Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
File:                     11e64435-46b6-3862-bbed-e6b28cc92196.roa (raw, json)
Hash identifier:          lcEKJYodFiKxn/wnjyrouyw+VduJ3zWkk6aOXqN9jOE=
Subject key identifier:   9F:64:DC:89:84:2F:3F:AC:FB:78:1A:D5:01:64:ED:6E:1B:A3:B8:F7
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584D91C01C913E8921F61FC4BF80
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     394654
IP address blocks:        68.209.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1c:91:3e:89:21:f6:1f:c4:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=15fd5c7c-99a6-497f-beb6-8b92410d0f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:48:08:c3:a7:d0:03:29:ee:bd:52:f2:0b:
                    84:9a:94:7f:f8:3e:a5:b2:93:89:d6:7e:19:cf:53:
                    66:fc:44:1c:f5:15:f9:4e:08:a1:91:81:31:c5:a3:
                    39:23:a3:7f:0f:72:43:f7:c2:c6:02:15:29:73:03:
                    dc:77:af:a8:9c:92:dc:d1:0f:6d:6a:6f:5e:64:61:
                    f8:bb:df:17:bf:e6:f4:e7:71:e4:88:b7:df:e5:e5:
                    60:3c:76:45:96:e8:7d:4e:10:e6:72:1a:75:5a:be:
                    45:94:d5:39:d4:50:6a:23:5a:7d:6b:ea:0c:33:db:
                    64:b7:79:d2:54:01:1a:89:92:00:83:15:d2:b7:09:
                    8a:55:4b:aa:75:15:fe:51:0a:20:75:53:b5:54:ca:
                    55:64:c1:4a:3e:93:25:93:f7:5d:b4:8d:88:cc:9c:
                    50:1e:59:0f:c0:83:a3:e8:3e:51:90:7e:5d:02:bd:
                    6f:d0:d2:aa:72:14:fd:a7:b3:f1:dd:a6:3e:6a:91:
                    e1:de:7a:35:27:bd:d4:29:7f:e2:ad:01:7b:5c:d9:
                    65:43:f7:ce:96:e4:55:4a:dd:0e:3e:43:bd:a7:27:
                    6f:7a:47:f7:e5:bc:ab:39:e1:05:e7:28:b1:bf:78:
                    22:f2:f4:f9:16:13:70:51:6c:92:e6:33:f3:64:58:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:DC:89:84:2F:3F:AC:FB:78:1A:D5:01:64:ED:6E:1B:A3:B8:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/11e64435-46b6-3862-bbed-e6b28cc92196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.209.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:d6:01:c3:f9:9b:a7:7f:e7:10:08:47:f4:e1:ae:08:bf:
         25:6f:ac:42:83:01:da:0f:20:f6:5a:ec:13:8e:ef:db:41:49:
         3c:6b:dd:25:19:15:f2:ce:7e:2c:f7:74:94:fa:1b:20:b7:20:
         66:81:d0:7e:40:b1:84:19:ba:c3:c5:99:e2:e3:4d:51:a6:20:
         a1:ba:01:cb:95:91:d3:8a:07:f4:37:1f:f6:2d:e1:9d:d7:cf:
         11:d6:3f:d5:0a:62:6c:5b:8e:2e:33:bd:5d:a2:2a:54:bb:0d:
         6c:c6:df:40:65:99:2b:57:61:40:59:ae:4b:61:54:03:ea:e1:
         7c:22:b8:8f:2e:bc:27:ae:d6:8b:de:46:43:4c:b3:74:5c:b6:
         76:75:9e:95:c4:f6:17:ec:10:42:8a:e9:4e:2c:a5:0c:35:c9:
         3a:ed:ff:a3:50:08:0c:ec:5f:0f:b0:e0:3a:d7:1c:c5:0a:a8:
         06:65:57:bf:09:e4:2e:72:f8:5a:b8:cf:74:cd:54:84:b3:eb:
         f7:c8:b2:62:fa:dd:4c:fb:d4:6a:83:29:b8:98:5c:f2:e1:bb:
         78:0e:39:6a:2e:28:16:df:7a:b2:1c:4c:d9:84:04:71:51:a3:
         77:be:2d:23:fa:cd:e7:e6:4d:76:52:b1:54:13:bb:82:01:18:
         9f:63:08:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:53 2026 by rpki-client