Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
File:                     2068d72c-6558-301e-83be-f2515979c63c.roa (raw, json)
Hash identifier:          wU5/K3JZKByhgcVrB1LpfJqHCtF2jl5eJ0OCFOYLc9E=
Subject key identifier:   1F:21:09:03:E7:1F:22:AE:AA:C6:FD:29:62:D6:87:5F:8C:45:2C:EA
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584E4AEF502C35EDCFEB5E3CF600
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        199.167.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:50:2c:35:ed:cf:eb:5e:3c:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=6a8db08c-87f6-4a7f-b798-3d9c459566d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:aa:9a:71:c9:fb:ae:56:5c:36:c5:01:ff:
                    08:f2:9e:c1:cc:c0:90:a2:3a:2c:a9:63:4a:30:e1:
                    3c:b1:93:c7:d1:e2:57:e1:ec:f0:d9:b0:16:1b:42:
                    7f:44:a0:22:0b:da:42:f5:e5:e4:bd:71:69:b2:bf:
                    b3:f0:a9:56:e0:30:45:73:dc:2a:65:53:da:f4:fd:
                    a3:9e:0f:6a:eb:a0:45:27:61:ad:11:79:47:4e:e5:
                    08:b6:e9:06:46:20:5d:87:a0:d8:5d:3a:8d:a8:29:
                    80:bb:1d:f2:f3:ce:11:99:6d:ac:58:36:7a:f2:9a:
                    15:c1:97:15:4a:3c:b9:d1:dc:52:f3:8a:aa:7f:55:
                    a0:e9:1b:d0:8e:50:95:82:73:9e:1e:e9:be:d7:0f:
                    3b:95:5d:df:91:d1:04:3a:f4:b7:a3:d4:86:17:db:
                    da:1d:e0:6a:f5:d0:43:6d:ab:7c:5d:ac:2f:b4:95:
                    7e:0c:61:b1:19:2b:e2:86:49:63:b2:32:48:20:1b:
                    26:90:8f:03:04:35:ef:8b:d6:a2:61:b9:10:87:d4:
                    00:f4:5d:6d:7b:83:76:c5:6f:4e:e9:3d:1c:f3:1f:
                    03:b5:d3:b4:b4:5f:0e:13:4e:aa:1d:4c:11:23:dd:
                    9c:04:cb:d7:6a:30:f0:b6:a4:4f:9d:32:2e:65:55:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:21:09:03:E7:1F:22:AE:AA:C6:FD:29:62:D6:87:5F:8C:45:2C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b5:73:cd:c2:97:e9:f2:6b:e1:3f:15:25:93:a7:4a:67:34:
         41:ea:1b:9b:bf:a4:54:07:b1:29:2a:1b:a3:b9:1f:58:e3:55:
         75:da:23:a3:00:5d:9e:ba:e2:dd:e4:c2:91:56:32:21:04:cc:
         01:9b:e5:5a:64:2c:64:e8:f4:97:07:e6:28:35:db:5a:35:6d:
         0d:ed:63:8e:fa:02:8b:12:5c:b2:10:19:1d:54:14:49:01:14:
         4f:53:a0:46:ee:35:6d:ff:d9:35:04:2d:16:ce:67:cb:d0:a0:
         e8:f3:24:db:3f:0f:78:2a:79:39:f4:51:18:5a:2d:11:28:b5:
         ac:b2:61:9b:dd:33:d4:11:dd:f1:fa:55:3d:e7:c2:83:b7:ad:
         63:c5:64:af:07:5b:31:68:21:39:8b:0d:5c:d0:59:57:bb:6f:
         c2:78:ca:c9:da:45:d3:b8:f7:19:dd:f4:0a:9b:f4:37:f1:87:
         7c:29:67:0e:b1:b1:82:89:76:ec:a1:2b:92:f1:6f:75:29:6f:
         74:0b:d4:c5:7f:19:bd:25:f7:55:91:77:e2:03:cd:8b:b9:e4:
         e6:0c:f3:14:f4:96:dc:4c:2e:59:ce:29:12:db:45:e0:96:cd:
         ad:2e:63:a0:f7:35:38:c7:ce:cb:f1:16:af:a3:2e:5f:ca:60:
         56:ad:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:48 2026 by rpki-client