Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/c55bd391-88b4-376c-8951-d092a28a5f85.roa
File:                     c55bd391-88b4-376c-8951-d092a28a5f85.roa (raw, json)
Hash identifier:          fRVMbyGsKA+EVhkAEc8cplMxbBPfZMYUbR6FM5zDTYk=
Subject key identifier:   9E:2C:17:F6:B3:B7:25:50:E1:6F:9F:48:E9:15:8B:1C:81:71:D3:96
Certificate issuer:       /CN=135ec5a7-d9dd-467e-ac4a-236383b21732
Certificate serial:       010D0C9F4328584DBA3AF7CC3F068BF7244B00A0
Authority key identifier: 15:10:86:1D:D7:ED:97:C6:5A:D8:83:16:D1:7B:F0:B6:26:9F:54:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/c55bd391-88b4-376c-8951-d092a28a5f85.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     47870
IP address blocks:        68.170.28.0/24 maxlen: 24
                          68.170.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f7:cc:3f:06:8b:f7:24:4b:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135ec5a7-d9dd-467e-ac4a-236383b21732
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=7c2cd2be-79ab-4d86-a8cb-38d7bc59c12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:76:9b:bf:7b:d2:2f:78:65:e6:89:96:f6:
                    5a:50:a7:6a:97:94:f3:82:c5:f5:be:ab:53:d9:26:
                    7c:46:a2:77:a0:93:8e:94:f1:0e:b1:70:18:90:48:
                    51:e3:4d:d4:69:81:1b:b3:fe:69:68:e7:e9:0d:c1:
                    33:d3:78:db:86:a8:62:9e:b3:16:e2:79:99:6b:94:
                    cc:8f:35:dc:8a:ef:d8:c2:a7:97:61:0e:b7:96:01:
                    5e:83:6b:b4:7c:f7:cd:48:9d:42:c6:f0:d7:6e:61:
                    c9:1e:71:e2:4d:59:b2:22:bd:2d:88:a2:20:54:d5:
                    b1:fa:3e:13:0f:3f:74:85:e5:d5:8c:bc:a0:94:68:
                    ce:68:a8:dd:08:ad:d3:93:79:c6:21:1f:09:1b:d1:
                    65:fe:2f:a0:63:d5:68:b9:7a:fa:0b:b6:07:d6:4f:
                    0c:80:bf:d6:b3:69:96:ce:4e:cf:89:6c:83:7d:c3:
                    7f:7b:f7:45:3e:08:41:34:c5:c4:c5:a5:ba:32:2b:
                    6a:04:17:94:7a:6c:3c:63:d5:3f:c3:7d:c8:95:93:
                    aa:92:b9:18:ed:a1:65:36:14:08:b5:c4:ec:9f:61:
                    40:cc:35:00:fc:3f:81:7b:ab:e9:a9:df:27:61:10:
                    7d:88:c9:04:fd:ff:ff:1f:2a:ae:98:7e:75:d2:50:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:17:F6:B3:B7:25:50:E1:6F:9F:48:E9:15:8B:1C:81:71:D3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/c55bd391-88b4-376c-8951-d092a28a5f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732/135ec5a7-d9dd-467e-ac4a-236383b21732.crl

            X509v3 Authority Key Identifier:
                keyid:15:10:86:1D:D7:ED:97:C6:5A:D8:83:16:D1:7B:F0:B6:26:9F:54:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/135ec5a7-d9dd-467e-ac4a-236383b21732.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:93:9c:93:a5:88:2c:23:67:be:c3:52:da:e5:9b:37:85:2f:
