Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File:                     2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier:          lVGyednkhfeyu0mKUkvrXLIrHARb7bQDpoh7BeW6jxw=
Subject key identifier:   00:20:3A:03:FC:CB:FB:9E:B4:9A:AE:98:B6:3D:71:67:66:01:2B:D4
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584CD6D20A3DFEB22F681EEC3480
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     396239
IP address blocks:        68.69.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:0a:3d:fe:b2:2f:68:1e:ec:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=9f45b278-c6df-4898-acc6-4f855c2e49d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:e1:3d:96:ca:46:63:e7:57:71:7d:3e:4b:
                    f6:b1:f9:67:38:20:a1:f4:31:e7:0a:b2:46:c4:8c:
                    02:c8:3e:4b:9f:0e:11:d4:89:3f:2f:90:9d:8e:bc:
                    6a:d2:ca:a4:b8:18:0d:50:91:4b:fc:ee:9f:b9:94:
                    82:5e:0a:7c:c4:b8:c1:30:e0:ef:11:a1:26:d7:0b:
                    e3:95:da:b9:da:8a:0f:95:2c:78:f0:b7:be:d2:3b:
                    94:09:10:f5:d0:1e:72:22:53:dc:8f:3e:b1:33:79:
                    ad:4f:7b:24:11:cc:4d:10:e9:21:ff:df:28:17:b9:
                    78:ae:e6:58:87:e2:53:a2:3a:5a:a3:76:0b:57:ad:
                    6a:66:67:4f:fb:c4:ba:5d:be:7b:34:ee:21:a1:a0:
                    6c:32:b6:34:33:6a:d5:27:09:89:78:3d:52:fe:20:
                    9f:55:f0:0d:e0:49:51:cd:da:cd:e0:2c:6d:e8:a4:
                    0c:7c:b1:e6:0e:0e:0e:48:ae:1f:46:39:2d:7c:5b:
                    6a:b8:2a:3e:4b:a2:5d:96:c1:72:73:39:ee:bf:bf:
                    8f:95:6b:ab:14:74:1b:08:5e:1a:3d:39:04:ca:56:
                    5a:10:09:24:cd:51:4a:e3:e4:ae:1b:5a:3c:79:51:
                    38:8a:d3:5d:ef:c5:03:f9:79:f7:dc:09:35:22:ba:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:20:3A:03:FC:CB:FB:9E:B4:9A:AE:98:B6:3D:71:67:66:01:2B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:d9:d2:58:42:01:ed:c1:21:5d:74:50:26:76:1d:8f:87:
         03:16:64:4d:ee:78:f5:d2:58:fa:6e:86:53:2f:fa:93:3d:b8:
         c3:62:a4:30:03:d2:4d:09:4a:fc:d4:96:21:92:fa:2d:01:69:
         a3:ec:09:05:a9:e9:87:4f:a7:59:5d:e8:8f:76:bb:8f:da:3b:
         f3:d5:03:74:00:2e:18:c4:b2:06:2e:a2:bb:8b:2a:5c:07:84:
         55:99:4e:83:89:8d:0b:a0:1a:61:c6:d4:cc:09:8d:43:2d:06:
         69:27:ec:bc:51:7b:fa:a8:3b:d4:b4:4b:25:bb:e2:81:4b:ff:
         f4:b4:0f:41:40:3c:36:39:e9:f7:ec:fa:42:8e:84:a9:72:c9:
         93:3a:e8:3e:1c:d8:e0:6e:ee:f6:35:1a:78:72:02:a5:df:bd:
         25:31:91:38:a3:82:df:fd:39:77:26:2c:00:96:49:ba:2f:b2:
         78:ca:32:96:31:80:6c:4d:f2:41:5a:86:94:7b:a8:d7:94:a0:
         8b:94:1a:2c:77:e9:96:59:0b:75:61:e2:4c:5a:5a:a4:dd:30:
         ae:9a:46:9b:22:2b:e8:7b:f2:c1:34:a1:cd:92:51:11:d4:06:
         d9:37:65:7b:f9:18:b6:e9:87:c3:3a:39:84:94:96:62:b3:ff:
         3c:b2:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:40 2026 by rpki-client