Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
File:                     68a0299b-9da0-3984-8e69-8112484fd69e.roa (raw, json)
Hash identifier:          NyHftITYPFDThfLKspID4XClFubImLT05U3hZB7FDP4=
Subject key identifier:   97:CE:FA:94:2E:B5:4D:41:AE:B8:01:74:88:2D:8C:53:8C:08:3B:7E
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584E736A207C28A48AAD448B7300
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        192.80.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:20:7c:28:a4:8a:ad:44:8b:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=41adc4ba-c423-4b2e-976d-1293414c235c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:da:44:0d:1c:5e:80:90:ce:96:15:51:f4:
                    9a:56:67:7f:d2:08:ae:28:54:e7:34:4c:1c:28:35:
                    97:59:86:eb:9c:2d:1c:cf:11:90:20:33:95:6a:c6:
                    86:5f:d2:e1:31:7f:8b:7e:62:06:8f:55:3f:a8:76:
                    bf:38:84:d9:e0:59:34:89:7b:83:c7:e8:11:c4:2f:
                    0a:98:dd:9d:1f:99:27:23:5b:79:b6:eb:ab:ec:b0:
                    08:aa:8d:35:f8:11:09:6f:3d:8d:21:c0:a4:0a:ca:
                    ef:88:fe:63:17:d6:f1:6f:03:8c:6b:a5:b2:98:0a:
                    a2:9a:7e:7d:f8:4a:60:a6:17:dd:8b:20:40:e9:50:
                    64:41:ae:7f:01:88:21:9d:11:7d:47:1d:5c:6e:15:
                    a4:f0:d5:51:64:5d:bf:41:87:65:c5:52:78:34:5a:
                    a8:87:48:7a:8e:f1:db:01:82:69:35:d7:0f:63:aa:
                    5f:16:9d:8e:fd:e9:70:92:d4:e9:a4:78:c4:0d:b3:
                    54:62:96:39:7f:ed:88:d3:60:ae:19:30:17:d2:42:
                    d9:dd:42:dc:2a:66:3f:96:b6:57:03:5e:df:6b:0e:
                    cf:e3:a8:b1:34:0d:51:08:5a:4a:61:31:cd:4d:4e:
                    14:e7:8d:6e:84:2a:c5:a1:81:cf:d8:17:9f:d7:d3:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:FA:94:2E:B5:4D:41:AE:B8:01:74:88:2D:8C:53:8C:08:3B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/68a0299b-9da0-3984-8e69-8112484fd69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:30:3a:78:b3:3b:79:fe:89:a3:d4:ce:a9:b1:2c:28:38:
         e1:39:cb:de:c9:fc:83:9a:7d:01:eb:9b:74:c2:fb:19:56:d3:
         bc:17:07:46:1f:60:7e:e8:96:96:e6:1f:11:34:1f:0b:2b:eb:
         3f:65:02:2a:39:26:5b:f0:45:85:fd:ca:39:b1:3d:92:24:20:
         3b:03:ac:c4:c5:b1:d0:92:c6:d2:49:9d:48:bf:fa:ac:03:e6:
         9a:40:8c:3e:c5:2e:23:3d:11:9c:cd:e8:43:f9:6b:bb:f5:28:
         c1:87:b1:ac:39:d5:53:3b:95:38:ff:9d:19:5c:6e:10:7f:59:
         2d:9d:2b:63:fa:ab:66:a9:98:2e:b5:77:ec:c9:a9:24:ac:e8:
         a9:ad:f8:83:3b:95:3e:2f:69:21:6e:60:75:f5:17:39:35:39:
         58:62:f1:4f:82:51:9c:c8:37:b3:4a:8b:cc:73:41:ad:8e:05:
         6e:83:db:89:b1:3e:36:d6:7d:49:61:fd:f2:04:b8:bd:a3:0b:
         e3:9c:36:87:88:d5:28:f4:28:df:8b:10:d7:fa:d2:20:e2:d2:
         6e:1d:06:00:38:30:4e:8f:b8:fe:6e:6b:e8:72:a5:a1:2c:cc:
         8a:4d:99:4e:86:11:db:f5:b8:d7:ba:b0:5d:48:03:72:02:6f:
         dc:2b:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:53 2026 by rpki-client