:9e:
                    51:12:f0:49:e5:72:c3:1d:59:94:0c:42:ab:fe:f2:
                    84:ca:44:d4:b9:de:0c:1b:98:6e:5b:94:be:23:77:
                    7a:1e:71:08:42:f7:7c:ee:ad:76:11:2c:56:31:ba:
                    2e:85:ac:b0:a1:88:ca:09:7f:4c:f5:81:ea:f9:94:
                    0d:90:66:5e:10:da:14:b8:c8:d2:1b:1a:ee:ae:9d:
                    2f:ff:22:66:1c:5e:1c:39:e3:45:19:c0:bd:07:37:
                    72:b8:87:08:42:91:78:be:9c:cc:cc:3b:9d:15:1e:
                    44:0a:e3:31:12:e7:80:19:45:1c:6e:1d:f7:1f:df:
                    65:76:e0:71:a9:6f:06:e0:2d:1e:aa:65:db:a9:ec:
                    7f:77:2a:9c:44:f9:a7:06:00:a3:c3:73:cd:93:12:
                    8f:72:e5:b6:a7:3d:b2:f9:e7:f6:d2:8d:24:3a:3f:
                    2d:1f:21:12:5b:36:f1:c0:25:72:7d:42:f1:68:94:
                    ec:12:cb:98:b2:7e:41:13:88:1a:33:7d:ad:38:e6:
                    96:ab:b5:d7:74:fd:61:0f:fa:db:cf:52:17:f2:e5:
                    53:6b:8a:d6:91:63:9f:c6:ad:01:db:91:50:9f:1c:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FC:16:D6:50:ED:A3:35:25:29:52:B4:3A:83:E8:59:FA:74:1B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/0be0cb03-91c4-3e48-8a57-742ceeeacdb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:36:40:35:a7:5e:22:50:9d:40:28:85:4c:ee:93:71:f0:
         86:c4:ef:3c:a7:49:fa:c2:5d:9e:d0:26:58:63:a5:c7:d0:00:
         7f:76:6e:21:f8:97:2c:3c:13:ae:fc:7c:6c:4f:ce:d7:53:b8:
         67:7b:98:17:ee:16:12:c8:55:6d:86:b6:eb:15:5a:33:fa:91:
         ce:86:34:14:4d:6e:12:93:bc:b3:c6:98:f5:44:f9:a2:d0:0e:
         53:93:ca:1d:c2:14:60:0c:cb:bc:3d:90:43:21:ef:11:f2:81:
         09:24:56:2f:c6:b8:6f:ea:48:a1:6b:4c:b4:f5:a3:79:c0:ee:
         7c:81:ab:bb:0f:91:0d:c4:03:e8:72:c8:67:95:da:af:4c:ad:
         b2:b1:68:90:9e:0f:9a:89:28:27:9b:c5:b8:b6:b3:9e:45:a3:
         03:96:c8:29:7c:19:03:93:9b:0d:17:a1:c7:59:c2:6a:75:6e:
         ed:f9:53:1e:1b:fa:7c:d2:ad:e4:b7:1d:a4:20:80:88:3c:59:
         f6:73:47:b3:e5:c7:03:05:41:38:d4:0d:f2:4f:0a:eb:16:43:
         3d:d5:70:1a:8f:56:2a:cb:12:6a:b1:1d:ed:d3:e1:d8:e8:50:
         2c:31:a9:b0:df:90:f6:29:a8:a9:d4:db:a2:43:1f:f2:40:e0:
         42:f8:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:31:30 2026 by rpki-client