Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/3a6ebd96-fb3e-3a6c-ab68-3d1f1effa007.roa
File:                     3a6ebd96-fb3e-3a6c-ab68-3d1f1effa007.roa (raw, json)
Hash identifier:          O7slSc7A26y8L5z/7j6qk3WsUV6ESMUZLjvuUXF3MTc=
Subject key identifier:   D9:FE:F8:20:1F:ED:5F:CF:B7:AA:2E:C0:71:0A:20:DF:41:FE:24:A0
Certificate issuer:       /CN=69ad0bf6-41e7-4013-90d7-0bb2735b7bc8
Certificate serial:       010D0C9F4328584F03A76D302ACE35276BA1A3F0
Authority key identifier: 2F:94:5A:96:C2:04:52:DC:31:D5:70:D4:4B:66:76:B6:A4:C5:E9:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/3a6ebd96-fb3e-3a6c-ab68-3d1f1effa007.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     53723
IP address blocks:        66.85.68.0/24 maxlen: 24
                          2602:f60b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:6d:30:2a:ce:35:27:6b:a1:a3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ad0bf6-41e7-4013-90d7-0bb2735b7bc8
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=35e690db-2b28-4d9c-bc17-0458b226027f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:f8:e4:0b:88:ce:6f:16:49:15:5b:e5:07:
                    77:93:a4:d1:a2:b3:05:28:21:98:16:d7:db:ec:31:
                    c9:c9:59:d2:04:c8:bf:8c:8d:d5:04:13:5d:d1:06:
                    b6:32:da:35:b2:1d:cd:54:40:44:f3:c5:d3:c4:3b:
                    bd:24:33:b3:d2:23:30:3f:6d:aa:12:72:84:85:e8:
                    95:bb:0c:3e:5d:1a:86:7a:49:11:05:24:ba:01:26:
                    23:b0:ab:35:06:7d:f3:d1:77:96:50:1a:55:c9:f8:
                    61:1c:e4:17:68:2d:57:34:96:86:a9:76:34:50:34:
                    64:d0:6f:12:fc:3f:c7:b6:11:a8:1c:88:ee:04:56:
                    dc:f0:02:70:18:d0:fd:27:b3:29:ee:c7:ee:8b:a0:
                    c1:32:a9:c6:6a:67:7a:43:e0:a8:45:d3:51:3d:cc:
                    00:38:13:cd:d4:1a:3c:d0:70:a5:ae:f8:b1:a3:86:
                    2c:fe:52:d2:b6:7e:23:ec:5a:03:40:67:a3:63:5f:
                    77:c4:47:2d:2e:07:ce:43:10:d1:c9:6a:ee:13:92:
                    29:75:5a:d9:5b:79:fd:e4:5b:bb:04:b7:b2:94:0b:
                    15:d2:54:16:af:87:c6:d8:be:ed:86:f8:1b:8b:6b:
                    7e:9f:11:58:1b:07:c3:36:60:19:0a:e3:d9:56:41:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FE:F8:20:1F:ED:5F:CF:B7:AA:2E:C0:71:0A:20:DF:41:FE:24:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/3a6ebd96-fb3e-3a6c-ab68-3d1f1effa007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.crl

            X509v3 Authority Key Identifier:
                keyid:2F:94:5A:96:C2:04:52:DC:31:D5:70:D4:4B:66:76:B6:A4:C5:E9:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/69ad0bf6-41e7-4013-90d7-0bb2735b7bc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.68.0/24
                IPv6:
                  2602:f60b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:2e:8b:cf:f4:c0:ac:a6:5f:06:4c:6b:2e:82:e7:28:e1:
         70:32:39:29:98:83:26:2f:fb:2c:1a:88:d9:9f:b3:55:53:31:
         bf:94:f2:e7:34:b8:c1:1a:22:fd:f5:b7:83:26:be:67:fb:22:
         5a:9c:4c:11:b6:31:7d:4d:94:82:e7:cf:81:c5:24:ce:72:dd:
         28:bd:9f:87:53:8f:b9:1b:db:4d:cb:42:fd:62:d7:c6:2e:c5:
         4d:7c:cb:a8:10:e8:ed:d2:d6:be:da:d9:dc:e7:b2:e6:08:ad:
         97:db:74:17:4d:10:fe:6b:8d:83:09:d5:c0:3e:99:41:73:d8:
         c5:75:32:a9:43:41:4e:80:59:9d:28:59:62:23:d1:72:3d:fe:
         ce:87:c3:cc:7d:58:42:b6:d6:c8:70:56:e7:c3:a7:2b:95:6f:
         79:87:28:cb:80:02:6b:27:79:81:54:76:33:37:a3:de:48:84:
         9d:b4:77:1b:bb:e9:53:f5:59:b5:2c:9c:fd:a8:48:48:63:67:
         e5:94:b4:23:ee:b5:4e:80:a2:b4:4d:22:c2:63:ae:14:88:58:
         fc:02:b3:82:4d:52:bd:9a:da:83:b8:62:62:e4:b7:f7:7f:46:
         42:2a:35:76:b3:1e:f1:d9:b2:30:bf:9e:9d:7b:36:5f:e5:4f:
         58:d1:04:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:05:00 2026 by rpki-client