Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa
File:                     1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa (raw, json)
Hash identifier:          VJtk5CPjSbVQMXDtcwD6MblNzehzhe/NT/GHZeHRQXE=
Subject key identifier:   16:E1:47:09:5E:53:70:76:C8:7A:0A:21:D4:36:0B:35:DD:AD:C9:66
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584D2BDA21042EF176627CF467BA
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     16509
IP address blocks:        68.233.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:21:04:2e:f1:76:62:7c:f4:67:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=6d0106b8-eef1-4f2c-bc0d-0c6f7bb59dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:3d:57:97:9e:98:58:38:2d:4e:e9:14:7e:
                    55:4a:5d:db:1c:2d:82:63:3f:84:4c:39:77:2b:13:
                    57:20:ae:e3:a7:67:f1:82:6c:93:bc:e9:95:d3:b3:
                    ef:c4:d8:54:94:6b:2f:4e:95:11:63:89:5f:8f:5c:
                    cf:a4:66:6a:37:71:36:f6:63:b1:fb:a1:bf:6d:5f:
                    83:d4:26:7b:b1:3c:fd:f6:c3:87:93:5a:21:2b:6d:
                    28:d9:2f:01:e6:ac:04:f0:87:9d:69:79:8c:89:1c:
                    76:e2:e1:64:bc:e3:88:0e:60:7c:06:ff:87:39:63:
                    1f:9f:8c:d8:6a:69:d2:de:e3:1c:01:36:b4:3a:19:
                    76:27:33:46:f5:fb:d3:83:d3:35:0c:c9:97:af:c7:
                    3e:4a:24:6e:20:f4:3a:50:41:d3:24:b2:fa:72:e6:
                    e2:f0:da:e2:c3:31:75:5e:a9:ee:0a:30:7d:a9:86:
                    34:c9:f6:16:70:91:b9:0f:28:95:cc:b8:e0:a8:19:
                    f2:57:00:09:33:5e:a4:34:65:d0:1b:1b:e2:16:53:
                    6f:e5:10:79:84:21:5e:f8:ee:a8:81:85:52:08:74:
                    c4:4d:57:4e:d0:8d:b3:c3:87:a0:94:bf:6e:30:1b:
                    75:4b:4d:2b:3f:53:f5:7a:5c:31:a7:db:ff:17:40:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E1:47:09:5E:53:70:76:C8:7A:0A:21:D4:36:0B:35:DD:AD:C9:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:7f:92:96:46:5b:34:0e:77:b3:ef:e7:50:04:6a:95:de:
         70:88:a9:4a:eb:b1:ba:4f:3c:28:3d:08:3d:9f:3f:ad:2d:d9:
         7a:ff:e7:7a:0e:28:4e:be:21:c9:5d:5b:79:a4:91:ad:76:fc:
         ad:42:45:0a:a2:75:30:5a:b3:21:d1:df:b0:dc:bf:82:d7:e2:
         00:3c:af:d9:4f:3d:ee:2b:0a:a2:1f:ef:2c:35:2c:40:cb:2a:
         e3:f0:fc:94:a0:8c:33:16:17:5c:24:34:96:14:95:08:fd:78:
         65:01:b2:b6:aa:71:56:b1:91:c2:00:bc:62:16:d7:a5:90:4e:
         65:d7:e4:90:f7:b9:be:ee:89:4e:53:9d:36:05:3e:31:49:b2:
         cc:f3:33:ec:a5:35:04:b2:ab:de:b6:b9:c0:ba:ba:d2:cd:25:
         9b:f1:71:6f:bc:a0:04:c3:d4:50:8e:48:a3:fa:d2:97:8e:90:
         e2:8e:83:07:1d:83:ce:d5:d3:b4:a6:75:73:28:91:a4:d8:b1:
         32:8a:d8:4d:a0:8f:1f:11:46:13:b0:33:56:3f:a0:71:97:e5:
         f0:53:6d:b2:66:60:c3:a2:dc:f6:5c:c2:ca:96:bd:0c:a2:27:
         8b:c3:3c:bd:3b:e4:07:f9:13:ee:a7:79:8f:4d:50:8a:6a:83:
         0e:b7:fe:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:39 2026 by rpki-client