Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/34add497-fc31-310a-94cb-992d4c43d734.roa
File:                     34add497-fc31-310a-94cb-992d4c43d734.roa (raw, json)
Hash identifier:          JHwodHAKVXNEVBQnW3bF3oSfHsfb9OcPP30ZKzTzY/I=
Subject key identifier:   48:AF:EA:93:F7:69:15:BD:8C:40:10:F8:AE:A3:7B:12:19:01:6A:58
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F30525FF430812B768C99F3E0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/34add497-fc31-310a-94cb-992d4c43d734.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        68.67.80.0/20 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:5f:f4:30:81:2b:76:8c:99:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=ff56ffd5-449e-40c6-bbd6-fcb61478ba7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:29:d5:86:ee:90:73:e9:47:01:22:74:e3:
                    ee:ce:2c:54:a3:43:bc:48:e3:c3:e0:3e:0f:29:fd:
                    c7:0d:c2:b5:b2:c5:8a:9c:1c:d2:2c:57:cd:fd:1a:
                    42:d8:f6:cd:ac:9b:be:af:0d:7c:6f:f9:e9:0e:73:
                    90:84:a6:7f:a3:52:e1:00:9b:9b:f7:04:52:e6:8b:
                    96:c0:c7:81:70:58:0c:4e:eb:d3:23:7c:ba:92:5b:
                    3d:b9:03:90:08:21:2b:9c:7d:e3:86:97:c4:09:c1:
                    f8:e1:05:e8:ee:9a:8a:87:00:0b:d8:79:52:36:bb:
                    6b:81:d7:0c:5d:b1:70:80:52:14:5d:a5:62:64:19:
                    0d:55:db:12:66:e8:de:db:94:a7:9c:3c:7a:51:a7:
                    33:00:27:50:df:9c:21:c0:68:0b:d3:f1:8d:c3:d6:
                    00:61:09:1d:1a:c3:5b:0f:57:4c:fc:be:ec:90:ad:
                    eb:6a:2e:1f:65:9e:57:00:e0:5b:72:dc:62:c2:30:
                    37:f5:a9:06:b7:61:43:40:fa:75:33:17:59:6e:4b:
                    7d:ec:cd:c3:9a:2e:01:16:f4:fb:9e:5e:9e:09:26:
                    9d:53:7a:fe:3b:7c:13:47:66:c4:71:a1:42:d7:da:
                    22:62:e4:f4:23:81:f5:25:da:a2:16:d2:b1:d2:0f:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AF:EA:93:F7:69:15:BD:8C:40:10:F8:AE:A3:7B:12:19:01:6A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/34add497-fc31-310a-94cb-992d4c43d734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ad:5d:79:6d:50:ef:e8:4b:f1:5e:9f:0f:fe:96:ab:97:b8:
         5e:1d:71:7b:5e:1f:f7:35:0d:3a:8a:d3:3c:b3:d6:2a:ba:03:
         e2:fe:7d:bd:62:69:d9:bd:1f:ef:6d:96:e8:a9:b1:89:5e:9b:
         fa:85:03:09:f8:18:3d:03:69:89:bc:41:da:d0:46:8f:56:67:
         cf:8d:30:54:1c:49:f8:9d:af:dd:f5:6c:d0:c4:8c:c3:2a:62:
         73:31:d9:1d:f2:3e:48:df:f0:48:d0:d3:f1:99:0a:17:47:d2:
         8a:4d:52:41:50:c3:bb:f8:79:c6:53:41:b3:35:65:8b:5c:ee:
         64:32:cf:88:b1:41:76:1a:8e:58:42:41:84:bf:f7:8f:89:d7:
         7f:01:a1:de:30:c3:59:4b:67:84:16:99:7e:2b:db:26:8a:3f:
         eb:be:05:e4:05:18:14:f2:c1:5d:02:c3:88:21:ea:97:e2:fe:
         d2:87:47:5d:d2:08:44:6d:df:5f:9e:6b:05:8e:c0:66:f6:56:
         08:fc:03:9f:e9:d1:de:a8:d2:6f:a7:ce:65:0b:e9:31:72:73:
         5d:ed:fb:df:b9:77:5d:6d:0e:48:db:ad:13:ff:a8:76:2e:7e:
         c3:e0:5b:7c:ec:a7:bb:05:5f:1e:51:30:e5:c7:f9:b4:3f:eb:
         2b:3e:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:24:56 2026 by rpki-client