Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
File:                     ebce2800-71e6-302f-a9a7-77ba35072652.roa (raw, json)
Hash identifier:          +1OH1QtLxiLqJv/R68WL77TRYhapm5t2Wci9DPZUkHk=
Subject key identifier:   38:4A:0C:D0:79:BE:49:78:D9:45:95:E6:F6:2F:2E:61:35:CC:AF:48
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584DD35B05588B2B55A323E3CF00
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     15267
IP address blocks:        68.69.224.0/19 maxlen: 19
                          68.69.224.0/20 maxlen: 20
                          68.69.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:05:58:8b:2b:55:a3:23:e3:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=7d963925-7e55-411a-b781-f42e82a3da26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:aa:7b:e2:9b:c7:90:e5:e2:5a:81:21:e7:
                    bb:7e:56:d7:5f:d1:15:42:bb:fd:38:59:65:3f:58:
                    ba:51:80:5a:bf:3e:60:9e:f0:87:d2:36:01:e6:df:
                    80:3a:62:f3:fe:3f:a5:0c:f6:ec:d7:5a:5e:db:3a:
                    e3:44:4d:b2:dc:eb:1a:a9:2a:04:34:d0:ed:db:a6:
                    e8:bd:ef:c9:d9:6d:66:1b:dc:3f:af:9c:95:74:cc:
                    2a:86:73:1d:f9:a9:63:17:8c:fd:7f:f8:9d:6b:bd:
                    05:88:3d:ed:a8:5c:c0:21:a7:0f:17:9a:13:84:f2:
                    97:d4:61:9b:84:bf:a2:3e:bd:9a:0b:90:e0:0f:ba:
                    cf:fc:54:ce:7e:98:da:3a:8f:65:a0:fb:6c:fb:09:
                    63:9a:c3:18:8c:58:a6:8f:e6:9b:88:5f:83:ca:05:
                    59:c5:a2:e3:6c:2b:cf:14:c0:69:3a:9a:7c:f1:b0:
                    c0:92:60:47:7c:d9:8d:a7:34:cc:43:ef:b4:4d:d8:
                    40:79:39:23:df:9a:28:a3:19:42:f5:ad:01:97:de:
                    8b:7e:56:a2:33:50:b9:ae:c4:9e:9f:88:4c:b5:d4:
                    0a:95:30:8c:22:36:f5:dd:cb:aa:3e:66:e7:b7:90:
                    a0:3b:64:91:ce:ee:ad:52:fe:10:7d:4b:a7:9d:f5:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4A:0C:D0:79:BE:49:78:D9:45:95:E6:F6:2F:2E:61:35:CC:AF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c8:29:d6:fd:f6:dc:64:cf:0b:5c:7a:84:64:e9:88:46:2d:
         91:df:bd:df:27:77:28:bb:3a:4d:f6:89:eb:a7:13:0b:50:67:
         1a:0d:e9:40:5a:ea:81:34:2b:bc:1f:05:41:8d:0c:7d:ec:1a:
         b3:25:c0:45:2c:65:1f:b4:16:c8:9e:3c:9e:88:20:62:5c:00:
         24:bf:1f:da:4b:53:32:ae:7c:36:77:c6:16:34:51:cf:3f:45:
         aa:03:10:f9:33:16:9e:d5:77:a1:17:59:a0:b5:46:9c:ab:f0:
         11:4f:a4:84:17:5b:74:8a:31:4b:0f:6b:f4:2d:37:f1:5f:7b:
         20:dd:a4:68:5c:93:c1:90:9b:53:15:4a:ed:e3:c7:0c:4f:06:
         c5:ee:dc:48:50:c4:f2:6e:fb:d0:73:ef:8b:9b:6c:eb:13:bd:
         fe:77:79:2a:cd:dc:f7:06:42:01:51:9f:90:dd:02:5e:f1:71:
         6b:f4:b6:3d:00:d0:83:5a:31:5b:4c:0e:bf:d8:fa:0a:dc:8a:
         9a:ac:e0:78:9d:d5:64:79:69:29:4f:38:a8:39:b0:39:23:1e:
         af:e0:b6:d0:29:21:0b:0e:8d:bd:90:e6:d9:d3:99:8b:8d:45:
         17:74:28:c3:e7:2a:d1:a0:0b:8e:00:db:3d:2f:25:b8:d0:67:
         03:3b:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:03:04 2026 by rpki-client