Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d/f169f722-448d-3bd5-b6be-bde2ba5ed455.roa
File:                     f169f722-448d-3bd5-b6be-bde2ba5ed455.roa (raw, json)
Hash identifier:          Ud8oiij5/hvv1sOxQ/bTjIEdbVqIuV0FE9DETA09Py0=
Subject key identifier:   5F:C7:5E:48:C1:88:D2:5F:EB:DB:96:19:37:6F:04:32:CD:04:ED:25
Certificate issuer:       /CN=68a8c279-43b5-401f-9c22-6ea3f312026d
Certificate serial:       010D0C9F4328584F23C2897DD46C8733A771C9C0
Authority key identifier: B4:6C:3E:60:58:6A:07:F0:48:BD:31:A5:5C:40:85:A2:7F:A9:CE:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d/f169f722-448d-3bd5-b6be-bde2ba5ed455.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     26932
IP address blocks:        23.133.220.0/24 maxlen: 24
                          104.251.32.0/20 maxlen: 20
                          199.83.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d/68a8c279-43b5-401f-9c22-6ea3f312026d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d/68a8c279-43b5-401f-9c22-6ea3f312026d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:89:7d:d4:6c:87:33:a7:71:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a8c279-43b5-401f-9c22-6ea3f312026d
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=8fd004e4-899e-4176-bb9e-0b939db4bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:59:d9:9e:0e:89:d3:55:a1:63:a8:f6:35:
                    07:cf:ab:76:af:0d:55:80:e7:23:7e:bb:7a:a2:7c:
                    17:d2:d8:72:0e:32:ab:66:cb:e9:8e:32:4c:41:1b:
                    d8:6a:8f:83:ea:24:3d:9d:c7:77:28:4d:e6:c1:b9:
                    4c:b6:72:9d:10:c0:3e:a7:bc:a2:ce:5f:d8:fa:9d:
                    33:e7:86:0e:0b:08:b6:56:1a:1b:8c:32:7d:18:34:
                    a2:e5:5c:fb:c0:b8:43:09:e0:ac:3e:89:6d:8a:c1:
                    0f:27:86:48:ef:fc:81:9b:79:5a:0d:06:8a:9c:0b:
                    cc:dc:de:de:55:25:fa:e4:d8:ee:d8:b7:3b:cd:bd:
                    49:3e:56:6f:4d:4f:2a:ce:f8:3e:8b:2d:07:3a:8c:
                    8f:f9:93:ca:6f:cb:4e:bc:58:db:16:7c:42:9e:57:
                    b7:d1:ab:30:d6:59:a0:f1:c2:05:0d:6f:90:0c:6b:
                    42:40:e2:05:5a:ab:5d:9b:8a:23:8b:0f:95:04:06:
                    98:f2:28:93:94:e8:a0:25:1a:97:2f:fa:68:6e:c1:
                    a0:c6:98:f1:b4:64:b7:98:31:c5:56:40:0c:ef:2d:
                    99:3d:a0:f4:df:89:10:a2:26:0a:d0:70:da:11:2d:
                    aa:7e:f3:d6:d1:86:93:71:43:46:8f:45:09:23:e7:
                    9e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:5E:48:C1:88:D2:5F:EB:DB:96:19:37:6F:04:32:CD:04:ED:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d/f169f722-448d-3bd5-b6be-bde2ba5ed455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d/68a8c279-43b5-401f-9c22-6ea3f312026d.crl

            X509v3 Authority Key Identifier:
                keyid:B4:6C:3E:60:58:6A:07:F0:48:BD:31:A5:5C:40:85:A2:7F:A9:CE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/68a8c279-43b5-401f-9c22-6ea3f312026d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.220.0/24
                  104.251.32.0/20
                  199.83.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:c4:26:95:8b:6e:43:0f:56:9f:e5:23:44:d0:16:9f:da:
         9a:25:56:ee:5c:e7:a9:5e:1f:ad:7c:1d:e0:44:11:2f:a8:82:
         31:a3:56:af:67:b3:88:f0:67:b3:a4:46:2d:a2:55:4c:76:3b:
         7f:14:d2:5e:d6:29:be:7e:9d:12:35:54:94:9a:f9:29:08:99:
         02:5b:74:5d:d4:df:a9:fe:8f:29:b8:6c:32:d8:9d:3e:4e:f9:
         44:a3:71:42:28:9d:5b:2f:6f:21:b3:af:69:18:74:8b:ee:5f:
         fb:85:91:aa:d2:1d:94:35:c8:02:a0:09:df:45:29:c0:18:aa:
         f6:c2:62:2c:cc:52:6e:f5:8d:06:07:85:62:97:92:6f:a4:a8:
         54:3c:28:c5:71:55:cf:13:e2:bf:c5:11:5f:d6:6c:ae:41:7a:
         59:6b:57:01:9c:b8:11:dc:9e:f9:7b:5d:60:ef:cb:ea:9c:93:
         a4:d8:79:3c:8b:be:6a:d2:f7:bf:87:f8:b4:fc:e4:c9:22:8d:
         c3:c4:1a:3b:e0:5d:40:fa:c7:4f:26:33:bb:22:02:76:ee:8c:
         92:a9:c7:7a:f1:a6:82:0c:92:60:ec:fa:70:83:bb:4d:6e:76:
         7c:7b:67:55:64:13:12:b0:92:29:a0:e1:72:e9:b0:df:5e:ed:
         e8:57:c4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:21:29 2026 by rpki-client