Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1315e95e-8abd-3a42-aa23-d99262f85a1b.roa
File:                     1315e95e-8abd-3a42-aa23-d99262f85a1b.roa (raw, json)
Hash identifier:          zsEqylYn2RWkGrBIuJypS548MJzQ9fqt02EV3Zqks/0=
Subject key identifier:   3D:63:CE:6B:7C:BC:DE:38:76:0C:52:B3:BA:7D:52:B0:9D:6D:51:A0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D2644C5B52426F39BC4212180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1315e95e-8abd-3a42-aa23-d99262f85a1b.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     64267
IP address blocks:        68.234.44.0/24 maxlen: 24
                          68.234.46.0/24 maxlen: 24
                          68.234.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c5:b5:24:26:f3:9b:c4:21:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=4a42fb2a-d3dd-47d7-83fb-75c0a4c7ef1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:99:d7:35:91:ea:e2:60:b9:10:f6:35:29:
                    ef:cf:8d:11:51:81:e6:20:3a:b9:d9:45:31:c5:cb:
                    83:2a:c5:89:94:55:1f:92:3d:8c:d4:4a:9b:53:10:
                    64:1f:d0:8e:1b:f1:88:43:20:6a:3a:1d:ef:54:5a:
                    5d:44:67:34:77:01:3a:11:3d:57:ea:f8:5c:e7:6d:
                    33:a1:6c:2e:ef:ec:b0:71:ba:3b:e6:c8:7d:fd:a0:
                    86:be:de:f2:73:d6:54:33:51:94:4c:0e:f1:7a:b7:
                    52:07:a2:57:b5:b5:66:5a:85:01:0c:2c:45:68:60:
                    e4:4e:5b:da:83:dc:5b:1f:d8:29:95:4d:a2:50:33:
                    53:4c:92:df:34:a6:7f:ad:f5:6a:8c:62:be:ce:90:
                    85:f2:e5:4c:d4:53:c5:2e:c2:a9:84:fc:b4:9c:f2:
                    9e:c7:56:18:85:6a:6d:13:f1:75:eb:0e:c8:6f:68:
                    7b:47:66:7c:5d:70:ac:bc:32:e9:60:11:ef:fe:c9:
                    2c:49:f5:82:de:cd:1f:eb:0f:1c:9a:2e:02:d1:a2:
                    d9:37:3a:27:c7:78:b3:9c:b3:ec:c5:37:0e:f4:b7:
                    12:78:de:7c:a6:35:8f:16:1d:1a:31:14:a9:aa:94:
                    64:7c:5f:62:5a:7d:62:1c:57:6f:92:4e:37:eb:9f:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:CE:6B:7C:BC:DE:38:76:0C:52:B3:BA:7D:52:B0:9D:6D:51:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1315e95e-8abd-3a42-aa23-d99262f85a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.44.0/24
                  68.234.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1e:e8:e2:17:38:9c:29:56:62:ff:33:f0:63:62:f7:ac:9c:
         d5:ae:57:b3:6b:60:06:aa:f4:30:d0:d9:be:2f:7f:b7:51:1b:
         b3:1b:32:dd:7a:8b:c8:fa:03:0f:b3:09:b9:d5:42:c4:84:dd:
         bd:d7:b4:c3:a2:7f:04:f1:9d:15:a3:5d:a5:78:fa:91:2d:8d:
         7a:dc:9f:b9:7e:45:b2:39:0d:f1:e2:2a:96:4b:39:11:dd:b9:
         47:0e:80:c4:d6:b0:6a:aa:2e:de:55:b4:15:50:75:95:2d:ae:
         b0:97:04:2d:72:33:16:87:b5:3a:08:6b:aa:f7:e4:77:11:e8:
         38:f1:b2:6e:9a:26:f0:3f:21:6c:6b:da:52:8b:0c:34:29:25:
         9a:41:c1:e5:66:25:86:5a:c7:9e:90:a3:ca:aa:71:99:51:a8:
         4d:20:32:77:a5:ff:a8:2c:c3:b3:58:2a:bf:af:07:81:12:cc:
         d9:54:50:f2:0a:db:ee:2d:9c:52:7a:a2:ee:d4:0b:7f:88:5b:
         6c:67:9a:16:60:e5:f4:d3:24:5a:f6:d8:e4:a5:97:e0:80:76:
         e4:07:96:6f:23:ad:d0:92:ee:7e:d3:79:f2:40:fe:0b:f1:af:
         a8:00:d9:05:ac:bb:a6:7a:6f:7e:ae:fd:e1:8e:42:29:aa:0b:
         ac:6b:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:50 2026 by rpki-client