Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e006f93-821a-3957-b84e-6150ff092887.roa
File:                     4e006f93-821a-3957-b84e-6150ff092887.roa (raw, json)
Hash identifier:          N9rUtmELpk/JyhMrKTxlfx7bRuzpfJHO8UfbQJzZvJ4=
Subject key identifier:   4E:72:2A:F1:8B:4F:0C:E9:D0:5A:35:38:5F:01:F9:2E:6E:1A:3E:31
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584CD99D01F398C8FFA371D98540
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e006f93-821a-3957-b84e-6150ff092887.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        69.58.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:01:f3:98:c8:ff:a3:71:d9:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=f32b4d7f-23fb-4a62-a636-95d661111ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:36:d4:d5:af:72:4d:30:a8:df:bc:03:d8:
                    7d:28:09:66:bd:7d:50:2e:46:82:93:eb:b7:d4:15:
                    1e:2f:0d:dd:7d:f9:5f:e7:c4:36:28:c5:bf:90:9b:
                    79:f9:8d:a4:80:8e:a3:59:76:ae:5c:84:4d:7c:dd:
                    f8:02:25:1a:29:66:eb:f9:73:35:94:cd:fd:f5:13:
                    83:27:d3:a9:b2:af:50:8c:1a:41:80:be:13:cd:e0:
                    3d:e9:62:c1:dd:50:91:8b:ef:2e:2c:88:34:2b:59:
                    13:01:36:b8:51:93:27:cb:0d:45:04:8e:21:85:d0:
                    dc:f4:d5:9d:96:96:0e:c1:98:90:e4:a1:ce:0a:6f:
                    e6:7c:e8:b0:4b:d6:a7:2b:36:cf:49:45:89:54:70:
                    72:93:4f:d0:73:bd:fd:15:1c:61:a3:04:20:67:a8:
                    8b:51:9a:44:43:64:db:24:70:ad:76:e4:03:d8:cb:
                    b3:09:e5:9a:1c:59:cf:85:71:60:58:bb:92:a3:09:
                    14:94:f9:57:46:d1:0b:06:d4:73:91:0f:14:29:88:
                    18:03:75:54:ad:53:77:1e:c2:1e:52:3a:b2:02:7f:
                    23:9e:1c:38:59:d0:d8:58:fe:d6:2f:e2:3c:55:4e:
                    dc:d1:5a:87:44:b7:1e:51:f4:ec:c1:0e:e6:d3:26:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:72:2A:F1:8B:4F:0C:E9:D0:5A:35:38:5F:01:F9:2E:6E:1A:3E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e006f93-821a-3957-b84e-6150ff092887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c0:79:92:d8:7a:9e:35:d8:39:bf:ce:e4:8a:8f:9b:26:bf:
         f5:8e:b8:af:6b:3d:3b:63:d0:a8:f1:1d:1b:f6:3f:ae:97:a2:
         ad:d4:5e:3d:2d:e6:05:ec:01:e5:ba:76:5a:b1:ff:7c:34:76:
         ce:f1:cf:5d:23:16:e6:ed:07:e8:e1:50:07:84:42:44:31:80:
         20:99:a4:b0:4d:c2:3a:84:0a:26:73:41:be:2f:a9:49:29:b4:
         49:b2:30:bf:74:b9:11:ba:9e:9e:ed:34:85:c8:11:1d:35:6b:
         db:a7:9b:98:d9:25:8a:1f:7e:0c:aa:34:45:69:b0:25:cb:42:
         a4:8b:08:40:53:07:7c:da:66:04:23:a9:2f:dd:03:da:a3:59:
         03:8c:70:8d:67:49:49:4d:50:56:e6:31:34:52:3b:64:03:7a:
         8f:5d:6e:af:fe:f0:27:59:d2:17:9a:71:5c:a2:c8:78:9a:1a:
         c5:aa:b3:66:76:4e:ff:57:3f:d1:dc:de:37:c4:ff:15:65:e6:
         22:f9:96:78:46:4d:a9:c4:5e:5f:1d:b5:17:f3:d2:a3:90:04:
         20:be:d8:4b:4d:cb:01:db:38:5f:3a:d3:46:4e:e5:15:06:3f:
         5c:ef:01:79:c7:50:da:21:89:cb:6a:c6:2c:ad:ff:97:eb:f1:
         c2:77:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:38 2026 by rpki-client