Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa
File:                     65ede538-d23e-3756-95dc-e6dbd41373e3.roa (raw, json)
Hash identifier:          nuqv3pu7bKs6zb0Su5iM+fTA+g0lj93316WEHmMnZZQ=
Subject key identifier:   6A:BE:0B:90:2C:9E:F5:19:60:26:38:80:46:DA:B1:EC:85:DA:55:A2
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584DBA3AE33B5ECA7A359361DBC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     31898
IP address blocks:        68.64.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e3:3b:5e:ca:7a:35:93:61:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=6750446b-6b64-4e60-b320-459a72534431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:8f:f5:97:f6:44:7d:ed:cc:76:8c:a5:07:
                    c9:a2:4b:98:a4:09:c9:00:6e:c9:d1:f3:cf:41:80:
                    c3:52:57:06:4d:85:8b:c6:05:66:ec:ff:8b:78:31:
                    f2:b4:f0:7d:e5:88:ca:a3:4e:f8:d8:97:0f:83:f1:
                    0c:1e:fb:4b:d0:54:b0:aa:99:b5:78:fb:b2:a2:b8:
                    f0:9e:29:7a:fd:01:bc:42:db:d3:d4:dd:8b:8e:15:
                    f8:0f:e9:02:02:11:da:df:80:35:e3:f5:de:1b:da:
                    2f:fc:03:bb:af:00:30:28:c9:65:67:58:29:89:6e:
                    37:99:a0:1d:fb:e5:c1:9e:4c:ba:ca:f0:42:2c:04:
                    d1:0a:8e:d4:9b:9a:14:1f:33:0b:df:3e:6c:52:8f:
                    4e:6c:cd:52:46:20:7d:98:b5:0d:a0:fd:7e:7e:48:
                    91:31:de:8d:e7:01:22:4e:82:66:5d:b1:df:eb:c6:
                    13:2d:4c:a7:2e:27:a3:bd:ae:c3:13:c9:5d:e8:1a:
                    28:8a:d3:e1:46:0c:7c:c8:00:c0:07:da:d6:84:c4:
                    a9:f6:6b:41:6e:30:6f:5e:64:5f:58:65:a7:ff:89:
                    05:41:27:89:72:98:b9:84:dc:0d:4e:1b:1d:3d:59:
                    67:e4:46:95:84:9c:bf:06:30:de:97:a5:23:c2:4c:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:0B:90:2C:9E:F5:19:60:26:38:80:46:DA:B1:EC:85:DA:55:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/65ede538-d23e-3756-95dc-e6dbd41373e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:82:cd:57:fe:86:40:e2:d5:03:22:81:50:1d:af:3e:88:
         67:b4:71:8a:08:ef:7d:a4:26:26:39:2e:01:0d:7b:89:1c:c2:
         7c:46:ac:62:f7:32:bf:1a:3d:2f:a6:34:34:80:f9:5d:0b:f4:
         4a:88:46:67:3d:53:e7:d4:09:ff:85:70:c3:3d:8d:6b:d5:ae:
         c3:07:9c:d4:22:a9:c0:25:d4:f1:27:15:be:24:c9:1a:4e:ec:
         b3:dc:04:53:1a:91:e3:73:31:92:b9:d5:74:37:8b:ab:f3:83:
         be:f4:3e:a4:f7:46:4f:da:13:6d:67:94:da:b0:08:29:2c:7b:
         0b:3c:cc:90:d9:7a:82:4f:33:e0:2e:3c:77:99:65:86:ca:b9:
         d5:8a:8a:c5:7b:58:c5:e6:c5:8b:1c:79:5d:40:78:a7:00:8a:
         d9:d7:25:62:9b:e6:15:d3:f9:9a:e2:c3:29:93:28:c0:5a:3d:
         af:77:ce:86:d1:db:2a:7c:28:21:f9:ad:e3:6a:cb:bf:94:6a:
         08:ab:b7:11:a2:ca:79:21:a3:bb:cc:91:96:14:37:4b:23:b2:
         c4:c0:de:19:63:fb:18:e6:61:5a:ca:79:d2:9e:80:8b:61:36:
         d9:2f:55:55:79:f5:88:4f:1a:ea:ae:3f:1d:48:eb:dc:07:d3:
         89:b7:ff:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:31 2026 by rpki-client