Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa
File:                     8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa (raw, json)
Hash identifier:          y0YX77kb2tCX59Z8omWMqvP12ahGVeS8mo94ExM/ofc=
Subject key identifier:   34:44:1E:1B:56:D8:DC:9F:43:F4:62:66:A0:D2:62:5E:0E:80:56:3E
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584D8EF55E6AFF89D6D86BE0FE40
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     45396
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5e:6a:ff:89:d6:d8:6b:e0:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=fa8490e4-c752-4cbf-a14d-b43fcc65bf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:6a:27:a0:42:75:31:b0:73:a7:41:51:7d:
                    0e:aa:d7:4d:04:66:70:45:7c:35:e4:ea:0d:d5:b2:
                    96:6b:21:11:d9:d3:27:e2:57:23:2b:37:2b:3d:08:
                    45:22:4e:d5:42:49:24:f0:31:ae:08:ad:bb:07:6c:
                    94:46:51:44:1e:ee:22:35:a9:d2:d6:c9:30:af:d5:
                    cd:9e:b3:e6:b1:ae:b2:5b:ff:8e:28:9c:54:85:58:
                    50:cf:8d:78:91:e4:ea:c7:9d:58:6d:36:22:73:ef:
                    e0:8c:8a:b6:d3:3f:f7:50:8d:45:e4:69:5f:46:99:
                    12:7c:9c:f9:07:d3:fd:7c:0a:7e:da:9c:de:5a:58:
                    ae:8c:d9:e7:8c:ad:4f:07:cf:16:fc:df:39:04:67:
                    7d:9c:e5:a9:60:cc:8b:fd:26:fa:be:1d:80:f2:10:
                    9d:10:f4:17:51:27:a4:c5:3d:7f:bc:4e:32:88:0c:
                    00:3c:97:c3:6d:df:6d:ad:5f:85:94:4b:eb:e0:9e:
                    92:a2:62:b3:95:19:92:e0:9d:07:58:c0:7a:c8:6d:
                    ac:e8:25:b5:80:43:61:5d:ce:c0:b0:fd:89:bf:12:
                    02:39:42:52:50:bb:b8:dc:7c:53:50:cb:61:3b:35:
                    86:5f:8d:66:2b:2c:d5:ad:a9:b5:ee:13:cc:ba:ee:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:1E:1B:56:D8:DC:9F:43:F4:62:66:A0:D2:62:5E:0E:80:56:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8c2d287f-28b7-3e8b-b418-941a6fbacd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:f8:24:69:e0:c8:89:ff:1f:12:48:02:f9:6e:b0:ff:75:
         b7:dd:db:00:8d:d8:8c:b8:7c:88:f1:f4:99:02:19:a1:85:4f:
         73:2f:74:95:da:02:7c:99:8c:15:bf:e1:58:48:d4:8d:e7:8b:
         f8:e7:3b:19:d1:b1:16:4e:29:5d:d7:78:8f:ae:bf:7e:bf:4b:
         fa:25:d8:30:55:c4:50:e9:fd:cf:ad:4b:d4:e1:f6:e7:30:2d:
         3c:2b:5b:dd:5a:bd:57:39:0a:6f:2b:7a:85:ff:cb:e1:ec:d7:
         ba:be:8e:b5:be:34:c1:74:4c:6b:ef:52:a6:94:00:15:27:ce:
         c2:dd:99:01:25:e9:34:08:c9:dc:ef:2c:78:1a:4a:74:3b:cc:
         18:af:7d:ba:d4:91:87:61:23:4a:f2:ec:3f:64:11:40:2d:3f:
         60:17:38:91:14:2f:20:bb:e9:4f:f9:3f:8b:ce:19:ea:02:a1:
         5d:a2:82:9c:bb:19:b6:22:43:4d:63:cd:7e:a7:49:09:01:65:
         09:1b:2b:60:eb:28:01:65:80:79:f5:23:cb:0a:0b:8a:d5:c4:
         05:e5:0d:4b:41:67:9a:54:21:b9:dc:a5:2c:d8:46:4e:db:df:
         1b:0c:6b:8e:94:c7:e8:1b:5d:9b:8a:2b:5d:66:88:ef:bd:3f:
         d7:79:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:01 2026 by rpki-client