Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa
File:                     bf32697c-c553-3695-ab9d-96e167fbb51e.roa (raw, json)
Hash identifier:          UNtMnhSYE9MzmF35TEPhbepeVG/AMXY8mSO6yG5Vcgc=
Subject key identifier:   EF:0D:19:CB:06:BA:49:3C:C1:0F:DD:78:65:2B:C3:15:AC:E6:FE:69
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E8C8A61241059046189D38C80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     6079
IP address blocks:        68.182.68.0/22 maxlen: 24
                          68.182.72.0/21 maxlen: 24
                          68.182.80.0/20 maxlen: 24
                          68.182.96.0/20 maxlen: 24
                          68.182.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:61:24:10:59:04:61:89:d3:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=cce02e3b-e19a-440f-a7b8-92eb6bc81d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:59:f7:2c:0f:a5:90:15:e3:5c:f2:c1:1f:eb:
                    aa:30:77:0e:d8:f9:fe:3f:91:c2:39:80:d5:cc:55:
                    2a:10:e8:73:c5:c9:72:09:f6:60:27:9b:71:44:f0:
                    50:11:63:4f:3a:27:83:f0:d5:68:f3:48:e0:a5:62:
                    b5:34:53:4e:e7:cc:85:c0:ef:db:f7:51:ee:22:ea:
                    b0:38:4a:56:7b:aa:d5:a1:ce:03:be:0a:e2:11:5a:
                    28:26:16:48:07:cf:1b:ec:5d:55:e9:fb:de:c7:5b:
                    f1:06:01:05:36:0e:a6:d5:89:0b:10:16:5c:cc:c7:
                    81:0f:48:cc:77:85:b9:35:d4:fe:06:fe:99:c6:e2:
                    e8:e7:83:9c:8d:8c:45:bc:cc:f0:1e:d2:86:5a:7b:
                    34:ca:15:2c:54:30:eb:9a:e2:a3:31:a9:d6:07:59:
                    9e:55:e8:f4:61:82:49:b4:7a:40:04:3a:d0:bd:f0:
                    d9:a0:5f:12:74:9b:0d:82:22:a8:1b:7d:85:ae:51:
                    e8:84:7a:bf:35:fe:70:85:f6:27:e1:b5:80:47:ca:
                    1a:b3:6f:25:e5:a6:b3:0d:f7:5f:bd:61:5e:83:4d:
                    9a:3e:d3:de:72:c6:84:2e:cf:41:37:1a:d2:35:03:
                    71:03:be:8c:fa:9e:19:7d:90:0d:f8:31:eb:16:a4:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0D:19:CB:06:BA:49:3C:C1:0F:DD:78:65:2B:C3:15:AC:E6:FE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bf32697c-c553-3695-ab9d-96e167fbb51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.68.0-68.182.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:4a:46:f7:c4:51:2e:2c:69:e6:28:6c:7b:c0:6e:9d:6a:
         bf:af:f2:e9:52:f3:a1:07:5d:f9:60:5a:5c:89:c5:9e:72:ef:
         39:ae:47:10:84:78:0b:34:e7:6b:84:8a:04:57:7a:d1:e5:a9:
         dc:3e:8c:fa:cc:5d:cc:77:c7:29:ad:5a:28:31:e8:49:4e:0d:
         11:6d:82:3a:aa:1d:d7:9c:b0:37:75:83:cf:da:bd:0e:82:2f:
         89:cb:3c:fb:38:77:5a:56:b2:30:6e:96:bb:42:d0:77:e5:a7:
         a7:99:29:02:22:cc:8f:21:99:3d:f3:b4:70:3a:bf:73:18:2c:
         74:62:6b:6a:76:af:78:37:87:d6:2e:3e:9c:84:3b:fa:f8:f0:
         71:73:26:58:c9:11:32:aa:de:d8:7b:90:27:49:2b:6a:ac:72:
         7a:de:14:47:3c:eb:ea:1e:18:33:15:e1:3d:18:64:53:58:b2:
         4d:64:f9:f1:e9:ff:5b:d1:c2:05:05:5b:16:6d:5b:ae:9f:f1:
         56:82:72:a9:e6:12:bd:85:0d:11:ab:86:bb:9e:41:7c:49:2a:
         01:0f:dd:c5:09:13:88:13:2e:cf:5c:74:d9:11:b8:98:34:00:
         a7:fe:bd:1a:10:79:13:23:69:fb:92:1f:20:7c:86:b9:19:68:
         6d:f7:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:37 2026 by rpki-client