Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa
File:                     dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json)
Hash identifier:          pUf2TU6KNmcGf+03/zeTVPzRHVC9TFylgcUoWmd74uE=
Subject key identifier:   8B:DE:01:07:53:7A:27:A7:23:21:A8:4A:98:C1:69:F5:BF:3D:16:12
Certificate issuer:       /CN=1f54df1e-3d93-4ac5-b209-e24261193230
Certificate serial:       010D0C9F4328584DE84B3DFB635F090FC7666F40
Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     30211
IP address blocks:        192.161.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3d:fb:63:5f:09:0f:c7:66:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=85bc9863-eacb-4eb9-a79c-b7fb4ab309c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0f:16:ca:18:c8:59:42:82:38:c3:44:2e:fe:
                    1c:ed:09:d2:dd:bf:e1:62:d3:65:c1:6e:8c:cb:11:
                    c3:f2:93:ec:df:71:9f:e3:5d:aa:fa:7e:9e:a6:64:
                    b2:61:c0:bc:b5:87:93:64:e0:79:7f:f6:31:3e:69:
                    c1:67:57:11:2f:1c:8d:47:f5:8b:08:f0:d7:2f:fb:
                    7a:13:0b:3e:e4:67:a1:19:f0:86:b5:ae:ea:8b:be:
                    ea:53:cb:ff:12:0e:13:77:21:5f:66:04:e2:2d:cb:
                    d7:54:d9:6d:17:c5:c2:15:1f:b6:71:d5:14:e4:7d:
                    fb:26:8e:96:2c:1d:de:fa:e8:ff:07:db:9c:60:95:
                    76:c0:47:0d:e4:a5:12:23:d9:ed:aa:50:6d:cc:14:
                    14:c9:e8:a0:55:16:db:ed:60:ce:23:64:5a:25:9e:
                    ac:8d:e3:9b:f5:da:8b:78:4b:80:92:87:ea:d7:85:
                    50:07:97:6c:be:11:ab:af:69:26:b9:4b:5a:b1:46:
                    4f:f5:8f:aa:6f:f8:1a:82:0f:5e:7a:98:a3:a9:76:
                    92:61:df:91:a8:40:36:8c:a1:73:58:0c:44:b4:0c:
                    5e:ab:51:8c:c2:26:f5:ae:2d:5e:f2:c6:4c:27:14:
                    22:b9:81:e9:21:e2:ad:3d:e6:25:01:bb:80:25:1c:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DE:01:07:53:7A:27:A7:23:21:A8:4A:98:C1:69:F5:BF:3D:16:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl

            X509v3 Authority Key Identifier:
                keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:fc:63:9d:9c:13:3e:29:5f:46:f5:60:03:be:25:4b:20:
         00:b1:0d:eb:99:73:13:ab:de:6c:2c:20:52:93:bf:0d:6c:88:
         cc:cf:b3:e8:76:1d:76:a4:e6:ac:fa:eb:66:8b:c7:31:47:a7:
         f9:66:af:99:ce:26:dd:45:8c:4b:ad:93:d1:4c:93:d0:19:15:
         19:6f:43:b0:8f:bb:03:f1:8e:96:f5:ec:9c:1f:46:15:88:bc:
         35:a3:14:6a:32:40:c4:33:7d:42:d2:9f:80:89:64:f0:80:32:
         fc:19:a9:d4:ea:11:9b:f8:19:25:53:c8:29:0c:80:78:3b:24:
         a6:28:11:95:8a:0f:b0:13:8e:6e:75:d9:3e:07:1c:4d:0b:e0:
         20:8d:75:12:ec:8f:ed:d0:f0:ad:3b:6e:d9:ed:21:3e:fb:cb:
         3d:99:94:51:2b:8f:29:e5:b1:24:e9:60:ff:94:99:3e:aa:26:
         af:19:b7:98:6b:2e:e0:d1:9a:36:8d:0f:f8:59:23:ed:60:5a:
         80:b0:14:08:aa:57:90:28:fc:2b:ea:66:65:ec:22:26:1e:20:
         66:d2:d1:31:04:0f:fc:b1:7d:dc:a0:47:33:a8:60:0b:3f:90:
         f1:96:a7:40:f3:12:81:da:3e:d9:18:d7:cd:0f:f3:b1:43:c9:
         93:30:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:01 2026 by rpki-client