Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/62426de6-7d1d-395f-bbeb-bf62b3c169a7.roa
File:                     62426de6-7d1d-395f-bbeb-bf62b3c169a7.roa (raw, json)
Hash identifier:          D7S3gXsR9/p4O6Key+JuVp/Tv/zKq1ojUoG3sBI7EyQ=
Subject key identifier:   2C:E5:EB:7A:5D:D0:81:FF:45:00:EC:81:52:27:3F:ED:B9:27:71:7D
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584CFB1CEEB2E0583B5A7CBF4680
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/62426de6-7d1d-395f-bbeb-bf62b3c169a7.roa
Signing time:             Wed 25 Feb 2026 14:00:39 +0000
ROA not before:           Wed 25 Feb 2026 14:00:39 +0000
ROA not after:            Tue 26 May 2026 13:00:39 +0000
asID:                     6079
IP address blocks:        68.69.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fb:1c:ee:b2:e0:58:3b:5a:7c:bf:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Feb 25 14:00:39 2026 GMT
            Not After : May 26 13:00:39 2026 GMT
        Subject: CN=d3a0edbc-9999-4271-b101-9f836828db50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:fa:95:5f:af:01:00:50:16:62:92:84:fd:
                    b0:e4:19:57:b3:6d:bc:7c:13:b5:55:57:d8:d9:bd:
                    2b:20:06:22:a0:68:db:be:2e:60:c9:08:61:9f:81:
                    a4:2a:4d:a7:75:39:cf:f3:1f:8a:2a:a0:e6:2f:a7:
                    4b:3d:e0:19:b1:1b:47:32:a2:26:51:d0:5a:77:44:
                    b0:05:87:a7:55:da:7c:95:72:12:0e:24:ba:45:cb:
                    35:f9:6f:cd:72:a9:c3:21:4c:b0:de:4d:d4:d9:c5:
                    67:a0:08:4e:ad:5d:0b:e6:32:1d:cf:a5:88:a2:b9:
                    f6:1d:21:4c:96:22:51:af:d4:e1:76:48:8d:b0:36:
                    e2:56:45:82:12:5e:06:c0:ec:43:f4:db:62:38:12:
                    e9:a3:9c:69:6b:fd:58:4d:55:f2:a0:85:d8:e9:58:
                    85:35:bd:20:b0:4e:bd:00:1e:45:70:2a:e2:ae:44:
                    5a:a9:6e:58:99:71:6c:53:ca:26:f9:77:7d:4c:26:
                    bb:66:37:54:49:f0:32:ac:8c:1f:a3:c3:87:b1:35:
                    5a:fd:89:35:56:73:4b:e7:94:af:6b:57:2d:0a:d6:
                    4a:6f:af:b0:2b:b7:cb:14:ab:8e:4e:42:bd:21:7f:
                    99:6a:74:4d:5b:bd:24:1a:33:0e:41:20:09:a7:d5:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:EB:7A:5D:D0:81:FF:45:00:EC:81:52:27:3F:ED:B9:27:71:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/62426de6-7d1d-395f-bbeb-bf62b3c169a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:03:82:a1:fc:20:2a:9a:90:05:a3:c8:93:d4:c4:51:56:10:
         0f:27:3e:91:52:5a:70:01:cd:d6:fa:21:2b:18:6d:0b:22:22:
         c2:c7:b4:95:df:b0:d6:c4:5b:ed:2a:32:72:4b:9a:7b:62:90:
         f3:5b:d2:fc:77:56:b4:b3:b5:da:b5:bb:65:dd:17:7f:87:96:
         56:b9:ce:96:de:58:8d:91:d3:8f:22:cd:9a:bf:82:45:4e:74:
         4e:0c:68:78:59:9f:6a:f1:d5:95:8e:14:c2:4f:b2:f9:1f:70:
         f3:19:d9:11:c7:10:f3:26:2f:8e:4f:9f:84:05:01:3c:a1:f8:
         51:98:2f:cf:a9:33:b1:e7:4c:91:e4:aa:b9:87:4e:74:71:60:
         96:97:44:0a:ab:b4:fa:cc:01:f2:af:58:f7:37:59:cf:fe:f8:
         87:6c:a7:f2:8e:60:ff:35:94:b9:5d:a1:1b:b3:5c:2c:9e:3d:
         d5:5d:e8:6d:8f:71:f0:46:17:94:8e:0f:e7:0f:04:2b:3d:18:
         ef:4a:5b:11:8c:c7:f8:77:05:9e:2b:3d:af:70:ee:6a:cd:a4:
         05:e7:e8:b5:db:70:c2:2d:94:a5:1d:ea:22:22:2d:ff:78:6e:
         35:d5:ed:43:5f:bd:1f:67:94:2b:cc:e3:60:ad:21:1e:65:e4:
         11:c1:ec:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:17 2026 by rpki-client