Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
File:                     c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa (raw, json)
Hash identifier:          0ZtGanrAzbIYMO6A7poGZK5MUXD2qF7KFGCtRXTGIBE=
Subject key identifier:   DC:D2:17:89:39:06:FF:27:36:14:F2:6C:7D:3F:BB:01:15:04:2B:F4
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584F4973DFFC4CC204807DBCC940
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36103
IP address blocks:        68.70.247.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:df:fc:4c:c2:04:80:7d:bc:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3c3ba7bf-4dd8-48de-b729-f760a9d6d0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:e9:a0:e3:15:7f:ac:75:e9:88:33:b6:ae:
                    2c:6c:14:fb:d8:16:43:c1:d5:14:51:5a:76:bf:28:
                    92:06:71:19:55:4b:17:47:70:88:4e:aa:d0:ef:da:
                    bb:1f:44:fb:fb:db:cf:17:03:75:de:24:a2:20:b9:
                    31:9e:57:96:e2:c9:b7:21:4e:72:ad:80:30:1e:4a:
                    00:36:01:be:36:da:4e:6d:d8:af:f7:18:64:9e:02:
                    82:08:0d:40:de:90:d3:bf:ee:56:7d:79:e8:d8:29:
                    2a:1b:45:f9:7c:3b:5f:d8:f3:ba:7a:c3:bc:b2:63:
                    dc:39:97:b5:c6:1b:17:09:15:cb:54:62:1c:25:93:
                    d1:c4:a3:a3:20:df:74:af:d4:af:f0:ac:88:f0:fe:
                    da:0d:75:93:f0:15:b8:bb:5d:01:21:9d:0d:41:67:
                    53:fb:56:7c:45:37:cd:eb:2b:6a:cc:17:b4:0c:14:
                    7b:44:2e:1f:e6:23:fe:a2:64:d9:85:bb:5b:96:b8:
                    4f:e1:17:ad:f4:9b:f8:e1:ec:b2:5e:68:4f:23:09:
                    e5:7c:29:b1:36:de:a3:81:a9:29:20:49:cc:c9:0c:
                    65:31:19:02:18:15:41:a0:6d:be:2a:8b:61:41:4a:
                    9d:18:c6:c4:90:60:c4:2a:98:3d:6b:e4:9c:63:b3:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D2:17:89:39:06:FF:27:36:14:F2:6C:7D:3F:BB:01:15:04:2B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:95:0f:2f:1f:09:6d:02:65:93:d4:07:57:ed:fc:a0:af:
         fd:04:b0:66:30:eb:7a:53:b4:18:12:5d:50:ff:78:06:e7:e7:
         77:e9:72:da:0e:fa:f6:ce:8f:94:b7:99:de:c0:88:2a:b2:ea:
         51:da:ac:13:4e:e1:73:3a:0a:73:e0:31:b2:e9:cd:fb:0f:83:
         d1:d1:9e:a2:02:71:62:ec:77:b8:1f:1b:e2:87:08:d7:65:c5:
         fb:83:e6:36:59:fe:51:67:8e:2f:ae:a6:9c:51:3e:67:ba:4a:
         18:f5:25:4f:cb:be:27:d2:79:ea:b0:93:12:27:5a:9a:45:0c:
         9d:8a:39:88:10:c1:b4:d2:b7:71:11:64:89:9d:3f:db:60:81:
         64:d9:03:0f:41:cc:cd:2e:bc:5e:3a:f7:87:ed:82:ba:57:66:
         2d:86:45:b4:e5:fb:e8:d5:e5:dd:62:3d:c0:b0:8b:89:93:8e:
         7e:98:d9:23:ad:66:13:77:f1:ff:d2:26:84:6a:2b:4c:ae:27:
         09:7e:75:19:70:43:07:a1:b5:9f:69:60:16:00:fe:92:57:ae:
         fa:3e:4a:fb:9c:ad:1e:d7:bb:2d:15:96:ee:8f:74:59:3f:3e:
         1d:58:48:47:cd:89:e7:03:6e:0f:5c:8d:ef:02:f2:e9:8b:f9:
         0c:4a:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:15:12 2026 by rpki-client