Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e006f93-821a-3957-b84e-6150ff092887.roa
File:                     4e006f93-821a-3957-b84e-6150ff092887.roa (raw, json)
Hash identifier:          pNQZOoSxZwPRRqdH/K7HVU3g8Beft76ug7qsd9iIPTU=
Subject key identifier:   95:EC:12:56:5E:E9:23:6C:75:93:42:B2:54:68:B6:67:CD:7C:44:99
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE27B10F272425826B53780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e006f93-821a-3957-b84e-6150ff092887.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        69.58.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:7b:10:f2:72:42:58:26:b5:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=3e16dc4c-9ab1-456e-a61d-339d92054a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:30:e8:d6:b4:e2:1f:65:9a:7b:6a:8e:37:
                    2b:d8:ef:39:1d:54:9b:91:b4:38:b4:5a:b1:35:b8:
                    19:0b:2e:f9:5e:fd:10:dc:ef:8e:8d:94:bd:fd:e8:
                    17:d1:c3:0a:2a:0b:22:05:e0:89:ab:ab:e2:aa:34:
                    81:b6:01:e3:fe:8e:7a:04:97:66:b4:7d:4d:c4:05:
                    ae:b4:c8:ea:49:34:a8:99:de:f6:5b:03:ef:38:d6:
                    54:e7:f1:57:35:e0:61:c9:a0:67:62:61:c2:7d:3d:
                    6e:be:6b:11:1a:54:2d:6d:37:31:cd:bc:39:df:96:
                    7d:ce:9a:fe:62:60:e9:29:67:11:fe:6c:99:85:10:
                    7e:54:fa:4d:24:5f:4d:1b:89:55:8e:b5:d5:23:78:
                    4a:26:19:0d:0d:04:94:d5:93:a9:58:9f:60:ac:03:
                    69:f3:61:bb:b7:8b:83:af:bf:25:e8:b0:0e:0d:e2:
                    34:0f:4b:20:0f:f5:cf:f5:48:31:ea:08:6a:95:39:
                    29:bb:b4:53:da:89:07:bd:db:fd:8f:9c:25:ca:de:
                    25:44:a9:51:68:ed:9c:32:76:89:3c:8b:be:27:45:
                    f4:9e:70:4b:5c:99:82:61:f2:74:e6:12:d7:91:05:
                    b3:03:d0:96:7c:a7:ca:70:e6:2e:af:d4:2b:f0:fb:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EC:12:56:5E:E9:23:6C:75:93:42:B2:54:68:B6:67:CD:7C:44:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4e006f93-821a-3957-b84e-6150ff092887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:3b:dc:88:9c:03:37:ab:84:c0:25:c3:4e:a6:4f:22:97:e5:
         ec:36:61:c6:04:22:f8:3a:cf:fa:d7:c1:18:4d:2f:11:40:8a:
         33:cc:a4:03:08:1b:87:e1:39:ed:cc:77:12:25:3f:1c:45:4a:
         c0:d9:f6:c2:7d:17:3d:71:cc:bb:09:28:ce:c1:46:e0:46:a0:
         31:43:f6:21:7b:06:f3:c3:47:f4:ca:f3:7d:a5:3b:f4:67:29:
         6c:c9:8c:4a:15:00:e6:63:bb:48:c2:38:b2:97:64:a5:3a:37:
         3e:e6:27:a3:e3:13:2d:6d:37:1f:3d:02:43:9b:66:2e:7d:a7:
         5e:a0:44:66:d4:85:c1:ba:16:3d:5e:fd:af:3d:a1:e8:b2:7b:
         a1:6d:68:f3:eb:91:ec:2c:f6:d4:13:1c:a2:9e:10:27:f4:1c:
         65:51:cd:c5:cf:ca:71:e1:6d:2c:f4:16:f6:17:af:cb:fe:0d:
         24:34:79:fd:ee:ca:f2:dc:50:03:d7:9f:f8:2b:cf:63:cf:5b:
         fa:4d:1c:70:14:5a:1d:63:fa:66:3b:c1:f8:27:0f:64:ab:95:
         be:45:22:fc:85:63:d3:c2:54:40:13:07:3e:19:7e:bd:ee:f2:
         3a:ba:5c:60:45:ad:18:23:fc:e1:f9:23:b7:2a:d8:fb:36:fd:
         e6:a9:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:16:14 2026 by rpki-client