Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/7e320789-f385-3727-9e84-7ca91a7f9608.roa
File:                     7e320789-f385-3727-9e84-7ca91a7f9608.roa (raw, json)
Hash identifier:          kauqguqyyYJuJbO0ftOYrL6W8gL78DrTkYTt86gFOYM=
Subject key identifier:   AA:BC:84:39:AA:88:D7:EF:82:97:B3:98:B8:3E:72:C5:3B:2B:5E:7E
Certificate issuer:       /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
Certificate serial:       010D0C9F4328584C550129E8C2D09863B532EF00
Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/7e320789-f385-3727-9e84-7ca91a7f9608.roa
Signing time:             Sun 28 Dec 2025 02:00:30 +0000
ROA not before:           Sun 28 Dec 2025 02:00:30 +0000
ROA not after:            Sat 28 Mar 2026 01:00:30 +0000
asID:                     35847
IP address blocks:        168.93.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:55:01:29:e8:c2:d0:98:63:b5:32:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11
        Validity
            Not Before: Dec 28 02:00:30 2025 GMT
            Not After : Mar 28 01:00:30 2026 GMT
        Subject: CN=06b8052b-c6dc-4c93-92b6-ee1dc1cf6a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:fa:ee:c4:71:9f:30:9c:8a:b6:40:e8:ea:
                    89:29:8d:d3:dd:94:d2:45:55:87:32:85:15:69:df:
                    7a:6e:6a:50:71:95:32:90:06:b1:46:52:17:f5:e8:
                    a6:53:0d:10:cf:12:a8:1a:b3:90:fc:da:f5:12:60:
                    b3:c9:7f:e3:d0:78:30:14:af:9c:47:fb:7f:2d:9b:
                    21:ec:0c:fe:8c:99:92:d1:e3:2b:a5:2d:18:51:c0:
                    99:a6:df:e0:27:8f:e6:45:33:65:6a:99:a2:71:fe:
                    a9:cd:58:6f:bd:99:64:01:28:f3:a1:61:96:22:b8:
                    2a:66:67:a6:20:1f:b8:bb:ff:b2:01:8f:d1:6d:ec:
                    33:2a:7a:dc:65:ea:54:f1:ee:f8:7d:26:42:52:ce:
                    67:54:d8:ab:9b:5e:18:2d:a8:a2:fd:98:9d:26:3f:
                    6c:23:ff:16:7e:70:1c:bc:e1:85:46:56:40:c5:72:
                    e2:2c:6f:e9:82:e2:a0:7f:a0:10:26:36:99:ff:0f:
                    5c:af:a7:44:e3:57:d0:95:b3:cd:99:14:06:e5:ac:
                    7e:14:f5:b7:76:3d:eb:71:4c:5b:12:d2:46:55:6f:
                    03:8f:29:b9:8b:d0:5b:1f:88:74:7f:b7:d1:ac:4d:
                    b7:b4:5b:50:1c:42:b6:af:7e:e3:25:d5:fd:97:95:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BC:84:39:AA:88:D7:EF:82:97:B3:98:B8:3E:72:C5:3B:2B:5E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/7e320789-f385-3727-9e84-7ca91a7f9608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl

            X509v3 Authority Key Identifier:
                keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:d4:95:de:2d:c7:20:aa:52:71:ba:fe:86:6d:0d:f0:68:
         f4:ab:7c:85:ad:aa:6b:ba:55:39:64:17:65:a9:6f:c1:cb:f3:
         5c:4c:34:3b:6d:04:cc:02:50:a2:27:09:f3:e9:fd:4f:a7:01:
         be:3b:cf:1e:b3:4c:91:4a:e3:13:56:73:58:e0:e5:82:23:7d:
         6e:89:5d:b6:e1:3d:f5:22:f3:cb:d2:dc:b4:1b:4a:73:6a:92:
         62:6e:09:d2:a8:9a:97:fd:36:a0:0f:9a:51:5b:e2:f8:0e:20:
         b8:42:a0:7e:98:25:e6:e6:e9:47:e8:03:80:66:e5:21:83:4c:
         48:96:54:aa:6e:a0:7b:ab:f2:0f:a2:a2:d8:db:bf:82:18:73:
         5c:f1:c0:f9:4d:a8:8d:a1:2d:dd:6d:3a:dc:45:58:3f:8a:f9:
         70:e4:61:3f:bd:37:06:6f:19:06:89:a7:74:78:d4:5f:37:a6:
         ef:e7:04:8d:34:06:f0:69:fd:01:f1:d8:cd:64:50:ca:b5:3d:
         7e:11:7b:9c:cb:cd:96:09:fd:a0:a6:0f:bf:c9:3a:0e:d1:a2:
         e2:f1:5e:ab:0a:b1:0f:7d:f2:df:3e:02:bf:e8:b6:4b:8a:ec:
         51:cd:8a:50:96:87:f5:71:9c:b6:a5:ed:a8:18:6e:c5:0a:ff:
         35:50:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:26 2026 by rpki-client