Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b02e08d7-dce3-329e-baa3-8e0c0bb4969b.roa
File:                     b02e08d7-dce3-329e-baa3-8e0c0bb4969b.roa (raw, json)
Hash identifier:          RapAS9G+SQPAFs3/vkYk7V7mkC6SvjJn7oULulv0PUM=
Subject key identifier:   CA:8A:36:9F:0F:5A:98:57:6B:7A:81:B9:D6:12:1F:C1:2D:F1:76:78
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584D571FAA9B8DA4E84A7AAB5900
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b02e08d7-dce3-329e-baa3-8e0c0bb4969b.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     174
IP address blocks:        68.64.134.0/24 maxlen: 24
                          68.64.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:aa:9b:8d:a4:e8:4a:7a:ab:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=5d5a1371-09b4-43bb-9f88-6436390d9085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:1a:f1:c9:f6:55:28:5c:23:b6:7e:36:c6:
                    57:0a:56:24:7a:1a:48:2f:17:71:56:8d:9a:12:fc:
                    21:2f:ef:4b:c7:ab:de:c4:8f:af:89:29:26:03:29:
                    07:95:b3:45:93:4b:c9:4c:27:9b:6c:9e:ef:2a:2b:
                    37:55:83:24:1f:38:3b:c2:95:45:76:db:9a:df:09:
                    47:28:39:57:67:3b:25:69:a4:62:09:4d:c4:55:77:
                    a1:20:d9:33:6b:b3:7b:46:77:8d:4d:d9:e9:48:19:
                    4a:84:ea:bc:48:7d:b1:55:cb:3f:58:ca:58:a2:92:
                    a2:fb:d9:81:33:f1:f6:d2:6c:6e:51:67:7b:a4:7f:
                    96:60:de:dd:4a:ef:ae:b5:32:52:84:e3:51:57:bb:
                    19:dc:ad:0a:9f:ac:71:86:22:21:77:02:34:0c:9c:
                    e9:9b:df:7f:26:86:5b:df:cf:13:e0:e9:ea:06:83:
                    38:ce:3a:91:75:d5:aa:47:d3:5c:31:2b:2c:5d:60:
                    fd:e0:10:10:05:e1:53:69:a6:a0:d3:5d:fc:7b:83:
                    b1:f0:51:93:4a:61:55:8a:f4:f2:44:a5:78:c3:bf:
                    bb:41:2e:15:68:10:05:42:eb:40:90:4e:39:7b:fd:
                    dc:22:5b:ab:0b:3d:c2:a7:9a:f2:55:1c:a0:9f:03:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8A:36:9F:0F:5A:98:57:6B:7A:81:B9:D6:12:1F:C1:2D:F1:76:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/b02e08d7-dce3-329e-baa3-8e0c0bb4969b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:00:80:2f:c0:ac:3b:94:ba:b8:6f:e4:ae:16:49:02:8c:
         bc:a5:a4:bc:68:f7:90:96:f8:3f:ef:8a:47:34:62:73:93:91:
         eb:b4:5a:cc:e7:12:ba:13:5c:9e:8a:57:72:cc:52:2b:05:e4:
         ad:af:b2:ab:5f:77:45:ba:fa:52:0c:05:9b:b9:16:4e:14:9b:
         58:4c:24:fc:93:a0:90:b3:2b:d2:47:cf:c5:a6:64:f3:d2:a8:
         0f:a0:12:e1:6f:de:4b:3c:e8:d2:be:b6:58:09:ba:be:77:34:
         cd:24:51:44:2d:b4:ac:38:1b:46:f1:2d:e1:75:1f:11:3d:7f:
         ae:72:c2:cc:16:54:00:b1:c3:06:20:c7:bd:03:2c:68:0f:4b:
         2d:d4:9f:2a:28:46:6a:09:dd:95:b4:6b:66:29:6f:1b:86:a0:
         61:88:21:84:fc:f4:39:13:ff:b3:af:c8:4f:5a:f6:bf:01:08:
         2b:04:24:ab:86:bc:0c:a4:f7:68:75:c7:96:d3:6b:46:d2:41:
         ed:52:38:68:7e:b2:f3:ec:8b:d2:51:e1:ac:94:98:70:3b:c1:
         23:7d:43:66:70:6a:f1:66:03:84:07:01:b7:ce:cb:be:38:f4:
         07:9b:42:cb:30:c5:ee:75:3f:fc:03:3d:05:2c:d3:b7:3f:bc:
         ef:e9:24:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:58 2026 by rpki-client