Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8247ed75-5926-3358-bc46-1a354b78815c.roa
File:                     8247ed75-5926-3358-bc46-1a354b78815c.roa (raw, json)
Hash identifier:          xwr4yJm6OHezmgQFNe+eIGTgBms/yR0DCbZe2PxVfCI=
Subject key identifier:   A4:F7:E1:4B:28:05:46:19:F5:88:EB:B4:7B:10:0E:20:39:82:F9:73
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584E779A35B86AD0E1D4B9C4D100
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8247ed75-5926-3358-bc46-1a354b78815c.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     14477
IP address blocks:        68.70.48.0/24 maxlen: 24
                          68.70.49.0/24 maxlen: 24
                          68.70.50.0/24 maxlen: 24
                          68.70.51.0/24 maxlen: 24
                          68.70.52.0/24 maxlen: 24
                          68.70.53.0/24 maxlen: 24
                          68.70.54.0/24 maxlen: 24
                          68.70.55.0/24 maxlen: 24
                          68.70.57.0/24 maxlen: 24
                          68.70.60.0/24 maxlen: 24
                          68.70.61.0/24 maxlen: 24
                          68.70.62.0/24 maxlen: 24
                          68.70.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:35:b8:6a:d0:e1:d4:b9:c4:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=fa226024-9842-4f1b-93b1-dc5f0dc36384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:60:ec:1c:b9:bc:4d:71:8c:f9:7c:c2:e8:
                    67:f2:dd:32:7f:53:5b:a1:48:8d:de:c2:67:ea:f2:
                    3d:c3:91:7d:30:4a:e5:e2:52:c7:5d:b4:15:a0:e3:
                    dd:cd:80:68:43:c6:39:d2:1e:79:a8:ff:61:41:f7:
                    47:22:28:8a:d3:24:d0:fc:70:d5:42:02:52:ba:9c:
                    c9:ce:9b:90:4c:bd:30:4f:28:ff:01:0e:c9:04:5b:
                    36:a0:37:59:71:22:4f:3e:4f:77:09:b8:14:49:45:
                    52:ef:5b:21:4a:15:0d:5d:b8:48:88:c0:95:fe:f9:
                    08:09:4a:00:15:94:a8:d6:5a:bf:27:ff:e0:63:1f:
                    c6:e9:c3:a5:f8:62:91:8e:3b:49:d5:50:d7:88:80:
                    e4:76:7e:1a:89:1e:23:61:d2:00:a7:84:3e:14:66:
                    0d:f7:11:2d:5b:7b:ca:67:54:43:2b:a2:d3:28:fd:
                    2e:d4:02:0b:b4:1d:15:45:9a:72:03:13:52:0b:0b:
                    35:91:64:d0:fa:ab:ef:d3:a1:3a:cd:e4:62:4b:9a:
                    c4:65:48:30:c8:43:65:12:a2:30:9f:30:e9:0d:ec:
                    68:41:36:62:bb:f3:eb:1c:5d:ef:7c:6e:e4:67:90:
                    c0:75:9b:64:d4:73:29:3c:ee:42:b0:f1:1a:0b:f7:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:E1:4B:28:05:46:19:F5:88:EB:B4:7B:10:0E:20:39:82:F9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/8247ed75-5926-3358-bc46-1a354b78815c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.48.0/21
                  68.70.57.0/24
                  68.70.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:3c:0a:0f:50:30:66:5c:4c:9e:e9:83:c1:4d:b1:bf:83:
         cd:88:94:1b:a4:8c:0f:2b:12:c1:01:e9:a8:d2:bc:6c:06:1c:
         89:9f:bd:d3:25:42:ff:e2:36:bd:b0:d0:f4:68:50:8c:f3:65:
         8c:87:ea:59:f3:29:3b:15:e1:25:79:a2:73:76:81:1c:0b:f2:
         d7:cf:ed:ba:9b:cc:a7:7e:9d:34:f2:41:41:a2:e0:41:3e:fa:
         93:e8:1e:41:75:78:91:80:c6:f3:ce:6f:0b:03:72:4b:15:9d:
         e6:65:2f:18:c7:bb:40:4d:72:0a:9b:78:09:63:e6:07:6d:dc:
         fd:85:95:53:b3:10:68:d7:1a:0d:7a:06:73:95:be:10:ad:70:
         7c:e1:11:24:26:74:81:d6:73:a2:35:22:65:86:b0:7f:f6:ff:
         c8:e0:f2:6b:f4:7b:31:46:86:89:f2:35:52:b5:48:e8:03:85:
         11:94:59:08:bc:20:cc:0e:fe:69:0c:10:ea:7e:12:10:da:df:
         bf:c4:97:7b:1f:cc:78:99:f2:a1:fb:94:3e:de:31:53:67:3a:
         b6:e6:f4:3f:d5:51:ca:80:97:7b:d2:1b:8b:98:5a:83:2d:ef:
         e8:97:c6:c9:c3:aa:48:20:5e:45:1e:8f:2e:dd:e3:31:ad:b4:
         5a:f5:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 15:05:49 2026 by rpki-client