Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/78b4b933-447e-3d1a-ad81-91ee999cbeae.roa
File:                     78b4b933-447e-3d1a-ad81-91ee999cbeae.roa (raw, json)
Hash identifier:          T6IOrVY13xKQxZhxU1Z1DCyYD4TwVqCyPdypLcwxxx4=
Subject key identifier:   07:A0:DA:D5:D0:D5:7D:11:53:85:39:0A:6F:15:63:CD:81:D5:56:F5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DA1E7B7417B34C08FC700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/78b4b933-447e-3d1a-ad81-91ee999cbeae.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     12271
IP address blocks:        68.172.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:a1:e7:b7:41:7b:34:c0:8f:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=36734969-3f0d-4335-8281-2454c8365fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:eb:82:5e:04:ac:15:45:8e:22:cb:1a:e8:
                    e8:cf:7d:d1:2d:c6:71:7e:00:3e:1b:92:4f:2e:f3:
                    94:28:3b:b5:5e:53:3e:b3:78:a5:f6:c0:4c:11:05:
                    d7:ce:78:c5:ba:8c:c1:e4:54:fd:e6:c5:3f:db:33:
                    de:35:4d:fd:d1:6c:d6:ab:fe:20:78:08:a5:9e:40:
                    dc:8e:b2:ac:b8:99:34:cb:ab:7e:a1:06:14:ca:50:
                    13:77:7a:d1:8d:8a:77:c0:4c:d5:36:57:b3:93:7e:
                    1a:2a:46:48:95:5b:7d:9e:5f:0c:ea:be:ae:34:57:
                    0e:b2:47:5d:fa:99:27:96:da:f8:45:78:7a:4c:5d:
                    28:d7:d0:98:de:b8:81:e9:b8:67:8c:8f:1a:41:b2:
                    c1:50:c9:dc:d5:bf:eb:4c:be:d7:7d:8d:e7:5a:e1:
                    67:6b:e0:e8:0c:b3:76:c5:e1:fc:00:8e:ef:eb:88:
                    f0:14:39:af:4f:8d:ce:5e:c1:90:d2:17:d1:d5:52:
                    84:d5:76:9f:bd:ae:1d:bf:09:9d:0d:e2:ff:92:36:
                    5d:ef:f0:a4:2f:da:39:25:b7:99:94:d0:3e:02:b5:
                    d1:8a:a0:9b:6a:a6:04:c3:97:9f:8f:99:b2:81:41:
                    0c:af:e9:85:3d:07:c4:77:23:b1:ee:e6:5f:9a:01:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A0:DA:D5:D0:D5:7D:11:53:85:39:0A:6F:15:63:CD:81:D5:56:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/78b4b933-447e-3d1a-ad81-91ee999cbeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.172.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:dc:2a:4f:e4:2f:3d:c4:d1:39:9d:77:94:2b:bf:68:b1:
         4b:a5:94:2c:1a:5c:49:a7:a5:79:c9:9c:92:fc:cf:3e:73:b0:
         5f:65:5b:94:78:7a:8f:6f:0d:f0:e7:37:72:05:ea:51:cb:2b:
         2d:79:d3:5c:94:67:f1:15:54:0f:d7:e3:95:d4:5f:d8:ee:76:
         f3:e8:86:30:11:f7:13:2e:a7:32:1e:49:f6:d8:8c:2d:a2:65:
         ca:f7:63:48:ab:91:79:1a:9e:af:b1:26:51:c9:e7:64:32:af:
         17:40:db:2f:9b:ec:be:ca:64:87:9a:23:53:06:b1:8e:cc:f8:
         5b:ad:b3:44:e2:26:80:01:42:59:15:c0:b8:38:42:87:6b:a4:
         b4:71:a0:9a:f0:a2:75:d2:c1:6f:30:46:cf:b4:e6:6b:11:26:
         e2:24:d4:9a:b4:32:60:6f:3c:4e:d2:58:8d:31:a0:7b:ad:bb:
         04:b3:77:83:7a:5e:9d:ac:ce:77:95:b0:84:52:03:27:d9:3d:
         34:12:d1:7b:25:96:1d:d5:ce:5a:c5:3a:e8:48:8b:8f:ea:fa:
         79:da:93:48:21:1a:61:09:80:4f:5d:1e:ad:b3:4a:b1:16:21:
         d6:cf:ab:5b:32:32:59:6f:05:93:ec:76:92:42:b6:50:fc:53:
         ff:75:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:19:28 2026 by rpki-client