Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/e43d56ae-bbe2-3fbe-bb39-0ebadc21a87b.roa
File:                     e43d56ae-bbe2-3fbe-bb39-0ebadc21a87b.roa (raw, json)
Hash identifier:          l4mKcWeBqQEhLhxemtU1xiqqj+y4QQ/hCiNN2U6z1iY=
Subject key identifier:   C3:8A:E5:B1:55:09:61:DC:A3:E4:F6:57:F0:EC:BA:7E:06:8F:F2:91
Certificate issuer:       /CN=a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a
Certificate serial:       010D0C9F4328584D38CD1FF7C3B3EBD34F499480
Authority key identifier: 5F:C7:CC:D2:E6:77:18:6A:01:93:E4:67:69:83:D6:E0:B6:23:9F:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/e43d56ae-bbe2-3fbe-bb39-0ebadc21a87b.roa
Signing time:             Thu 19 Mar 2026 16:20:09 +0000
ROA not before:           Thu 19 Mar 2026 16:20:09 +0000
ROA not after:            Wed 17 Jun 2026 16:20:09 +0000
asID:                     14618
IP address blocks:        68.67.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:cd:1f:f7:c3:b3:eb:d3:4f:49:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a
        Validity
            Not Before: Mar 19 16:20:09 2026 GMT
            Not After : Jun 17 16:20:09 2026 GMT
        Subject: CN=2a5bb800-db41-4652-a5ae-2ae07348d56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:cd:57:6a:ea:96:8f:6f:3a:73:7d:72:28:
                    b3:d9:3e:11:fc:e6:74:c5:04:63:94:53:e1:7d:99:
                    ae:61:a2:15:85:3d:07:41:a9:66:bc:54:cb:59:8b:
                    12:11:da:e0:07:96:0f:2e:b0:c3:e1:b0:e9:b0:15:
                    6d:0a:77:c9:c0:68:f3:4b:e5:f8:29:1c:96:14:29:
                    3c:7a:91:99:e9:73:8c:42:fc:7a:88:b7:c9:e9:d7:
                    3f:0c:94:64:7c:62:43:53:49:ae:dd:4d:b1:15:fb:
                    e2:a3:b0:88:e3:9b:94:29:e9:32:dd:6b:be:8f:8f:
                    e1:06:de:7d:32:16:3c:28:e6:bb:cd:93:26:71:3b:
                    7f:9d:3c:23:ac:81:69:19:28:d7:e4:49:ae:23:fe:
                    c7:8d:8b:4e:02:5d:df:26:e3:a9:94:51:70:4e:41:
                    9f:e8:dd:d7:2f:db:b3:a5:56:79:42:69:a6:d3:14:
                    bc:5a:59:71:e4:cf:74:c0:34:b4:3b:b7:4c:b9:a1:
                    10:c8:a6:f7:21:e2:1c:9a:ec:b0:bc:89:06:69:d2:
                    35:74:62:37:ab:ef:1f:7c:b8:68:31:fc:fa:ea:5b:
                    ca:9e:23:41:52:53:e2:eb:17:dc:5d:99:ce:e2:d5:
                    65:0e:55:53:dd:2e:ec:36:85:b7:29:80:35:73:9b:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:E5:B1:55:09:61:DC:A3:E4:F6:57:F0:EC:BA:7E:06:8F:F2:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/e43d56ae-bbe2-3fbe-bb39-0ebadc21a87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.crl

            X509v3 Authority Key Identifier:
                keyid:5F:C7:CC:D2:E6:77:18:6A:01:93:E4:67:69:83:D6:E0:B6:23:9F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:46:d1:eb:9f:6f:52:32:60:74:96:ac:80:44:da:c4:e0:cf:
         e8:78:bd:13:f0:f2:25:62:80:89:9e:6e:10:31:96:31:a8:bd:
         17:21:b6:7c:24:03:5a:19:f5:a3:b5:45:a0:57:f9:26:a1:09:
         85:6c:c7:09:7e:a9:32:eb:7d:fa:d1:5d:24:e7:b5:d5:c4:66:
         8b:48:0b:97:02:f8:2e:4a:a0:ac:1e:cc:97:a5:4d:2f:ba:4c:
         89:00:98:fc:b9:63:ed:3d:2a:6a:a8:9f:24:8d:be:d0:c1:34:
         68:4a:03:ff:b1:fb:3b:11:bd:a4:eb:a0:2b:a9:f8:01:81:90:
         f0:67:f8:c4:a8:09:68:ab:f4:06:07:dc:a9:f2:77:d9:a8:0b:
         18:3a:97:8b:17:3f:1d:2c:db:f9:0e:57:32:08:81:90:c0:67:
         81:62:62:92:60:75:6a:37:cd:72:0d:cb:99:b1:de:3e:84:dc:
         b8:39:08:a0:15:d9:e4:3c:e3:2a:c8:6d:e8:1f:b7:d0:46:bf:
         4b:35:47:84:b6:1c:84:3b:43:19:32:14:67:9d:e1:94:a7:e4:
         58:df:0e:6b:85:b9:6c:3a:c7:96:8e:ee:e2:6e:55:08:f1:c3:
         5c:15:85:35:df:7e:ef:96:a2:e9:3f:9c:2c:85:22:69:f1:a8:
         b8:15:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:21 2026 by rpki-client