Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
File:                     7a374813-872b-39b6-8d07-7b6319971a35.roa (raw, json)
Hash identifier:          4n9KZSdZJTg8hXNBEkI5ChJEIHlyRQLwbJoB5x3X+lQ=
Subject key identifier:   15:A2:E9:9D:51:D2:23:74:A1:7F:7F:CF:BD:6B:94:D4:D7:EE:D2:08
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584F3A17D07312C25C034D5A3500
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     396239
IP address blocks:        68.69.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d0:73:12:c2:5c:03:4d:5a:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=84dd96a9-0502-473d-8aca-49d81341f270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:3b:76:c1:67:1a:2b:e8:86:20:2e:dc:16:
                    34:a0:5c:a9:f2:73:9f:60:e1:b3:46:32:a1:60:32:
                    d8:aa:e3:f1:7b:50:bf:94:47:31:bb:b7:39:65:6d:
                    20:28:9c:ee:f7:97:c9:b5:28:a8:4d:56:90:1e:d0:
                    71:e2:a7:a8:48:dc:ec:ef:6b:9f:34:13:91:e3:f3:
                    72:8e:61:8f:26:71:cd:26:a3:9b:41:43:a8:ff:d1:
                    ae:72:d1:a9:3c:d3:57:69:b1:29:1d:5a:3f:e9:27:
                    e1:32:2a:d6:9a:78:2c:0b:86:12:bd:59:d1:97:fc:
                    12:6e:0f:5d:c7:9e:b8:ee:1a:db:14:27:49:47:4a:
                    bc:83:85:f5:c6:df:d8:29:85:65:d3:32:57:e6:9c:
                    45:d8:f9:d1:08:f0:c3:9a:49:26:7e:d5:34:09:9a:
                    d2:ca:d0:cc:f1:e1:bc:98:68:5c:49:04:09:41:0a:
                    da:3a:ad:a8:37:de:bf:46:26:42:96:ab:1e:27:0e:
                    3a:f8:84:a1:a2:46:04:41:84:b3:1e:b7:24:eb:00:
                    54:2e:ff:3a:b2:cf:37:6f:5e:7b:9b:01:52:66:ae:
                    bc:19:ca:6c:e3:08:05:45:98:05:d4:e7:f2:29:2f:
                    1c:b6:4c:d5:81:8f:ca:b5:d9:20:89:59:ad:6c:00:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A2:E9:9D:51:D2:23:74:A1:7F:7F:CF:BD:6B:94:D4:D7:EE:D2:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:bb:2d:1a:b8:85:65:d9:6b:45:26:1d:85:b2:81:20:a8:
         ec:c3:23:98:af:3f:e3:05:7b:48:ec:d0:db:bf:7b:ee:15:fb:
         ab:4a:ba:58:4a:c5:d2:7f:3c:ea:83:30:0c:6b:1a:77:42:ba:
         70:13:a5:d9:5c:3f:f0:eb:ab:65:98:b1:4e:c1:91:c0:2d:dd:
         af:5a:5a:26:ee:a8:13:69:0d:59:8f:e2:dc:05:41:42:f8:89:
         c7:11:0f:50:fd:39:4a:e7:73:25:10:a6:90:33:06:43:26:06:
         38:b2:2a:f9:44:09:ce:8c:ef:59:2e:79:be:dd:df:ea:3c:b7:
         14:91:a4:d2:52:95:7b:2a:b1:ab:8e:55:23:a8:51:78:c8:95:
         0a:83:59:5a:5c:73:dd:2e:f1:12:a3:83:9f:bd:8f:02:d5:50:
         54:da:2b:a4:0a:99:99:dc:d6:7d:f4:56:99:21:ec:ed:31:c5:
         23:dc:0e:96:59:8f:65:41:47:87:57:ba:da:07:30:8e:7a:37:
         2f:83:0b:9b:9f:77:b4:3c:a2:9e:fd:84:7b:51:b3:78:cb:0f:
         7f:45:8c:0e:63:09:21:fe:54:a2:f1:5d:2d:11:95:77:83:1d:
         eb:e5:5a:32:eb:41:af:56:b7:8a:22:03:02:e8:f8:60:79:f3:
         14:95:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:25:15 2026 by rpki-client