         f2:81:f7:08:34:77:99:a1:4d:03:32:1c:6d:58:6a:89:78:49:
         65:45:9b:4c:c8:ed:58:90:31:93:a1:53:48:cf:88:ad:42:6f:
         f7:11:df:f3:9d:32:8f:a3:ac:2c:98:72:2d:93:f9:3d:9d:44:
         01:6b:45:ab:e1:f4:f0:c9:32:c1:f2:6b:a2:25:01:bc:ce:40:
         84:36:fd:1e:55:96:37:18:2c:2b:da:bf:9f:8c:8e:c3:a9:fb:
         3d:c8:0e:59:58:aa:84:b5:30:92:23:ea:a2:50:7a:65:68:8c:
         6a:99:42:36:1d:44:2b:58:4c:c2:8e:28:c1:e3:a0:b2:b8:df:
         d0:e5:83:4d:c1:a3:ec:a1:59:21:2d:b4:47:5f:ba:c0:bf:c6:
         82:17:cc:55:61:30:f5:0d:2a:11:28:ac:04:ad:b4:1d:41:33:
         96:c6:4d:04:f4:39:6c:1b:85:d8:42:1b:b7:5f:e4:9b:69:4b:
         5b:70:12:fb:e3:0c:de:a1:fe:4a:82:bb:e4:67:39:05:60:5d:
         6e:64:54:59:c5:a3:0f:5d:23:2a:ac:96:46:0f:d4:d7:06:ca:
         e7:b5:ae:26:da:d7:ed:dd:3b:3d:c7:ae:70:e4:4a:25:65:97:
         d0:66:b8:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OvfMPwaL9yRLAKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM1ZWM1YTctZDlkZC00NjdlLWFjNGEtMjM2MzgzYjIx
NzMyMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
N2MyY2QyYmUtNzlhYi00ZDg2LWE4Y2ItMzhkN2JjNTljMTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPh2m7970i94ZeaJlvZaUKdql5TzgsX1vqtT
2SZ8RqJ3oJOOlPEOsXAYkEhR403UaYEbs/5paOfpDcEz03jbhqhinrMW4nmZa5TM
jzXciu/YwqeXYQ63lgFeg2u0fPfNSJ1CxvDXbmHJHnHiTVmyIr0tiKIgVNWx+j4T
Dz90heXVjLyglGjOaKjdCK3Tk3nGIR8JG9Fl/i+gY9VouXr6C7YH1k8MgL/Ws2mW
zk7PiWyDfcN/e/dFPghBNMXExaW6MitqBBeUemw8Y9U/w33IlZOqkrkY7aFlNhQI
tcTsn2FAzDUA/D+Be6vpqd8nYRB9iMkE/f//HyqumH510lDphwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4sF/aztyVQ4W+fSOkVixyBcdOWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMzVl
YzVhNy1kOWRkLTQ2N2UtYWM0YS0yMzYzODNiMjE3MzIvYzU1YmQzOTEtODhiNC0z
NzZjLTg5NTEtZDA5MmEyOGE1Zjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTM1ZWM1YTctZDlkZC00NjdlLWFj
NGEtMjM2MzgzYjIxNzMyLzEzNWVjNWE3LWQ5ZGQtNDY3ZS1hYzRhLTIzNjM4M2Iy
MTczMi5jcmwwHwYDVR0jBBgwFoAUFRCGHdftl8Za2IMW0XvwtiafVB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMzVlYzVhNy1kOWRkLTQ2N2UtYWM0YS0yMzYz
ODNiMjE3MzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKocMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOTnJOliCwjZ77DUtrlmzeFL/KB9wg0d5mhTQMyHG1Yaol4SWVFm0zI
7ViQMZOhU0jPiK1Cb/cR3/OdMo+jrCyYci2T+T2dRAFrRavh9PDJMsHya6IlAbzO
QIQ2/R5VljcYLCvav5+MjsOp+z3IDllYqoS1MJIj6qJQemVojGqZQjYdRCtYTMKO
KMHjoLK439Dlg03Bo+yhWSEttEdfusC/xoIXzFVhMPUNKhEorASttB1BM5bGTQT0
OWwbhdhCG7df5JtpS1twEvvjDN6h/kqCu+RnOQVgXW5kVFnFow9dIyqslkYP1NcG
yue1riba1+3dOz3HrnDkSiVll9BmuAQ=
-----END CERTIFICATE-----
Generated at Wed May 13 13:13:31 2026 by rpki-client