Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/80385483-b20c-3f42-8f77-30eda8badbe6.roa
File:                     80385483-b20c-3f42-8f77-30eda8badbe6.roa (raw, json)
Hash identifier:          S4niweyZqyrrbVLN4GBSUYV/fjUm7bkCvYzVzb3BOb0=
Subject key identifier:   BE:A4:5C:68:2B:D1:37:65:99:D4:67:6C:98:EC:B0:22:53:C6:D2:F5
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584DCDC5A46F0B59CF865AD81B00
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/80385483-b20c-3f42-8f77-30eda8badbe6.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     36103
IP address blocks:        68.70.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a4:6f:0b:59:cf:86:5a:d8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=736ea6bb-0473-483e-ac71-0ef1c8b874a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:e2:b4:a1:b8:fa:b0:bb:7c:d3:52:2f:11:
                    57:7f:b1:23:4d:d0:d3:bf:61:2b:72:6f:d4:28:bd:
                    94:9d:e6:38:25:5e:fe:51:8f:3b:1e:41:a4:3f:93:
                    e3:bf:a5:6b:d7:65:35:0b:21:c9:2f:8a:9c:29:85:
                    62:3a:c0:d4:fd:af:c4:c2:7d:e6:64:f5:2c:69:8d:
                    9e:bc:40:b4:41:ad:0c:ba:84:5b:af:11:fe:95:cd:
                    8e:2a:a5:80:58:64:0d:0e:7c:17:07:8b:55:ad:f1:
                    39:87:6c:5c:da:57:14:a4:b4:60:54:76:06:ef:2f:
                    34:1d:86:7d:9f:17:77:e8:f3:37:90:d2:7a:5f:e4:
                    3f:fe:80:54:66:40:4c:3f:b6:f1:37:b1:c7:1b:b6:
                    5f:34:69:20:2c:03:94:9f:3a:0e:2c:32:90:ed:bd:
                    ee:69:cf:50:8c:16:5b:70:ba:8d:ec:23:af:6d:a5:
                    91:9e:15:14:91:c8:68:6f:1e:45:e2:f6:e5:38:3c:
                    fc:e8:4e:e3:21:c0:b2:b5:a5:b5:db:74:c0:de:8c:
                    16:ab:ec:a5:8d:7a:7a:ab:f9:d1:be:9f:63:e0:73:
                    0a:54:62:76:1f:0a:13:97:7b:03:a8:a5:0a:69:f2:
                    98:2b:81:e9:1d:73:28:18:b4:7f:11:6e:d0:f3:14:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:5C:68:2B:D1:37:65:99:D4:67:6C:98:EC:B0:22:53:C6:D2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/80385483-b20c-3f42-8f77-30eda8badbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:f1:0e:46:bc:3f:0b:ed:4a:bb:12:bd:71:41:b2:58:ab:
         58:f7:07:f1:1d:9b:6e:3f:6e:a1:be:84:23:dd:a5:ed:04:2b:
         a2:ed:e5:a5:57:ff:6a:7f:a8:b8:a1:6d:b0:f1:03:fc:2f:12:
         85:75:be:4c:b4:e0:c6:77:84:10:93:05:b3:3b:92:8c:9a:f0:
         33:0a:4f:46:8b:9a:e2:f9:e3:a9:a8:ec:c3:22:41:23:4f:52:
         eb:39:5c:af:e4:90:60:0e:8e:b7:9a:e7:ea:70:29:5f:38:f4:
         e8:f8:7e:d5:3f:01:27:33:43:da:8d:5e:56:15:37:f9:4d:9f:
         75:d4:b1:f7:13:6e:54:79:c9:ca:e1:30:b1:2b:ab:2b:2a:8e:
         36:01:ab:2f:d7:cf:14:aa:3a:3f:3f:4c:43:4b:85:f7:d9:59:
         dd:9a:4c:05:39:9d:ed:65:0a:3a:8e:86:2a:95:95:d6:fa:c5:
         c7:75:d7:9a:f2:1a:f4:03:fc:be:4e:43:c1:e3:e7:6d:bb:bd:
         e2:c5:33:9c:48:74:dc:80:6e:0b:ee:50:18:98:a6:4f:36:22:
         4d:7c:08:cc:bb:6f:8c:11:e4:45:99:96:ae:ae:75:38:7f:24:
         7d:1e:8a:25:49:50:f0:5b:3f:10:59:4a:9f:5c:96:a0:4b:1f:
         fa:d2:7a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:49:37 2026 by rpki-client