Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
File:                     4abebfc4-4b83-3d10-9999-aafd39dd7329.roa (raw, json)
Hash identifier:          EXxs8VncSTxV8LQSmZlnx25Z8fU007Z44LKDhHexOBI=
Subject key identifier:   51:A2:8A:5E:FE:86:B2:E9:AD:A9:D3:FF:FE:E8:14:24:9E:C7:1F:5E
Certificate issuer:       /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial:       010D0C9F4328584D02178C1542D6452E5B762580
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     30221
IP address blocks:        68.68.192.0/22 maxlen: 24
                          68.68.196.0/24 maxlen: 24
                          68.68.198.0/23 maxlen: 24
                          68.68.200.0/23 maxlen: 24
                          68.68.206.0/23 maxlen: 24
                          68.68.208.0/21 maxlen: 24
                          68.68.216.0/24 maxlen: 24
                          68.68.218.0/24 maxlen: 24
                          68.68.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:8c:15:42:d6:45:2e:5b:76:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=9d82ece8-1931-4393-a8e5-bcbb77090cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:79:9c:34:1f:11:66:8c:bc:52:4b:60:a6:
                    29:00:10:6b:c3:b2:3c:4e:90:0d:68:cc:51:55:c7:
                    98:d0:ae:34:d4:bb:11:87:4c:68:ed:2c:4e:3d:26:
                    18:c4:52:a7:6d:dc:83:95:e5:55:90:20:f8:3a:7d:
                    29:ce:17:cc:9f:64:fd:18:f5:8c:25:ba:37:7d:45:
                    58:1a:60:4f:4c:94:f6:f5:89:c1:6f:c0:4d:26:1e:
                    96:69:12:67:df:ea:b4:96:d5:c1:b4:93:5b:12:cc:
                    19:c3:09:9e:8c:42:d0:1e:cf:94:b4:7d:9a:a9:47:
                    71:f2:83:45:c7:c4:fc:14:9d:e3:c7:d5:f1:1b:c8:
                    04:e8:8d:be:ec:48:8b:ff:63:11:cd:cc:08:96:05:
                    2e:c9:18:ef:c0:13:c1:0b:83:b4:55:5a:2a:ff:4b:
                    4b:3a:fa:9e:71:6c:6e:9d:8e:17:36:9f:3f:99:0b:
                    31:5d:c5:29:54:ce:2d:1a:0b:1f:88:45:11:e9:fc:
                    4e:09:b0:7f:3d:10:21:71:94:0f:26:25:85:73:e4:
                    a5:8e:c0:c8:1e:26:ff:d6:3d:c5:bb:f5:bd:06:eb:
                    da:19:3f:07:33:9a:c9:24:80:93:34:54:cd:2f:50:
                    70:46:44:39:59:e4:90:72:f5:ed:8c:e5:6f:36:3f:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:8A:5E:FE:86:B2:E9:AD:A9:D3:FF:FE:E8:14:24:9E:C7:1F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl

            X509v3 Authority Key Identifier:
                keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.192.0-68.68.196.255
                  68.68.198.0-68.68.201.255
                  68.68.206.0-68.68.216.255
                  68.68.218.0/24
                  68.68.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:27:d4:19:c5:bc:10:2d:de:15:58:40:35:a8:9b:36:51:
         1b:ea:56:55:b4:0f:4c:3e:5f:82:98:cb:8d:4a:8c:d1:b6:ef:
         1e:32:a1:ac:a9:cf:e9:ad:35:36:7e:02:16:40:64:cd:9f:48:
         36:0f:33:5c:cd:70:a5:0f:7c:b2:d9:e0:1a:ad:c3:ac:43:c0:
         12:1d:e8:74:4f:7e:05:98:a7:91:95:97:d2:31:9b:7d:29:77:
         37:8e:cb:b9:ad:a4:59:67:87:37:e3:0b:4e:a2:ba:6c:20:16:
         ab:be:86:e7:bc:db:51:23:38:5b:27:39:9f:04:01:11:89:e8:
         ba:ef:36:2d:c7:c9:a8:70:dc:25:1e:75:cf:b8:73:1d:09:60:
         64:4c:35:21:65:75:08:78:8e:eb:3f:4e:0d:4a:8a:42:7d:d7:
         aa:af:be:e0:f2:8a:52:f3:86:3c:c9:29:bf:23:6d:69:7e:39:
         bd:fc:4b:60:43:2a:24:37:7c:04:54:d9:c1:9e:aa:e5:c3:72:
         94:76:3a:5c:4c:a5:c9:a2:b1:3d:50:22:40:3c:ee:2d:70:21:
         55:c5:cf:3f:48:e1:a3:f4:86:45:f2:2d:b2:ef:97:4b:e4:7c:
         4f:4f:c2:16:e9:45:d2:39:59:ec:60:fd:56:7f:63:7a:aa:ab:
         37:0f:d4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:44 2026 by rpki-client