Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/37c71370-6adb-3053-83fe-df27c57f5e3f.roa
File:                     37c71370-6adb-3053-83fe-df27c57f5e3f.roa (raw, json)
Hash identifier:          FkC1ITagHoGLdk3dxPgDRourgphfGFTpzdOIpXT+HK4=
Subject key identifier:   63:D4:EC:8B:35:59:0A:81:5F:8B:3E:69:C7:CE:D5:92:A5:14:38:19
Certificate issuer:       /CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
Certificate serial:       010D0C9F4328584DCDC5DB5592D923DC045F70C0
Authority key identifier: 47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/37c71370-6adb-3053-83fe-df27c57f5e3f.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     1054
IP address blocks:        68.68.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:db:55:92:d9:23:dc:04:5f:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=5a642e52-6bc7-47bf-b309-57ff1f4ce0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:5a:01:fc:70:c9:34:3b:20:86:12:79:02:
                    41:80:e8:f0:39:8f:9a:87:17:8a:c9:7e:c4:0e:6b:
                    26:1b:b5:a2:66:a3:41:80:f5:31:7e:13:14:ac:42:
                    ea:6f:b3:b7:a1:f0:19:8c:fb:e1:88:c5:a7:4b:45:
                    c2:00:d6:16:2c:aa:39:b4:4f:b8:5c:08:31:25:18:
                    6e:e5:e5:7b:76:35:1a:16:1f:3b:a0:c2:52:7a:56:
                    83:e0:41:09:37:50:34:a1:3c:09:33:3d:87:0e:ee:
                    d9:00:64:69:09:c8:db:be:89:0e:50:1a:4b:0c:47:
                    b6:4b:7e:60:6f:dc:fd:c3:0e:ae:b9:4e:81:b4:73:
                    f6:45:bb:f3:65:e9:97:4d:e5:0f:cb:6f:e7:38:1d:
                    f1:9a:59:ac:26:88:5f:70:1c:2b:b4:ee:43:dd:18:
                    49:bc:04:ea:98:7a:4e:2f:a4:af:4d:8e:1e:e5:60:
                    94:e0:3f:9d:42:ef:93:74:bd:f1:19:dc:78:11:53:
                    55:21:2a:43:79:f2:0a:d5:9f:b6:62:c2:99:99:f4:
                    ed:cc:ae:cb:93:5c:e1:c4:7b:8c:3c:23:f6:cc:a9:
                    d6:aa:8c:f2:ea:8d:d6:36:05:3b:e4:10:b9:10:8e:
                    3c:4b:f5:d6:b8:29:9e:d4:34:25:59:d1:07:2f:e8:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D4:EC:8B:35:59:0A:81:5F:8B:3E:69:C7:CE:D5:92:A5:14:38:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/37c71370-6adb-3053-83fe-df27c57f5e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:c0:4e:60:e3:be:c8:2c:dc:c3:ba:9c:28:db:3b:2b:ef:
         ae:36:9b:2c:06:d4:2c:65:fe:73:ff:3c:47:e3:25:c6:f4:a0:
         ff:a2:ea:13:63:4b:eb:b7:db:8b:12:06:a3:6c:f9:21:2f:1b:
         4e:3d:cb:2b:5e:1d:3d:ce:b8:26:ae:b6:65:95:12:d9:13:60:
         64:1e:e2:25:30:d7:03:ad:45:15:a1:34:6f:75:3b:8a:14:61:
         fe:c3:b1:2f:af:b9:07:4c:f7:a8:eb:82:68:24:0d:c3:94:67:
         e4:2c:d9:59:58:3b:ff:96:4e:73:b1:86:58:5c:ce:22:2e:53:
         52:16:11:e0:b2:e1:e7:84:f7:a3:3f:d1:e1:77:ff:d2:2c:be:
         6b:42:a9:2b:97:9b:56:0b:13:21:85:cf:df:c7:de:56:27:19:
         62:54:ad:77:6a:3a:0d:1f:a0:05:c8:86:3c:77:a7:ad:8f:3b:
         ad:e2:bd:38:2d:65:48:f5:9c:08:b9:13:28:74:f7:52:e4:3b:
         ac:42:ac:57:ec:b9:a0:50:55:47:a8:83:c0:f6:66:32:fb:a7:
         c2:aa:65:e5:90:b5:5c:78:36:1c:e0:73:46:e6:c7:d5:c6:13:
         50:07:c9:c9:aa:17:2b:c7:87:c5:40:1a:d4:b8:33:0d:f5:a9:
         a1:4f:b8:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxdtVktkj3ARfcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMwNGQ1Y2MtNmFlMS00ZDI4LWJkZmItYWQ2ODMwZjA1
NzIyMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
NWE2NDJlNTItNmJjNy00N2JmLWIzMDktNTdmZjFmNGNlMGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM9aAfxwyTQ7IIYSeQJBgOjwOY+ahxeKyX7E
DmsmG7WiZqNBgPUxfhMUrELqb7O3ofAZjPvhiMWnS0XCANYWLKo5tE+4XAgxJRhu
5eV7djUaFh87oMJSelaD4EEJN1A0oTwJMz2HDu7ZAGRpCcjbvokOUBpLDEe2S35g
b9z9ww6uuU6BtHP2RbvzZemXTeUPy2/nOB3xmlmsJohfcBwrtO5D3RhJvATqmHpO
L6SvTY4e5WCU4D+dQu+TdL3xGdx4EVNVISpDefIK1Z+2YsKZmfTtzK7Lk1zhxHuM
PCP2zKnWqozy6o3WNgU75BC5EI48S/XWuCme1DQlWdEHL+j5owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGPU7Is1WQqBX4s+acfO1ZKlFDgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81MzA0
ZDVjYy02YWUxLTRkMjgtYmRmYi1hZDY4MzBmMDU3MjIvMzdjNzEzNzAtNmFkYi0z
MDUzLTgzZmUtZGYyN2M1N2Y1ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTMwNGQ1Y2MtNmFlMS00ZDI4LWJk
ZmItYWQ2ODMwZjA1NzIyLzUzMDRkNWNjLTZhZTEtNGQyOC1iZGZiLWFkNjgzMGYw
NTcyMi5jcmwwHwYDVR0jBBgwFoAURwp7n5Y7EFBY+J2pY+L9C9L8H7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81MzA0ZDVjYy02YWUxLTRkMjgtYmRmYi1hZDY4
MzBmMDU3MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARET4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB25wE5g477ILNzDupwo2zsr7642mywG1Cxl/nP/PEfjJcb0oP+i6hNj
S+u324sSBqNs+SEvG049yyteHT3OuCautmWVEtkTYGQe4iUw1wOtRRWhNG91O4oU
Yf7DsS+vuQdM96jrgmgkDcOUZ+Qs2VlYO/+WTnOxhlhcziIuU1IWEeCy4eeE96M/
0eF3/9IsvmtCqSuXm1YLEyGFz9/H3lYnGWJUrXdqOg0foAXIhjx3p62PO63ivTgt
ZUj1nAi5Eyh091LkO6xCrFfsuaBQVUeog8D2ZjL7p8KqZeWQtVx4Nhzgc0bmx9XG
E1AHycmqFyvHh8VAGtS4Mw31qaFPuAI=
-----END CERTIFICATE-----
Generated at Wed May 13 13:31:52 2026 by rpki-client