Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa
File:                     0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa (raw, json)
Hash identifier:          fGrZvWl/rt0nsfc31FqiIZrM2oht0C59t4EYboDB1Q0=
Subject key identifier:   6C:89:CB:C2:B7:BC:E6:23:E8:BC:7C:9B:00:B5:8A:BC:05:B0:0B:C7
Certificate issuer:       /CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Certificate serial:       010D0C9F4328584F4987D9E3453DDB97EF81F580
Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        68.170.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:d9:e3:45:3d:db:97:ef:81:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02f45d06-fb5e-42cf-add0-494116970b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:5e:7a:d6:05:2e:7e:14:07:4b:70:19:cc:
                    3d:48:39:d2:2f:88:a7:57:b7:13:06:f5:f3:4c:c9:
                    7e:18:f1:73:09:38:b8:f9:9b:7f:9d:3f:5c:2c:26:
                    45:df:a6:b9:47:39:23:14:d7:dc:08:b5:20:a7:d5:
                    09:9f:68:ba:78:9d:93:ba:3b:57:ab:5b:4f:8b:63:
                    4e:c9:3f:e3:e5:cc:ff:1e:d8:dc:24:d2:8d:fa:51:
                    d1:67:de:71:94:2b:c5:f2:9b:50:37:cc:b1:6c:ed:
                    5e:e6:af:e6:bf:7a:28:2a:3a:f5:09:a2:a5:b2:d5:
                    8c:4c:62:7e:d6:22:52:60:49:a4:23:e1:66:1a:39:
                    87:d4:6d:aa:dd:60:30:1a:c8:c3:79:74:5b:98:68:
                    57:d8:4a:e9:18:a4:29:14:7b:67:be:4a:2c:26:34:
                    62:04:72:e8:09:23:5b:25:6f:21:9b:86:8a:f2:ac:
                    af:45:88:23:c1:cc:5f:a5:b6:f6:fc:57:09:b7:23:
                    de:37:41:d5:11:f5:fa:a4:78:6a:3b:0f:7a:e0:86:
                    df:f7:a1:cd:e1:e5:cd:fd:75:7a:5f:76:70:6e:a8:
                    0e:fb:18:55:6d:61:89:f2:1b:8b:6f:dc:43:5d:4c:
                    80:59:ad:3a:14:f0:dd:b2:6c:d4:4d:d6:52:58:67:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:89:CB:C2:B7:BC:E6:23:E8:BC:7C:9B:00:B5:8A:BC:05:B0:0B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/0f564d29-450b-37b8-9c67-5f81ec0c7ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl

            X509v3 Authority Key Identifier:
                keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:38:18:c3:37:01:83:aa:1b:56:b4:76:19:f6:62:08:d5:1b:
         db:d2:35:d4:4c:b0:ed:c1:a3:f1:91:e2:79:72:86:f1:b1:fc:
         f2:af:6d:a8:42:33:93:7b:ab:ff:80:6d:84:e9:de:0c:7d:04:
         48:d7:63:5d:e9:00:92:18:a8:77:e3:a6:b8:64:c5:c7:25:7a:
         9e:5f:e1:81:8f:68:8e:92:86:20:ec:8b:cf:92:56:d8:60:c2:
         5f:94:9f:2b:69:b0:0c:54:55:22:68:13:3c:0e:c0:b0:a9:76:
         d5:74:37:12:c2:79:2c:78:ab:1c:58:18:16:05:35:22:4f:a8:
         ff:cc:e0:f1:cb:32:25:17:84:de:2a:d5:f7:8a:35:08:ce:f7:
         cc:07:1c:d8:eb:62:e0:1f:84:a4:d9:4e:9f:e9:c5:bc:e0:84:
         b5:7c:69:d0:05:4e:a7:87:b5:cf:a1:64:4c:c5:da:7c:42:a2:
         86:b0:2d:ee:30:50:aa:e9:28:20:40:1b:17:0f:7a:ef:5b:c3:
         29:b0:b5:ac:a5:b4:0d:71:4b:bc:1e:bc:14:4c:4a:1d:98:9f:
         1b:3c:1c:a6:c1:bb:f5:94:65:2f:9d:51:be:5c:9a:3f:d3:1f:
         b0:e5:83:03:62:d9:06:30:26:4b:45:a1:65:47:37:48:cc:12:
         09:b1:d8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:55:54 2026 by rpki-client