Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa
File:                     c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa (raw, json)
Hash identifier:          ylW4Mg+tdjGzhnDZ9L6VfYNlMbXRjDwvKbIHHhpeE98=
Subject key identifier:   69:71:7A:93:5F:59:45:02:2B:67:7F:4C:1A:2C:D5:0D:CC:BE:8F:F6
Certificate issuer:       /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial:       010D0C9F4328584E6F3A3582A3399A156FB72380
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        68.71.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:35:82:a3:39:9a:15:6f:b7:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ccbad92c-baca-4a7b-b145-961f20d09848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:81:1b:51:fb:76:fd:23:f8:1d:86:7e:11:
                    fa:2e:9d:30:3a:77:ac:b1:3c:dd:12:5d:00:4b:77:
                    41:60:e4:1d:08:a0:6f:17:cc:ce:34:5e:7b:6a:f7:
                    3f:9f:3b:b0:3f:7a:d6:02:c7:84:d4:24:9b:53:cf:
                    8c:fa:8d:6a:bd:a5:50:37:22:83:c5:c4:58:88:c9:
                    0d:4b:05:56:33:1e:d4:8d:0e:ce:8f:86:30:64:59:
                    e2:05:b7:dc:a0:4b:6d:bb:6b:76:ec:09:e3:b4:a7:
                    33:d4:d3:ec:16:6a:0a:29:69:e3:5f:45:48:5e:ae:
                    7a:80:bc:3a:8b:be:de:af:fe:b2:67:eb:fd:82:69:
                    8e:c2:ef:52:bb:83:2c:7b:65:f3:c6:f9:c9:05:b2:
                    6b:60:47:a7:63:47:9e:ef:f6:45:14:9e:8d:6a:be:
                    90:db:fb:fd:ce:92:da:a3:e6:74:02:60:d3:26:00:
                    7c:db:ba:45:66:7c:a1:1a:64:66:08:e5:1d:c7:73:
                    dc:23:89:ef:f1:7e:55:c9:22:c6:9b:98:38:d1:44:
                    57:77:ec:c6:40:f3:90:69:0a:79:80:29:75:2e:03:
                    82:da:8b:c2:74:98:a5:a5:35:1c:48:ee:0b:ef:f2:
                    84:4c:af:80:b4:50:ff:24:d5:ce:80:3c:06:5f:c8:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:71:7A:93:5F:59:45:02:2B:67:7F:4C:1A:2C:D5:0D:CC:BE:8F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/c5e0951c-af06-32fd-9c41-e2d6f317bd78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl

            X509v3 Authority Key Identifier:
                keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.71.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:18:9d:13:8a:94:39:90:1b:d3:de:90:0a:10:26:3d:85:e0:
         30:c1:3c:47:7b:d0:9e:28:d9:07:cc:ed:94:5b:d5:67:19:8b:
         f6:d4:68:e3:c2:6e:7c:71:3b:0e:a4:01:ca:6b:48:c4:a0:eb:
         16:8d:0a:ec:f9:9a:1b:63:96:af:6b:40:4f:73:fc:cf:30:f4:
         f8:b5:db:72:28:d7:49:1f:4c:90:d0:1b:cc:0c:d6:3d:92:9b:
         8d:11:44:9c:fa:94:12:43:f0:16:1e:c5:45:ca:68:bf:c5:67:
         e9:02:90:3b:07:34:0c:0b:a0:a4:63:2b:c5:7d:06:bd:14:62:
         0f:8c:dd:84:83:f1:60:2b:5a:15:ce:17:73:6c:83:a6:64:b7:
         83:5d:17:0b:b7:f2:8b:d2:1a:2f:61:2a:ab:13:a2:3c:c1:e7:
         a8:ae:aa:92:e4:29:5a:f1:2d:2e:46:91:51:db:f8:d4:0d:37:
         b9:15:04:e1:b6:a3:99:d0:d0:0c:09:22:9f:02:6d:0f:c6:17:
         6c:f9:d6:10:bc:b3:14:54:10:f9:1d:c6:91:53:fa:c2:65:22:
         1e:4f:f6:14:cc:81:ee:53:c2:7a:4d:63:dc:dc:85:d2:da:6a:
         25:17:90:e4:b9:bd:7a:45:55:c6:d8:59:49:93:8d:a8:f5:0a:
         5e:c4:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:50 2026 by rpki-client