Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/46e34164-c87d-3f32-b680-9eb9bc3a4d78.roa
File:                     46e34164-c87d-3f32-b680-9eb9bc3a4d78.roa (raw, json)
Hash identifier:          dgkqYEWtCigzMyexHOLEJ0r3DnvRonh7pe5AaMHT5TI=
Subject key identifier:   57:F5:FD:DC:A7:C1:65:07:FD:52:BA:17:1E:CF:6B:3E:62:63:27:8C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DBE6B23F7FFB63A88DF2DD000
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/46e34164-c87d-3f32-b680-9eb9bc3a4d78.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22652
IP address blocks:        68.67.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:23:f7:ff:b6:3a:88:df:2d:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=3fdf8b44-24e9-420d-aafd-7e95e1dcfb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:37:86:2c:41:07:26:29:43:70:1e:68:0d:
                    3d:b7:21:86:21:e1:35:95:2e:28:63:13:7f:22:08:
                    51:d8:e3:11:74:93:57:20:a3:e3:bc:25:15:35:82:
                    c7:9a:4f:00:ee:42:87:8f:8b:15:43:c9:f5:f9:45:
                    ef:63:19:1b:df:eb:55:d3:41:b3:e4:9f:78:1f:30:
                    e5:08:d1:f7:e9:b5:21:5a:1a:34:05:59:bc:51:29:
                    4b:16:8a:61:e3:80:58:78:09:20:d9:b8:8e:47:ad:
                    e4:82:3b:62:af:fe:92:fb:33:f2:cd:b2:70:fe:92:
                    74:62:30:bd:c6:7f:06:b0:ab:a8:54:f9:7a:09:ff:
                    68:d6:ec:e5:ef:9d:0e:3c:e8:ae:75:81:af:12:5f:
                    fe:25:79:09:1d:2b:86:ad:79:46:34:3e:2f:3e:7a:
                    9c:c0:fc:39:4e:3b:cd:b0:b0:ae:4a:0c:13:91:b1:
                    05:e7:1d:01:6c:39:f4:fe:5b:0f:a9:84:63:c0:94:
                    c9:05:bb:ee:f9:4e:a9:7f:fe:a9:13:ee:e7:43:32:
                    d7:75:0b:04:ff:1f:71:e7:d2:3c:49:fb:6d:1d:e5:
                    37:38:da:24:38:3a:b6:c7:dd:b8:54:6a:e1:8b:2f:
                    8b:2c:ee:46:d6:c4:fa:a3:b1:af:bb:59:dc:62:46:
                    ce:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F5:FD:DC:A7:C1:65:07:FD:52:BA:17:1E:CF:6B:3E:62:63:27:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/46e34164-c87d-3f32-b680-9eb9bc3a4d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:de:4f:8b:b9:54:09:96:72:49:3b:1c:df:34:cd:dc:2c:64:
         6f:06:ea:19:d0:92:a1:15:c0:da:91:22:6f:b3:97:1b:ff:40:
         d4:e3:ed:53:63:fc:49:92:20:69:2c:a2:bd:6b:d5:cc:e5:3c:
         82:9c:22:5c:56:d6:de:45:42:2d:2e:81:af:e2:c6:00:27:04:
         c5:67:27:fe:8a:d2:6f:f6:e4:22:88:15:33:a6:9c:da:fd:a3:
         bd:17:2e:1e:12:6e:4f:66:a0:19:c0:e2:3f:f6:f6:3d:11:a5:
         a0:76:49:1e:d6:5c:42:dd:f6:1a:99:72:04:90:45:10:57:00:
         bf:01:bd:5c:eb:d7:46:84:01:f6:5e:56:b8:ff:ce:02:01:db:
         78:c5:c5:45:86:b5:95:33:e5:90:4b:28:08:40:e2:37:56:dc:
         e5:d0:43:8c:9a:71:27:93:04:9d:87:b3:97:71:81:57:7b:77:
         7b:da:ba:80:bc:b1:1e:2f:41:07:38:41:d5:3a:79:a6:8b:da:
         49:8d:be:5a:00:c9:e6:c5:f8:1a:60:be:85:50:53:22:60:76:
         ff:7d:b4:46:99:ea:f3:f9:e9:50:dc:7e:78:ac:60:20:0d:0c:
         33:a3:4a:f2:f0:31:e7:a3:7a:7c:24:47:a5:80:04:3a:08:47:
         e1:fc:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 19:29:27 2026 by rpki-client