Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
File:                     7a374813-872b-39b6-8d07-7b6319971a35.roa (raw, json)
Hash identifier:          DADr0CiOLbLvQ/HNOEoGJQJE6jG2O6HiFHyiANfJZ2c=
Subject key identifier:   05:89:62:70:D5:2A:E9:C6:55:D3:F2:21:4F:A0:90:23:14:B3:2E:20
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584DB7702FB8B07000DE80EE1300
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     396239
IP address blocks:        68.69.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:2f:b8:b0:70:00:de:80:ee:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=9097a1b3-e7cf-4098-8e89-abd27299fa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:a4:25:30:54:52:cf:7a:70:9d:e2:b7:c5:
                    19:d1:22:ee:7b:ca:b1:02:ec:23:e4:aa:7f:27:7d:
                    3f:b3:71:7c:dd:45:25:ef:e9:38:6b:86:97:43:1f:
                    ea:0d:5f:e1:2a:a3:be:59:10:2a:dc:9c:64:8f:6b:
                    a0:27:ef:64:df:bf:c5:1b:d6:40:62:e7:7a:22:e7:
                    22:ff:9c:56:84:67:68:e6:35:76:d3:c4:24:3f:5f:
                    0b:5c:db:6a:48:08:de:58:f0:37:a6:05:e0:d2:f9:
                    23:43:00:d9:8e:fb:cd:27:fa:27:f8:31:49:c5:49:
                    29:ba:dc:09:3c:e5:dc:28:38:bb:5a:26:8e:61:1f:
                    e9:54:2e:42:9f:fb:4d:69:9e:b1:1c:ee:43:6b:bf:
                    65:7a:c1:b2:c0:88:9b:de:3e:b2:98:08:8a:bc:4f:
                    fb:fa:37:5d:50:de:12:49:94:14:9a:3b:9d:66:92:
                    bd:61:00:8e:48:99:f3:4e:fb:0f:3c:22:bf:30:99:
                    3f:83:ec:e8:61:48:0a:75:78:01:e9:3e:eb:44:84:
                    16:c0:87:c3:4e:46:49:ad:6c:6e:08:06:5a:42:95:
                    69:aa:dd:39:c4:ca:47:e9:ee:11:21:ae:68:0d:e5:
                    21:9d:c8:fb:0b:90:4e:a8:e3:2b:ef:cb:61:82:9c:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:89:62:70:D5:2A:E9:C6:55:D3:F2:21:4F:A0:90:23:14:B3:2E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:28:3e:b2:82:44:14:8f:f6:21:c7:35:84:be:bc:b4:fc:a9:
         61:56:84:b4:77:88:d6:dc:b2:6f:e1:57:f9:88:64:0d:4a:40:
         25:db:be:b4:c5:a3:a4:49:6b:4f:c3:55:cc:a5:06:b6:81:0a:
         a2:b8:26:1b:f8:d4:5a:97:19:05:b3:6a:d4:7c:48:d3:b0:01:
         bf:2a:f2:b3:98:cf:6b:a0:02:7d:b9:be:48:57:73:fd:2d:56:
         86:70:09:eb:f1:1a:e9:1c:b0:0f:f5:93:43:68:5b:aa:a6:44:
         35:95:85:42:ae:5b:83:38:87:1d:2a:f0:05:6d:37:2f:e7:3c:
         66:57:a2:2c:52:87:46:41:ee:20:1b:7d:bc:58:a1:c1:f7:ad:
         3a:17:6e:d1:4b:8d:8b:b3:ae:d6:fb:26:52:e4:9e:77:f3:32:
         29:19:df:8d:7c:97:f5:56:b7:41:34:70:b7:fe:f8:8b:04:25:
         a0:27:b2:dd:c1:78:68:53:89:ea:69:6f:16:8a:e5:50:e5:97:
         21:f5:7b:8e:05:83:e3:e7:dd:f0:d5:a2:da:d9:12:ef:99:8c:
         cf:94:ea:24:3a:27:9c:66:ae:db:94:1d:9a:9c:6e:11:b3:9d:
         3b:90:e4:ab:ca:5f:42:62:1f:05:e1:fa:91:12:48:1e:c6:a9:
         18:1a:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:55 2026 by rpki-client