Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
File:                     67fb9365-155a-30e2-9cb0-ea2989748078.roa (raw, json)
Hash identifier:          wwJLcADSfQu+BChUkYsiec0vZI35yGbVLG7JeVg0vWI=
Subject key identifier:   D4:42:0D:5C:5D:BA:C1:BA:7C:DA:04:12:FF:51:23:78:AC:2C:B9:DC
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584CAA2718F8B18257556660EBC0
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     46353
IP address blocks:        208.67.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:18:f8:b1:82:57:55:66:60:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=09c8d62b-901f-4dc4-9726-64e79acd9228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:7f:59:d7:7a:bd:3e:f8:99:73:97:19:72:
                    67:e9:81:6a:9d:7d:bc:fc:08:71:94:e1:f5:80:14:
                    b6:48:26:c2:a9:be:d7:2e:1d:68:a6:79:b0:f3:01:
                    a1:6d:6d:29:d3:c7:7b:29:f8:62:8d:00:6c:91:6e:
                    b7:a7:1b:74:28:ce:31:dd:a6:d2:09:97:80:40:72:
                    43:a0:b3:e2:d9:5b:3c:aa:03:76:db:44:01:22:28:
                    b0:f3:7f:34:55:37:b3:aa:77:d6:ad:15:9f:06:1f:
                    cf:fb:61:53:b7:90:98:74:8d:e6:4d:42:03:7a:f0:
                    63:1e:de:04:6c:1d:be:93:97:41:07:05:18:fe:7b:
                    1b:1a:83:6b:6a:a2:44:aa:2e:d9:4f:3f:f7:1f:1b:
                    74:12:36:51:85:b0:cb:3a:25:38:07:94:62:ac:d6:
                    19:41:4d:e2:b1:c7:f8:40:7c:8c:8d:2b:b8:e3:fe:
                    d5:14:b6:d2:e3:87:82:7f:41:32:1f:3a:1b:0f:27:
                    27:b1:53:2f:2e:70:31:25:7a:67:95:81:53:cf:dc:
                    0a:f3:0d:a9:66:6b:a5:61:c0:54:ad:09:2e:d2:45:
                    f9:86:93:e6:ce:1a:a5:d5:ca:72:80:9f:b6:8c:17:
                    f8:43:4e:c9:5f:c2:2a:d3:8e:88:0f:b9:0b:29:e6:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:0D:5C:5D:BA:C1:BA:7C:DA:04:12:FF:51:23:78:AC:2C:B9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:4e:c3:e2:c5:70:5a:52:2d:22:52:ae:b9:0a:f8:46:89:
         e0:d2:0a:19:36:67:5a:aa:b5:4b:c7:be:1b:db:88:87:cb:d7:
         c3:bc:8e:9a:69:12:dd:90:e5:4f:99:2d:fa:04:00:eb:c1:8c:
         68:31:1d:0d:82:e8:79:f1:00:53:bb:bb:3f:d7:42:cb:ff:7a:
         a3:32:f9:b0:10:de:e7:bd:6f:7d:40:64:29:d4:d7:00:85:76:
         88:c8:2e:f1:4d:8a:dd:29:99:5e:7e:8d:9a:9c:e9:64:2b:c7:
         4b:d7:99:1b:b7:23:f7:e1:aa:ff:8b:88:e3:7f:ae:41:13:02:
         62:f1:e7:e8:cc:db:d1:c8:29:e4:db:e7:62:25:54:5c:8a:0c:
         47:49:94:75:72:c9:52:91:c3:cc:a2:14:58:b7:cb:a3:14:3b:
         49:8a:2b:20:00:05:3e:3b:fa:af:1c:a4:18:bb:13:77:08:b5:
         22:43:78:20:98:02:0e:43:3b:48:ac:61:b0:1c:1c:2c:d7:11:
         02:1b:7a:17:65:1e:45:6c:cf:b9:96:3b:c6:7d:76:93:71:43:
         ef:0d:35:dc:db:77:9b:41:b6:35:ed:33:6a:f9:de:55:be:a2:
         d1:89:af:a6:7b:5f:6a:99:9d:2a:82:d3:8c:55:f5:51:23:c3:
         ef:8d:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:10 2026 by rpki-client