Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa
File:                     037ef550-7968-3868-af23-a6bf0dbbed55.roa (raw, json)
Hash identifier:          0wEBVEPO2Tm8KxwHzY68zNWFlv3wBArkcbycgCQvd1A=
Subject key identifier:   B4:2D:40:C3:87:C0:FC:20:B0:45:8C:46:C7:51:2E:23:55:F3:D1:4C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D83CAB1DBDA7D14E1319733C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     26744
IP address blocks:        68.170.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b1:db:da:7d:14:e1:31:97:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e2fe3fea-3f06-46da-a683-640fb12c7cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:6b:a4:8d:b1:ee:6c:77:6d:b6:e7:5a:4e:
                    e7:c1:05:9c:3e:dc:dc:cd:08:72:17:5f:e0:99:0c:
                    f6:91:fe:92:c2:f4:31:57:07:94:8a:a1:f1:34:15:
                    cf:e6:f4:3e:fc:e4:44:b9:a9:3d:1d:7a:2d:9d:01:
                    02:03:91:86:5c:39:1a:8f:90:ca:1f:3f:bb:6a:a1:
                    52:c4:21:bd:dd:07:60:78:68:6a:fa:f6:88:60:d3:
                    22:0e:a3:6e:be:f9:27:b1:27:b2:c7:ea:a1:3c:76:
                    eb:be:b1:eb:2c:43:d5:ba:90:79:9a:62:6d:6f:c1:
                    48:58:d9:fc:b9:c9:f9:65:e7:6b:e6:3a:92:d0:23:
                    85:de:7d:71:9c:0e:e0:50:0c:9f:1a:1e:68:ec:e1:
                    ff:51:84:69:55:b7:c1:3e:cd:6b:80:cc:f3:4a:a9:
                    d3:62:57:98:3a:72:f7:a3:fa:eb:57:3c:6a:85:70:
                    9b:11:59:d9:22:76:cc:48:d6:7f:35:88:92:2d:0e:
                    36:be:eb:00:b8:45:f6:f0:ce:6e:ba:a9:66:7c:a7:
                    84:29:52:60:09:e5:bd:73:3d:70:6d:86:4b:e4:94:
                    44:6d:50:7b:8d:6a:56:d5:28:cb:9d:0d:af:64:6a:
                    50:5d:be:86:49:7e:72:11:29:74:6e:2e:d3:10:23:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:40:C3:87:C0:FC:20:B0:45:8C:46:C7:51:2E:23:55:F3:D1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/037ef550-7968-3868-af23-a6bf0dbbed55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:53:b5:43:a1:2f:36:f7:9d:29:9b:00:0c:bd:66:23:cf:35:
         9d:ae:e1:7f:4c:41:89:f4:a4:74:d0:b9:01:34:e0:4e:f1:a6:
         83:60:6d:e0:4c:61:d3:24:fc:b6:9f:4d:a4:80:96:b5:ff:9d:
         16:54:95:54:70:5c:19:b9:33:d7:49:33:b2:d1:f7:55:8c:82:
         14:30:a2:d8:51:48:01:a5:5d:31:73:03:d1:36:b0:f7:1e:1a:
         0f:67:33:db:c0:b5:dc:c4:64:c1:ca:74:fd:89:8b:c5:63:94:
         c2:e2:2c:20:a4:58:56:10:7e:88:5a:a4:b9:eb:3c:d7:b2:c0:
         47:e7:5f:31:ef:63:1f:32:0c:63:80:d3:a4:3b:52:34:24:43:
         7d:cf:23:cb:e3:91:e7:dd:24:5e:5a:b6:1b:96:78:e9:56:9f:
         f2:0f:ae:c2:85:9b:98:9a:f8:90:55:87:6b:5d:0b:97:36:7d:
         7d:fd:27:31:56:89:7a:5a:e1:12:e8:c8:e3:23:97:cf:97:f5:
         d6:9d:db:ae:9b:21:6b:b4:ca:77:e4:46:69:87:7b:10:14:41:
         0c:e4:98:31:f1:c5:74:03:8b:15:43:b1:d3:f6:01:85:1f:b7:
         de:aa:f0:17:13:6e:45:45:4b:ac:61:47:be:3b:fc:94:54:19:
         15:de:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:24 2026 by rpki-client