Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c68167f4-0471-3a3f-bcb8-820c61793286.roa
File:                     c68167f4-0471-3a3f-bcb8-820c61793286.roa (raw, json)
Hash identifier:          sFa1wB+6b5CokhUUiNpOicQ5QQpBdxWOL2vqtEFuEoE=
Subject key identifier:   9A:1D:9C:10:A1:3D:3A:F0:F9:23:A5:59:AE:2B:64:3B:DC:CA:36:C5
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584E736A18B0282D659663F46780
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c68167f4-0471-3a3f-bcb8-820c61793286.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     6327
IP address blocks:        68.144.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:18:b0:28:2d:65:96:63:f4:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=c363d971-cc3a-498c-be45-a56a245c2b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:6b:f9:d1:cc:27:d8:cd:d2:b0:06:70:ee:
                    67:80:dc:96:41:59:e4:30:19:4a:b7:0c:8c:2c:d3:
                    6b:7a:1b:78:b2:6a:50:b3:06:77:4c:da:b4:4b:ed:
                    64:1e:82:04:a4:79:3c:80:4e:24:35:fe:19:35:21:
                    e7:b7:04:6f:dd:06:9c:96:65:a6:bf:5a:bd:29:16:
                    4a:e6:f7:0c:c0:74:17:d8:05:45:01:16:07:a1:9f:
                    2a:3e:3b:a6:8a:86:3e:23:62:28:4d:5a:b0:c0:87:
                    17:96:7d:67:60:57:cd:d0:0c:3d:5f:cb:e7:d2:ad:
                    85:a2:bf:51:5a:8d:ca:47:9b:8a:0a:d7:0a:66:ea:
                    fe:1e:89:a4:db:31:d0:7f:5b:94:16:86:11:eb:51:
                    cf:31:40:7b:0c:aa:4a:a5:ab:0c:d9:ac:c0:79:74:
                    dd:b2:61:8d:6b:1d:29:c7:b1:b2:e5:3b:70:ce:20:
                    6e:31:28:d7:9b:59:58:75:2d:9b:9a:83:a4:e8:75:
                    65:1d:48:92:66:ff:29:c2:5e:2d:10:29:7b:f1:5a:
                    b5:26:42:21:2f:b0:4c:10:20:0f:a1:42:71:2d:9f:
                    82:93:8c:f3:bc:da:dd:fc:66:0f:31:c3:1f:a0:30:
                    39:b1:2f:67:d7:5c:7a:90:f5:67:2b:db:d5:a1:52:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1D:9C:10:A1:3D:3A:F0:F9:23:A5:59:AE:2B:64:3B:DC:CA:36:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/c68167f4-0471-3a3f-bcb8-820c61793286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.144.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:85:6c:3d:54:50:f4:b2:1d:35:a9:37:40:ef:8d:30:78:a0:
         cf:60:6e:a8:e9:77:b9:20:a4:c9:d6:fe:27:93:e0:b2:e6:93:
         c5:b7:c1:a6:13:e7:d1:50:d5:04:82:7b:91:e6:b0:f3:b0:c1:
         c8:27:80:e2:78:3e:8b:4e:be:5b:30:be:58:28:2e:e2:a3:da:
         cc:e5:62:64:14:6b:97:cd:fb:f5:69:75:e3:c2:2d:a9:88:76:
         c4:19:a6:df:ee:c2:b2:87:65:4b:ba:e7:01:c7:e3:bd:ba:0e:
         43:6c:5f:25:b9:1c:e6:f7:c2:10:6d:c7:01:32:05:16:99:26:
         a8:91:51:7b:d2:3f:f9:c5:2c:20:84:ce:6d:da:0e:5d:2b:a0:
         17:dd:4a:fc:00:b4:1c:a3:67:66:59:b4:e2:65:80:5b:6e:79:
         be:c3:e4:80:40:2e:34:a5:bb:4b:b3:09:67:bd:19:53:d2:1e:
         e0:76:66:c4:7c:d9:6e:01:57:26:53:bf:57:dd:df:d9:c2:98:
         37:18:0e:5d:df:21:aa:74:64:9b:19:f8:17:5b:10:3d:1f:ec:
         8a:13:d4:ee:61:e1:e0:eb:b3:0e:9b:60:cd:c4:36:fa:50:d9:
         8a:ec:92:55:e8:f6:b4:d1:f6:b8:fd:84:1b:91:df:a3:52:17:
         f3:e3:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:02 2026 by rpki-client