Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
File:                     eb314902-c439-3a6d-b09b-293e9d9bacc7.roa (raw, json)
Hash identifier:          Tdns0beWU7dYCa0w8CxNumU/Ny7elKxDPYd0SsExR9I=
Subject key identifier:   DA:AF:FB:1E:78:8D:6F:BA:26:E7:7B:39:A8:B2:8F:4A:FE:47:87:1D
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584D386A4C4E9BEB038C30843F80
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     834
IP address blocks:        68.67.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4c:4e:9b:eb:03:8c:30:84:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=399882f3-f304-4af8-993a-e60cc0670d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:db:cc:93:7b:cc:8d:d9:e9:a5:8d:0a:e0:
                    6a:ff:5b:38:fc:99:f0:ed:31:55:eb:85:2b:c6:75:
                    e3:5b:79:20:14:45:74:22:b5:d6:71:c2:df:a5:2a:
                    18:cb:1d:69:c6:14:76:0c:25:d4:63:52:58:a0:d5:
                    58:a9:26:32:8f:54:c2:8d:8d:15:58:0c:56:f7:d2:
                    fb:a1:51:a1:b9:17:87:16:3c:82:f3:0a:bd:7c:26:
                    8f:f8:50:0b:e5:ef:26:f1:03:61:21:e2:a5:cb:fa:
                    84:5d:c9:72:e2:1f:4c:3c:d8:5d:da:1b:be:af:32:
                    45:f0:e4:53:fd:fa:7d:d9:42:48:cb:b3:58:32:13:
                    0d:f7:f9:43:49:d2:cf:9c:e9:93:81:68:20:5a:db:
                    e3:13:d5:fc:94:42:e1:ce:6f:6e:07:99:6d:34:d4:
                    3d:0c:2a:98:a1:19:50:ec:b1:da:4a:7b:80:86:4f:
                    78:ac:b8:88:ce:6f:0f:3c:56:49:1a:79:0f:06:7b:
                    45:58:c1:46:9f:13:84:7f:6b:66:f6:83:33:59:3b:
                    f6:0b:c3:a9:22:2c:4c:50:23:f2:b3:2a:f2:a8:f0:
                    26:4e:71:d9:4f:e5:9b:da:fd:17:bc:e7:78:d5:fa:
                    a6:09:63:9c:77:1a:d6:f4:16:97:fe:1a:89:5d:8c:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AF:FB:1E:78:8D:6F:BA:26:E7:7B:39:A8:B2:8F:4A:FE:47:87:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:23:50:ff:51:32:5f:52:c2:e3:f2:4b:de:dc:d9:8f:2d:1e:
         8a:a0:06:fb:8a:79:a4:91:92:57:c5:c4:21:14:63:d2:29:a1:
         43:a8:69:57:34:1b:8a:3f:d2:0b:bd:c7:21:1b:09:44:25:0d:
         8f:01:85:62:74:a1:8e:d6:06:ee:db:bd:be:c0:42:a1:15:ff:
         c1:ad:d2:4f:8e:f6:8a:b5:24:da:e5:fa:86:c2:dc:21:78:79:
         8b:37:f8:6b:02:fa:b9:91:80:e1:30:a9:48:d4:26:2d:c9:02:
         52:63:d3:d5:9b:97:33:e0:3d:ad:0f:23:fa:c3:a6:f0:7f:bf:
         fd:6b:27:0d:cc:3d:a0:7e:6b:78:6d:f1:7f:7f:3c:5c:a6:12:
         22:87:a7:1e:9f:37:47:b9:e0:fd:ce:b3:78:f6:b0:aa:18:95:
         99:de:99:c1:d0:0b:8c:f5:15:f7:21:c8:7a:b2:e9:23:d9:f7:
         e8:91:be:da:8f:77:d9:6a:df:4a:28:24:9d:21:ed:c3:2e:cc:
         51:6e:18:20:29:84:01:85:ed:76:58:94:27:ca:26:73:7e:34:
         b1:77:03:fc:b7:67:b4:9e:7b:4e:21:57:ba:08:83:41:36:01:
         4a:5b:35:21:28:e3:45:5c:d7:d5:70:46:9a:10:54:62:bb:11:
         98:c4:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:11 2026 by rpki-client