Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/335d2417-ebbb-36a6-902e-a4805fcd9bb3.roa
File:                     335d2417-ebbb-36a6-902e-a4805fcd9bb3.roa (raw, json)
Hash identifier:          VS1HXaNjYpAcadvZ4bBOMI1peEovyVY4q1NKvMgIlkw=
Subject key identifier:   83:38:B1:E9:B2:88:18:69:96:64:4E:28:2F:81:92:78:C7:0E:31:33
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584F0D91AE932CFE72871F0D9A00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/335d2417-ebbb-36a6-902e-a4805fcd9bb3.roa
Signing time:             Thu 03 Sep 2026 14:14:29 +0000
ROA not before:           Thu 03 Sep 2026 14:14:29 +0000
ROA not after:            Wed 02 Dec 2026 15:14:29 +0000
asID:                     36692
IP address blocks:        67.215.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:91:ae:93:2c:fe:72:87:1f:0d:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Sep  3 14:14:29 2026 GMT
            Not After : Dec  2 15:14:29 2026 GMT
        Subject: CN=9e9bfd87-3c7a-4f55-86b2-171f1b54dfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:45:d0:11:24:16:56:85:c5:8a:1e:fd:3f:
                    23:83:0f:5f:8a:af:bc:59:7b:08:5f:d5:ed:fd:a6:
                    2b:e8:d0:56:ac:20:70:ac:f1:23:fa:93:45:b9:cb:
                    e6:d3:d1:ec:1f:69:d5:83:fc:86:ce:97:af:6d:67:
                    02:f2:28:6d:f7:23:5c:ce:e1:2c:f0:17:b0:7c:71:
                    76:58:f6:40:e8:f8:6d:0c:cf:3f:d5:cf:3f:95:f5:
                    4d:23:42:7f:16:a9:84:f5:e7:42:a6:f1:7c:61:5a:
                    46:50:1a:89:17:78:39:ad:c5:9b:dc:63:54:e9:4a:
                    15:74:ac:f6:66:e5:03:7f:0e:65:c9:e7:d5:77:91:
                    d1:b4:49:97:b0:60:1d:6b:a0:46:8d:aa:5d:5c:0e:
                    49:50:c1:14:f6:f3:80:64:a6:d7:79:22:ed:b8:d7:
                    b6:d1:7c:ba:fe:6e:99:c3:67:0b:98:95:92:94:fa:
                    7a:1a:9c:38:b3:ef:c6:93:5e:5f:d5:42:e1:a6:64:
                    98:d4:61:d2:8d:23:1a:f0:58:42:bd:2d:7a:5b:73:
                    80:26:a1:5c:a8:ac:df:a0:ff:ac:b2:4d:12:79:e7:
                    5d:e5:2b:8d:66:98:53:a5:ae:5f:29:ae:21:b4:b3:
                    cd:09:cd:eb:a8:96:6d:9c:a2:0c:ee:a5:93:01:e0:
                    11:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:38:B1:E9:B2:88:18:69:96:64:4E:28:2F:81:92:78:C7:0E:31:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/335d2417-ebbb-36a6-902e-a4805fcd9bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:8c:d8:bf:ba:06:63:c8:1e:d8:c7:6e:b8:d8:a5:6c:14:
         b4:db:ad:72:a7:7b:51:0d:d4:d0:11:ce:8b:68:6b:42:f3:d1:
         0e:be:52:e7:4f:97:9d:ca:36:cc:09:92:81:2a:e5:e5:03:78:
         2d:77:95:27:f9:60:a4:c6:f8:db:da:cf:d5:f0:7f:d3:fb:52:
         56:0f:38:ff:ca:09:30:e0:2f:38:a6:d5:1c:e6:83:cb:7d:aa:
         ee:3b:c0:8e:54:56:d1:d6:96:97:fe:ea:35:2d:af:90:9a:23:
         4b:80:f3:cf:98:8a:86:1b:ee:49:93:fe:3f:69:df:7f:61:42:
         89:96:56:31:6e:44:6d:d6:47:d4:c9:e7:ce:66:5a:6f:0c:c9:
         2b:a1:6f:50:ff:1f:6e:2d:cf:92:da:4f:4e:44:58:7c:63:b1:
         b9:52:47:fc:c2:d1:32:bf:f4:7b:56:88:f4:65:49:80:1e:a2:
         25:82:cd:35:db:72:7a:3f:5f:24:6d:20:6a:e9:32:d6:a9:b6:
         22:51:25:b1:72:88:c7:59:88:3e:50:20:a5:fc:6a:ae:95:79:
         93:d9:94:4d:d3:aa:98:5a:c1:c6:98:6c:31:ce:32:43:0b:79:
         db:c5:2a:5e:b7:dd:67:54:bb:ad:69:f4:32:04:da:ac:3d:9f:
         f8:87:c2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:53:51 2026 by rpki-client