Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File:                     2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier:          mcB93jLxAsvyoPC6+CInH5OqPT9nhK7pjMB/yQy3DMg=
Subject key identifier:   B0:38:83:35:C5:A1:3E:07:23:D8:81:6D:EC:12:67:FD:84:5D:AE:C0
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584DB7702FABA24D7422FE729EC0
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     396239
IP address blocks:        68.69.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2f:ab:a2:4d:74:22:fe:72:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=90fa5704-84f3-4b72-b443-031cb4591bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:34:e7:b9:27:14:90:32:94:12:74:95:e0:
                    14:e5:16:59:f7:72:39:4d:c2:39:d1:f3:d2:b4:13:
                    3d:a3:c3:7a:9b:65:db:b3:92:56:61:1f:b5:8c:ed:
                    15:ed:d1:72:26:93:dc:9a:71:7a:e2:9a:65:fd:4e:
                    c6:94:ba:59:49:57:9b:0d:f1:e5:57:d5:ce:76:0b:
                    37:9c:79:8e:86:40:bf:cf:e9:0c:4b:e8:e5:7b:43:
                    2b:b1:24:75:59:53:e0:44:fa:b0:68:a4:07:29:24:
                    cd:bb:37:5b:9f:5a:29:3c:8e:0b:02:11:71:18:c4:
                    9c:64:d0:40:12:74:b5:07:74:88:ed:4f:3d:bc:d6:
                    3c:f6:ae:7f:1c:66:a9:b1:6e:be:02:35:ab:db:63:
                    cd:6e:98:86:01:62:39:4a:e5:ac:ab:1f:c2:db:78:
                    97:d3:45:f2:5e:68:47:bc:b9:a7:29:4c:1b:b3:26:
                    77:1b:dd:53:6f:92:f0:0a:dc:ba:d2:48:25:fc:e9:
                    0b:4e:99:d3:83:b5:9d:3e:28:2a:c3:5f:24:95:7a:
                    50:b5:ad:7d:54:40:dc:2b:d4:9a:d4:db:ef:9f:36:
                    0e:42:e7:02:ac:cc:e2:6f:f2:10:33:b7:9d:06:0c:
                    e1:b6:51:98:6f:e9:90:2f:4d:d2:ea:e6:dc:ed:0b:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:83:35:C5:A1:3E:07:23:D8:81:6D:EC:12:67:FD:84:5D:AE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:be:d3:2e:1a:1d:96:c9:f9:49:4d:78:a1:b0:16:ee:68:1d:
         ee:b4:29:37:3e:bd:78:76:e5:93:06:ec:62:37:1f:60:f6:eb:
         f1:70:a2:a8:be:0e:f3:66:44:54:bb:0b:f3:1d:63:eb:29:84:
         96:53:0c:85:3d:93:3d:d0:77:3c:43:2c:36:a3:69:44:a4:7a:
         63:64:36:54:e9:a3:d3:d7:85:2b:20:f7:ea:76:73:6a:69:34:
         52:e7:aa:f2:a6:c4:ea:23:b4:87:90:b5:24:e4:69:39:bd:b7:
         ee:92:0e:70:5e:9f:fc:63:02:c3:c1:d2:c6:5e:19:b1:7e:04:
         b2:9e:eb:99:c7:e0:c4:7e:a2:30:22:ce:44:0a:7d:17:87:66:
         9c:c2:b1:62:02:ec:70:78:62:e8:d5:a5:2d:60:e7:ca:29:16:
         39:9e:29:51:90:83:3a:57:cf:44:34:ee:98:5e:c1:04:3b:5b:
         bf:b4:77:8a:8b:f2:ae:3f:3a:80:f0:72:eb:4a:e0:9f:5c:59:
         c7:55:2d:e5:45:d5:6d:ed:80:26:e4:31:5f:b4:ab:ac:b2:1c:
         04:bd:cd:a2:5b:11:80:cc:c6:b7:a3:d5:b7:bd:d4:9c:73:d7:
         bd:51:c3:e9:30:9f:00:46:50:61:6b:89:59:7a:3f:83:9e:3c:
         bd:81:d2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:31 2026 by rpki-client