Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa
File:                     7f688b8f-3942-3db6-8392-940669f88020.roa (raw, json)
Hash identifier:          26lT+HD9ylrjNLq4/lGmkKfcDyFPMhipjLp+QDCpPvY=
Subject key identifier:   B3:B6:AF:65:BF:92:55:9E:34:CF:80:C2:DE:A5:0D:00:E1:77:C0:BC
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584DB34035845231F0CACA134D40
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa
Signing time:             Sat 02 May 2026 13:00:31 +0000
ROA not before:           Sat 02 May 2026 13:00:31 +0000
ROA not after:            Fri 31 Jul 2026 13:00:31 +0000
asID:                     63023
IP address blocks:        68.233.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b3:40:35:84:52:31:f0:ca:ca:13:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: May  2 13:00:31 2026 GMT
            Not After : Jul 31 13:00:31 2026 GMT
        Subject: CN=799832f2-43bb-4325-ac73-1305f232a6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:05:62:46:6a:1e:ca:a9:8e:ef:f9:d0:3c:
                    3e:3b:99:ee:b0:b1:5f:1f:cb:df:5d:73:55:d0:1a:
                    98:83:6a:72:ab:35:5f:16:7a:3e:5d:da:bf:77:6e:
                    85:ea:0a:15:1e:bf:5a:b1:4c:01:d3:0d:0b:cf:6f:
                    ad:bf:ca:e4:0a:8a:60:c6:8a:cb:69:74:5d:f3:a4:
                    ec:86:c6:7d:b9:ee:62:aa:a4:1e:6c:d7:03:21:36:
                    6d:dc:16:b7:97:55:56:52:d3:b0:5e:39:a8:de:5f:
                    44:4d:c7:45:7f:3b:dc:c6:e8:f5:21:7b:c6:5e:39:
                    2c:b5:6e:e9:bb:61:7f:cb:1a:0c:1f:dd:fd:14:15:
                    27:35:56:94:d7:1c:f7:2b:4f:40:ea:77:d3:72:2b:
                    31:85:88:23:76:1f:5a:6a:c5:04:9a:86:d1:c4:23:
                    8e:22:3b:e2:47:71:3f:ae:13:ca:c1:f0:77:68:36:
                    4f:24:83:40:c8:79:10:14:ab:9f:d4:23:3b:26:30:
                    e7:e4:fb:31:e2:f2:5e:72:d9:b8:fe:a7:24:96:a8:
                    c6:27:62:56:1a:db:f3:41:d9:8e:d7:d8:7e:71:dc:
                    3b:4d:a9:fa:29:60:e0:b3:db:9e:f4:4a:76:56:48:
                    dd:b8:92:7d:9f:eb:2f:3c:c0:4a:dd:4f:3b:b7:a7:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B6:AF:65:BF:92:55:9E:34:CF:80:C2:DE:A5:0D:00:E1:77:C0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/7f688b8f-3942-3db6-8392-940669f88020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:f7:64:56:dc:05:12:98:08:9a:45:f7:60:a2:a4:04:0f:
         83:55:54:1c:d9:80:07:89:1c:28:5e:3c:a5:84:5e:f7:94:2a:
         a1:d0:fa:9e:bd:97:f3:bf:d2:3b:4c:a6:cc:95:4e:46:b0:57:
         4e:ac:22:ad:ff:9e:47:ac:59:28:1d:c7:a2:44:83:4a:fb:80:
         14:40:8a:a7:cb:a6:c0:d5:a2:c9:91:57:29:10:7d:b7:8d:8f:
         aa:1b:90:fe:c5:da:b0:9c:cd:a5:cf:14:c8:68:2f:59:26:4b:
         90:49:2f:1e:db:b4:49:69:5c:1d:52:ce:09:f1:85:30:c7:06:
         0b:76:28:4a:0f:d9:67:aa:35:a3:8f:1c:15:5f:f9:96:a4:a6:
         b2:2f:40:99:c4:e1:fa:4c:8f:d5:68:c8:ee:bf:05:70:76:bb:
         5f:7f:16:dd:13:c1:fb:6d:b2:db:33:d6:6a:25:1b:89:62:34:
         f3:0f:2d:bf:73:f1:17:ab:88:05:a4:79:26:7d:2e:2c:ab:51:
         d6:63:f9:a4:3f:7a:96:b7:5b:39:2f:7a:2a:31:04:33:da:42:
         ce:3c:62:72:b0:5d:f5:df:68:d5:fa:ab:e3:31:86:04:ad:60:
         ff:e3:cf:f1:7a:d5:5b:11:30:75:7c:3a:3a:e8:d5:27:ca:82:
         58:e5:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:01 2026 by rpki-client