Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e/b4f53cad-ea04-332d-8ca3-52f6feed6f90.roa
File:                     b4f53cad-ea04-332d-8ca3-52f6feed6f90.roa (raw, json)
Hash identifier:          NkzsjTfrR5MD6TflJMgiZ+rdmRJihmTu4XDeKTk58mA=
Subject key identifier:   F5:96:46:24:8D:03:B6:8E:8E:F0:8D:C7:98:C5:0C:3D:A6:93:40:16
Certificate issuer:       /CN=695fd8d8-9a2c-4ecd-9930-0df31ef5769e
Certificate serial:       010D0C9F4328584D343A2075404437E813457980
Authority key identifier: 50:A8:52:AA:CC:EE:47:C0:2F:18:C2:60:93:56:0F:1B:FE:5E:46:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e/b4f53cad-ea04-332d-8ca3-52f6feed6f90.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     26714
IP address blocks:        68.69.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e/695fd8d8-9a2c-4ecd-9930-0df31ef5769e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e/695fd8d8-9a2c-4ecd-9930-0df31ef5769e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:20:75:40:44:37:e8:13:45:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695fd8d8-9a2c-4ecd-9930-0df31ef5769e
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=772a5678-c3ab-41eb-be47-675ea04e79d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:6c:51:07:bf:5e:4a:ad:0f:12:45:46:3b:
                    7e:4d:53:40:55:00:b4:c1:05:a9:9c:af:ca:78:5b:
                    e6:6a:05:b6:f3:72:00:23:f6:cb:9a:43:ef:a3:ec:
                    6e:6a:b0:99:3c:a6:b1:ae:7e:be:ce:72:68:5e:42:
                    35:f4:0d:90:be:15:a0:b8:1c:fe:93:aa:ff:4a:76:
                    0f:50:27:db:82:03:ba:43:95:fa:64:f8:13:55:9d:
                    f6:6e:b8:ad:e6:5e:b9:7a:d8:9b:be:88:4f:d2:cd:
                    9b:b0:38:51:c8:96:b8:d3:1e:90:6d:ce:30:4d:a9:
                    28:14:e4:63:67:7b:05:87:90:2b:73:19:ed:0a:f5:
                    77:aa:16:cb:81:6e:ba:ce:3e:3e:43:3d:e5:63:b4:
                    9a:55:04:39:a7:dd:67:6b:64:65:2e:cf:4a:d4:3d:
                    6e:56:84:88:e8:b1:55:f3:26:1f:7d:09:f5:be:d3:
                    ad:8f:3d:5f:22:08:d8:3c:b7:21:76:f1:5b:1a:54:
                    dd:77:2c:63:53:d9:39:b3:1e:d5:63:c6:f7:24:6a:
                    0a:0d:b9:ab:c8:db:34:ec:bc:b9:4a:af:7e:ec:8a:
                    a4:fc:be:5c:05:c9:29:a9:72:80:7d:a3:e0:ab:18:
                    3d:99:94:e5:8d:56:09:29:4d:93:7a:f3:11:c9:11:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:96:46:24:8D:03:B6:8E:8E:F0:8D:C7:98:C5:0C:3D:A6:93:40:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e/b4f53cad-ea04-332d-8ca3-52f6feed6f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e/695fd8d8-9a2c-4ecd-9930-0df31ef5769e.crl

            X509v3 Authority Key Identifier:
                keyid:50:A8:52:AA:CC:EE:47:C0:2F:18:C2:60:93:56:0F:1B:FE:5E:46:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/695fd8d8-9a2c-4ecd-9930-0df31ef5769e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:09:28:20:1c:ed:bb:58:1d:52:6a:fc:1f:30:f8:3b:a3:b7:
         93:19:0a:a7:35:2f:8a:e3:d5:35:32:0f:af:09:43:ae:be:2b:
         ce:ef:0d:43:95:ee:71:be:ea:9b:fd:0b:22:f8:ec:c6:1e:94:
         ca:99:4f:a0:4b:2e:29:49:a2:2c:3d:cf:d5:08:f9:fb:a5:b2:
         a9:27:88:39:3d:51:78:a0:aa:0e:ba:95:05:49:24:bb:6c:2c:
         ac:e5:d9:2b:81:c5:08:0c:cf:e8:8c:0d:25:75:9f:3c:cf:25:
         09:2a:b3:ce:8d:e1:d1:6b:45:6c:e8:b1:db:7a:0b:e2:df:7b:
         f3:70:2b:7f:cd:9d:78:b7:3e:1d:7f:a6:9f:0b:58:80:41:fa:
         49:33:7c:d9:75:e7:e3:76:f4:a9:93:73:ee:4c:cd:bb:9c:24:
         13:d8:0d:55:91:92:44:d0:ae:6a:59:c4:11:e7:e9:65:43:51:
         e7:0e:5b:94:94:2f:10:40:13:32:dc:5c:e1:06:5b:c1:34:58:
         a1:62:d7:79:d8:3d:91:a8:ce:92:64:65:d5:74:97:51:88:31:
         fc:96:8e:e4:b9:dc:18:b6:b3:6f:e8:ba:39:2e:cd:0b:fd:d2:
         f0:c1:6d:c1:5a:f1:92:78:6f:ae:af:ce:5a:81:cb:b0:7a:14:
         60:97:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:37 2026 by rpki-client