Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
File:                     565d44ec-bec4-3ec2-934f-75404fa3de9f.roa (raw, json)
Hash identifier:          Jhf1s4+zvopFRWbV0RQmm6mtnmfv3JIGmo8C6HB5AXg=
Subject key identifier:   0B:D9:A5:55:FB:CF:E2:9C:FF:C3:62:AA:AE:C6:1E:F5:F6:D5:90:CF
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F4328584E640F6295ACFA639730556EC0
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     3257
IP address blocks:        68.69.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:62:95:ac:fa:63:97:30:55:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ee40bfd5-d680-48b3-8258-97a794028771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:7e:ed:f1:ac:96:98:01:9c:84:a5:5b:5f:
                    3e:b7:5b:d6:0f:de:55:8d:f6:82:98:41:c6:64:6f:
                    ed:8a:10:93:0e:29:be:c9:01:ce:1a:b2:54:c4:a7:
                    67:4e:54:79:5e:13:fa:0f:a1:ed:84:50:2a:95:10:
                    4d:b6:6b:63:b6:9d:76:fa:9a:f4:83:c6:ea:24:c2:
                    dc:e4:d7:8e:26:2d:05:a9:c6:7d:25:85:4e:96:6a:
                    86:c8:91:ad:23:6a:d0:0e:be:a0:82:86:9c:79:e1:
                    78:ef:1a:8d:de:4e:88:e9:7d:39:16:af:66:24:68:
                    54:7c:c4:16:33:2f:b9:d0:9f:14:d6:f9:98:a9:20:
                    bc:73:52:e9:d3:61:21:87:16:25:71:c2:63:e9:ba:
                    a0:3f:4b:83:61:ef:e8:b9:e7:c1:9c:0d:2d:95:ae:
                    a3:5e:cc:f2:51:de:26:60:74:8a:4f:1f:01:dd:70:
                    49:3b:e5:23:1a:e4:7b:71:6b:41:02:e2:7d:4e:9b:
                    b2:8b:87:60:98:d9:fb:8c:63:94:2d:eb:d8:2a:a5:
                    75:1b:b7:0c:b0:df:a9:bb:4b:f7:ce:83:98:53:1a:
                    86:4a:51:2e:24:b9:53:a0:aa:5a:15:40:b3:2d:42:
                    74:29:df:e3:38:40:ec:22:7a:17:74:3d:de:3a:98:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D9:A5:55:FB:CF:E2:9C:FF:C3:62:AA:AE:C6:1E:F5:F6:D5:90:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/565d44ec-bec4-3ec2-934f-75404fa3de9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b0:e6:39:a1:16:ec:d2:77:78:69:a8:1b:b5:5b:bf:af:08:
         85:aa:07:00:06:78:62:2d:30:20:6d:d0:e1:17:13:08:cf:28:
         d5:f6:93:08:6c:f9:51:d1:2a:db:5b:b5:a8:4e:1b:7e:a6:fa:
         5e:bf:5f:36:47:e9:b1:fc:d9:5c:9e:1b:0f:b3:8b:0a:a1:e7:
         1b:21:2e:79:82:87:e4:ef:91:15:ad:f0:b3:97:98:fe:c1:7d:
         88:7c:90:78:d5:2c:91:73:f3:32:82:e7:96:31:4d:3f:94:3f:
         a0:98:0e:41:33:04:79:3a:4a:a7:c4:a4:17:19:81:72:e9:1e:
         a9:55:4a:d9:f9:ff:4b:3a:c4:a5:bb:80:58:8b:c1:86:4b:15:
         25:36:3f:2b:5c:a3:32:b3:34:08:bc:49:2f:55:4a:cb:33:f6:
         79:04:eb:47:8f:99:e2:e8:9e:54:d8:62:65:0e:e9:a0:c5:83:
         65:24:80:ac:41:ce:60:e6:0a:6c:b0:6b:c1:e5:63:37:ab:0a:
         79:1b:4d:bc:53:c7:4b:cd:25:4c:c3:d6:1d:d8:af:aa:df:d4:
         d5:7f:90:20:1e:8b:1b:c1:40:9e:56:a7:d0:35:63:c8:25:11:
         d4:72:c8:2a:2c:df:55:7c:d3:fb:12:c8:12:96:ab:fc:39:0c:
         91:f4:95:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:58 2026 by rpki-client