Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/93c328c1-228b-3a0a-b182-91c8ae326f50.roa
File:                     93c328c1-228b-3a0a-b182-91c8ae326f50.roa (raw, json)
Hash identifier:          1f5X+laX+gVHqwb5xn4BHeyniHg14MzCe36tfODBYGM=
Subject key identifier:   45:41:AE:BF:79:A3:90:E5:2E:C9:C9:AC:9D:72:38:30:B7:BC:08:2D
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F4328584E6B0A1DAD323ECCDF187EC880
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/93c328c1-228b-3a0a-b182-91c8ae326f50.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     10507
IP address blocks:        68.24.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1d:ad:32:3e:cc:df:18:7e:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=873336af-d40d-4caf-a8fc-c347470bbd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:85:50:0d:e8:92:fe:27:ad:03:e3:10:25:66:
                    85:ea:1f:29:9d:fe:f3:73:f0:92:fe:04:09:d2:bc:
                    2f:d7:3b:e2:a0:04:74:17:17:27:b6:02:a5:32:6f:
                    08:56:74:84:66:df:6f:1e:d3:4e:22:f4:b7:3a:78:
                    85:f7:98:64:ad:1f:98:75:f5:b0:43:2a:56:a4:b2:
                    2f:82:77:8e:59:93:27:7e:63:99:cb:a3:2e:cf:bb:
                    be:66:ef:2c:ed:5d:db:ad:f7:54:c4:ee:13:df:ae:
                    62:d7:f8:ba:28:35:a5:04:ea:bd:6e:26:23:a1:5a:
                    ef:73:bf:9a:56:df:fd:a8:82:59:6a:bb:2b:bc:3b:
                    87:2f:e3:70:86:c7:55:ef:7f:40:7d:ed:d6:fb:ab:
                    33:92:91:fe:20:ab:40:40:c1:21:08:df:7b:93:67:
                    1b:19:e7:03:a5:e7:22:a4:1e:8b:8b:1e:9a:fa:5c:
                    1d:b0:cd:90:2d:f7:bd:9b:d7:5d:07:da:c7:42:9d:
                    97:c2:7e:9a:51:27:37:c6:a0:bc:91:75:42:3c:26:
                    83:6a:df:ea:d8:dc:c3:d2:2b:70:5e:78:47:1b:0c:
                    22:7a:57:a7:ff:53:75:60:02:f3:98:5a:e0:03:bd:
                    fb:7a:4e:4c:95:a2:13:ad:01:e3:25:d7:b6:fb:86:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:AE:BF:79:A3:90:E5:2E:C9:C9:AC:9D:72:38:30:B7:BC:08:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/93c328c1-228b-3a0a-b182-91c8ae326f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.24.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:2e:89:e6:03:f5:70:ed:4f:84:50:fe:b2:fa:94:2b:86:
         32:fe:48:3e:e0:a1:4d:1c:f8:51:fa:34:6a:74:eb:21:51:8a:
         27:86:3e:b2:00:07:d4:59:fa:66:16:32:e9:93:c7:43:5b:8d:
         98:29:02:80:9a:e8:66:4f:47:e2:e2:44:81:4e:78:39:5f:fa:
         a2:b8:ae:7a:34:1e:3d:39:73:cd:fd:8f:d8:8a:9a:24:52:9c:
         97:ae:8c:56:25:bf:68:29:38:76:44:a7:54:e4:08:3c:ea:33:
         44:0d:cd:ed:74:64:39:90:04:b8:d1:d9:65:ef:32:c1:68:cf:
         b1:fe:e2:aa:1a:4e:e0:e7:a2:1f:94:49:4d:18:82:9c:ed:1c:
         54:5c:83:00:6a:f9:e7:a6:73:e6:11:2e:97:11:e5:05:37:d5:
         ec:c6:c6:cc:4e:95:10:d4:33:3c:ce:cc:64:16:e2:78:3f:5e:
         41:33:40:95:df:91:03:64:7e:f4:40:27:79:eb:0c:fb:8d:81:
         4e:93:4d:a3:2c:5d:0c:31:ef:dd:8f:73:8d:2e:e0:03:76:5f:
         93:ba:6f:76:9b:6a:1a:a4:a9:91:c9:aa:60:db:46:d8:e3:fa:
         77:09:1b:b2:49:67:1c:e5:cf:84:70:09:a0:96:db:27:b8:ab:
         da:6a:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:35 2026 by rpki-client