Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa
File:                     78a41fcd-979d-309f-85fa-a1814d982c31.roa (raw, json)
Hash identifier:          kMx0RHzVJT7Dtz9BCt3wD1S7bGJ5BgUq3bmwIAAGOyU=
Subject key identifier:   CD:86:80:44:9C:95:34:70:EF:34:56:67:93:01:D0:52:F6:73:0A:D0
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584CCD0C9B7CB5F2EAABA3EE5311
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     26744
IP address blocks:        68.170.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:9b:7c:b5:f2:ea:ab:a3:ee:53:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=85e8d7ab-e477-420a-91a8-f93461a4dbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:ed:11:d8:b3:a5:eb:4f:5c:c4:5d:c9:02:
                    b0:e0:86:fb:5f:4a:a9:05:43:dc:da:93:6b:7a:2f:
                    aa:54:6b:71:a6:a8:d7:b9:10:f4:49:79:c3:bc:59:
                    b3:06:eb:c2:75:a0:36:df:f7:ed:3d:74:6c:5d:d4:
                    94:ba:cc:c4:2f:e1:2b:34:1e:cd:11:3e:0b:1c:c2:
                    d2:0a:4b:1d:01:24:8e:49:c6:be:9b:ec:be:30:5c:
                    53:66:eb:3b:43:7e:86:ee:7a:fa:27:04:6b:79:6e:
                    a3:63:54:be:25:55:65:46:cb:77:13:af:a5:50:6a:
                    d0:41:73:95:bc:34:63:9f:39:98:d8:de:6f:bb:ee:
                    6f:fb:85:c4:12:eb:11:21:a7:40:29:89:9b:77:2a:
                    0f:12:87:99:ab:8b:10:8b:ec:3b:f9:a2:e9:23:28:
                    a0:d7:e2:f5:dd:80:81:03:60:59:c1:b8:9c:55:36:
                    0c:fd:5a:26:c6:ac:43:a2:ff:24:ae:52:6a:71:8a:
                    8b:fc:20:eb:be:4f:81:e4:22:d3:ae:0a:c2:e9:94:
                    ab:a8:40:b2:3b:1d:2a:3e:49:2a:cc:0f:21:a1:1d:
                    64:47:a0:38:95:64:2f:aa:2b:f8:54:f7:56:8f:53:
                    ba:ef:95:5c:ff:04:4a:8e:2e:3c:cb:8d:7c:b3:69:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:86:80:44:9C:95:34:70:EF:34:56:67:93:01:D0:52:F6:73:0A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:55:ad:df:5d:c2:7d:c1:3b:cc:3b:a4:cb:e1:58:8c:b5:
         52:16:19:41:f7:9d:33:e0:15:93:fc:06:05:90:f0:e4:87:91:
         ea:26:f8:66:37:4d:36:58:7b:fb:d4:50:38:d3:19:05:96:2d:
         f0:24:33:21:b9:8d:d8:2a:c3:7b:00:00:67:c6:6b:2f:c9:54:
         97:1b:ce:a9:4d:e5:33:06:5c:6a:e6:bc:ff:cd:03:34:ad:5f:
         b3:21:95:be:f5:bc:aa:5b:e8:78:bc:15:3e:39:dd:72:91:be:
         05:fb:2c:30:0a:27:db:f8:46:39:fa:04:8e:81:29:12:7b:66:
         14:9e:9c:43:ad:94:25:37:62:e3:b9:b8:b1:59:37:14:04:a1:
         46:c5:19:27:34:3d:fc:b0:7c:ec:c0:6b:4c:27:cb:5e:42:18:
         12:f1:65:10:8f:a3:c5:e4:a4:3f:33:3f:ee:71:63:af:b3:cf:
         66:1e:ee:9c:25:b0:b9:89:19:c0:df:83:2d:a8:61:98:bf:51:
         86:52:a0:dc:3f:91:c6:58:65:02:47:90:89:06:d2:5b:88:a0:
         19:63:cc:06:88:d8:9e:4b:7a:d5:68:d7:c4:d1:81:86:ff:39:
         51:64:78:7e:83:51:2f:39:89:d2:be:95:70:83:7f:65:37:15:
         1a:e0:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:54 2026 by rpki-client