Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/ebee498e-a59d-3902-a93e-7010a05ad4bd.roa
File:                     ebee498e-a59d-3902-a93e-7010a05ad4bd.roa (raw, json)
Hash identifier:          tE90XslPfDH4rLRVh7pqoRODzXTBWF0j567Dbaue5as=
Subject key identifier:   53:52:62:6B:0A:9C:7A:A8:4D:FF:3B:FA:3F:A3:E7:D0:41:11:CB:5C
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584DCDC5A45F540521455485E8A0
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/ebee498e-a59d-3902-a93e-7010a05ad4bd.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     36103
IP address blocks:        68.68.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a4:5f:54:05:21:45:54:85:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=cf456401-858b-4bc2-8751-90bfe88ef18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:7a:ff:9e:fe:30:7b:f0:28:f6:b7:13:f4:
                    d0:0c:84:ac:c0:02:fa:47:31:80:75:07:28:75:c1:
                    18:b8:f0:41:97:44:94:85:0f:69:95:eb:53:bb:de:
                    88:66:88:d7:9b:10:53:2d:c1:6e:f1:c0:08:f7:fa:
                    36:dc:1f:c9:6e:32:68:20:3b:23:36:d0:e5:ab:1b:
                    71:ec:3f:cf:39:d0:22:53:b3:f8:b9:a7:0c:2e:93:
                    a0:29:c0:c4:67:6a:55:c7:1a:82:01:26:e4:6c:ca:
                    29:ae:ac:72:40:0a:a1:6b:db:04:da:34:5e:8c:67:
                    2b:25:6b:24:5a:45:8c:bb:8f:09:b7:4f:c5:e6:30:
                    7c:a1:fd:02:0f:c7:88:17:5a:fe:2e:36:d1:8c:6a:
                    6e:fb:c5:2e:2a:c5:9c:47:a3:dc:25:57:fd:3a:85:
                    97:b0:be:88:96:2e:3b:c6:f1:37:58:94:15:e3:ab:
                    be:9d:94:75:95:f4:41:de:78:2f:1e:90:87:3b:bf:
                    15:29:59:fe:b0:81:72:e8:ab:6e:9a:3b:67:83:9d:
                    06:c2:08:61:bd:75:c6:dd:49:d0:bb:e2:9e:41:9a:
                    3d:94:48:8d:f0:db:b3:74:1d:aa:52:75:02:7f:77:
                    f7:0a:5c:c6:b1:43:4b:1c:b3:a9:6f:71:e2:a9:fe:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:62:6B:0A:9C:7A:A8:4D:FF:3B:FA:3F:A3:E7:D0:41:11:CB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/ebee498e-a59d-3902-a93e-7010a05ad4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:be:be:ec:74:fa:66:36:28:8f:88:06:51:52:c0:94:bd:2c:
         17:1a:dc:c0:ae:c0:e8:48:34:af:94:83:f1:96:28:8c:03:bd:
         e4:85:ea:e0:d7:b5:73:b7:7b:de:b3:c0:59:23:42:4a:a5:4b:
         0b:0f:4a:ad:4f:85:68:76:8e:79:4b:46:10:22:a7:9d:e3:37:
         88:cf:49:72:57:92:9e:de:bb:c5:27:5e:0a:cd:26:5b:23:76:
         e5:0e:cc:c5:7a:9c:46:1f:83:c4:05:9a:02:cb:c5:bc:41:05:
         00:2a:0a:c9:f8:d4:42:80:c4:88:74:d1:a2:b5:6a:73:b6:be:
         24:79:26:be:d7:2b:02:c5:3d:96:68:48:9b:7b:67:2e:9f:7b:
         86:89:64:4e:05:d0:ba:22:c3:45:e5:24:33:92:f3:df:97:fe:
         ff:9a:75:52:71:2e:58:3a:4e:a1:d4:f2:18:f3:2b:ee:77:72:
         d4:87:88:d5:32:00:fe:ca:49:13:24:3f:88:56:f6:f1:a2:c4:
         c2:ba:25:81:52:8a:15:c7:6b:64:5a:d0:a9:5a:96:9d:bb:a1:
         52:ef:18:b1:47:8b:12:9c:66:54:00:3f:b8:6c:36:df:d1:cd:
         22:c6:63:bc:f2:02:80:1d:23:de:90:e8:27:68:b0:d0:8c:62:
         9a:e5:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:53 2026 by rpki-client