Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/6425c1bb-2f03-39f2-b3cc-ae15174b10ad.roa
File:                     6425c1bb-2f03-39f2-b3cc-ae15174b10ad.roa (raw, json)
Hash identifier:          0ABabjLacL4XgXaWjoqwpR+oj+bIsclr+6Kg3jL6uV8=
Subject key identifier:   48:58:A5:D2:26:A2:37:13:FA:8C:AD:E8:DD:1C:68:2B:77:67:25:47
Certificate issuer:       /CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
Certificate serial:       010D0C9F4328584EB846F5054F88E674F1E6AC20
Authority key identifier: D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/6425c1bb-2f03-39f2-b3cc-ae15174b10ad.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     1299
IP address blocks:        68.235.160.0/24 maxlen: 24
                          68.235.161.0/24 maxlen: 24
                          68.235.162.0/24 maxlen: 24
                          68.235.163.0/24 maxlen: 24
                          68.235.164.0/24 maxlen: 24
                          68.235.165.0/24 maxlen: 24
                          68.235.166.0/24 maxlen: 24
                          68.235.167.0/24 maxlen: 24
                          68.235.168.0/24 maxlen: 24
                          68.235.169.0/24 maxlen: 24
                          68.235.170.0/24 maxlen: 24
                          68.235.171.0/24 maxlen: 24
                          68.235.172.0/24 maxlen: 24
                          68.235.173.0/24 maxlen: 24
                          68.235.174.0/24 maxlen: 24
                          68.235.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:46:f5:05:4f:88:e6:74:f1:e6:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1c116b-b42c-4d90-ac66-1ef8075303d6
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=5050e85f-f8c3-4038-9739-d2385480c182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:80:3a:18:f1:7f:2a:0e:0c:2a:10:a6:8d:
                    e9:41:96:26:a9:de:60:43:b1:ba:01:ed:ec:9f:0b:
                    4e:ac:e4:4e:f2:76:8e:b4:65:36:62:4d:d2:1e:17:
                    b7:90:72:e3:3f:3a:89:61:a3:96:95:8c:0b:77:38:
                    a7:78:c2:6f:54:b2:f9:be:36:60:79:f9:ec:09:b0:
                    79:5b:d6:f7:2a:56:e6:ef:a6:a9:74:4a:4b:16:ab:
                    3a:3f:fc:3e:9c:67:19:8e:80:4d:2a:61:bb:76:5d:
                    a9:a3:5f:e2:23:97:7a:f0:2b:98:6a:07:b0:9d:4d:
                    f6:47:c9:b0:87:20:34:fe:73:cf:52:95:32:0f:10:
                    ea:6e:a4:1f:9c:eb:aa:3e:16:da:2a:29:ce:86:ad:
                    96:bf:f6:5a:f3:6e:9d:c2:63:00:f5:49:fc:0c:30:
                    c5:b9:7b:ae:e0:4d:77:e6:c1:55:fe:f3:f3:97:2c:
                    96:7b:24:c5:7a:60:bb:1a:ce:b6:f7:c1:fc:ac:44:
                    fc:d4:20:96:42:49:58:cd:c6:e5:97:56:39:6e:35:
                    43:cb:54:6d:4b:2f:97:ed:85:c4:27:d0:42:33:31:
                    f7:1b:76:de:ec:20:3a:ee:e4:0d:26:cd:e8:a3:40:
                    58:0e:e0:5f:93:f6:6a:93:73:ff:15:26:c0:5a:3c:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:58:A5:D2:26:A2:37:13:FA:8C:AD:E8:DD:1C:68:2B:77:67:25:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/6425c1bb-2f03-39f2-b3cc-ae15174b10ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6/ed1c116b-b42c-4d90-ac66-1ef8075303d6.crl

            X509v3 Authority Key Identifier:
                keyid:D4:EB:D8:25:07:E3:73:BD:26:AA:78:E8:41:70:E7:A7:AA:F0:0C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ed1c116b-b42c-4d90-ac66-1ef8075303d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.235.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:49:28:ab:12:f1:42:d7:ee:d8:3d:f3:8f:81:0d:14:b1:76:
         54:05:d8:d1:33:26:dd:ef:b4:12:52:b4:aa:2e:d1:9e:f5:1d:
         86:b0:c0:13:b6:db:b8:31:00:f7:06:fe:4f:51:e5:37:0b:6e:
         95:ef:e5:0d:37:46:27:e2:73:5a:f9:6a:1f:27:f1:c2:57:fc:
         4b:00:1b:53:60:11:04:09:46:bf:a3:cc:aa:1c:dc:d9:cf:db:
         5e:01:82:25:bf:06:18:76:36:ac:c3:41:b7:b6:af:04:33:0b:
         3c:2c:0a:d5:b2:2f:df:14:81:01:67:74:08:e2:09:83:4b:5c:
         ef:9c:1e:1b:a7:63:08:7f:a6:e8:64:b4:64:d9:e9:d4:75:18:
         d5:f9:2b:7c:3a:f5:98:96:9e:ca:bc:50:e4:32:df:64:fc:bd:
         c1:90:fb:1a:d2:92:58:dc:92:ca:04:53:2b:ec:23:84:7b:76:
         01:84:0f:0c:96:f6:ef:d0:66:7b:de:49:0a:1a:41:d6:c4:85:
         bc:cc:97:05:6c:cd:12:95:7f:b6:5f:62:68:a8:aa:ec:3a:fc:
         57:ab:67:67:e9:53:1c:16:d8:62:69:4c:36:23:f8:0b:e7:5a:
         70:fa:39:8d:d2:bc:be:b6:b1:8d:c9:c3:48:93:60:1e:02:86:
         04:e1:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:24:53 2026 by rpki-client