Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/068e038e-0567-35aa-b5c7-53362ab55471.roa
File:                     068e038e-0567-35aa-b5c7-53362ab55471.roa (raw, json)
Hash identifier:          cd6Vv274bS018tqd6zJ1nODsGBW6uV4A3Q9a+tVzBWs=
Subject key identifier:   38:B2:6E:10:1D:F8:F7:3F:4F:C6:53:80:6A:40:AD:50:DA:4A:06:5F
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584ED86492259710022B3380BF80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/068e038e-0567-35aa-b5c7-53362ab55471.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     35039
IP address blocks:        157.133.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:92:25:97:10:02:2b:33:80:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=a0d9683a-1804-40e0-ab6f-7ef84364677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:b1:6f:5e:5b:61:8f:b3:5a:fe:b6:8b:2f:
                    7a:25:a7:e1:ad:a6:5c:5c:1e:dd:43:c2:e0:3c:92:
                    83:46:e7:8e:18:83:2a:de:87:72:2b:c4:1e:d9:b9:
                    d7:70:9e:53:ea:4f:d4:0f:9a:ed:35:3e:3f:4e:7d:
                    24:4f:21:94:10:e8:41:40:c1:35:5c:97:ee:42:1c:
                    0c:2a:09:4f:5c:83:50:07:40:f2:40:0c:38:55:c6:
                    95:4a:36:02:60:24:d4:55:c0:4a:44:f3:82:f1:23:
                    c4:39:c4:48:54:1a:c1:14:a3:5a:4d:b2:9a:e0:d7:
                    59:21:2d:79:fd:ec:0b:77:e4:87:81:2d:a3:ad:62:
                    7b:db:62:ad:20:b0:51:b0:4f:ef:f4:5f:1a:a0:a3:
                    36:f2:df:0a:25:23:06:b9:b1:fa:97:8b:1e:b9:42:
                    07:02:e6:09:fe:5c:75:6e:ff:e2:06:f3:eb:87:09:
                    04:e6:6e:fb:45:64:0d:41:f2:6c:7a:bf:84:d4:41:
                    05:bf:0a:7c:4a:29:8a:43:cb:43:5a:ef:20:73:d1:
                    74:b0:32:29:58:b2:e4:98:8d:1c:f0:86:0e:41:d0:
                    b8:9d:3a:66:9b:ce:74:a2:33:2f:01:8f:99:49:a5:
                    39:6c:59:66:c9:91:ba:ea:3b:34:1e:4b:c5:f2:26:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:6E:10:1D:F8:F7:3F:4F:C6:53:80:6A:40:AD:50:DA:4A:06:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/068e038e-0567-35aa-b5c7-53362ab55471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:47:f5:10:fe:42:c6:15:9b:c3:27:3a:68:fa:6f:90:66:22:
         41:a8:cf:87:d2:1c:c7:70:e5:77:dc:6d:fa:b9:e5:b6:ee:88:
         76:46:cc:ec:84:12:d6:fb:45:3a:01:e7:2a:a1:ed:bc:a1:6a:
         ab:9c:b5:ed:10:7d:65:4c:27:44:8f:a5:4c:05:ec:be:1f:cd:
         3a:9c:6d:ee:1a:b7:c3:86:02:52:69:f7:fb:a5:e3:60:23:55:
         cb:41:1b:33:e0:82:68:18:a7:56:17:c6:82:90:5e:2f:94:b0:
         eb:92:52:7f:04:5f:9b:6e:c2:dd:6d:5e:53:4f:ad:8a:0f:e7:
         c7:d9:7e:a3:bb:15:13:29:5a:65:76:f7:01:70:29:99:7d:4e:
         4d:67:d5:d3:bd:e4:23:38:64:3d:58:fd:dd:8d:74:9d:bf:0f:
         88:2f:fe:8f:71:9a:30:83:c7:87:30:b8:73:75:6b:a6:bb:41:
         b3:9e:15:5f:a1:f3:95:32:06:16:23:e4:b5:0b:df:db:d9:1a:
         4a:1b:21:fc:ea:cd:21:2a:c0:6f:47:29:7e:9e:30:e3:7e:2b:
         d3:c6:e7:67:ce:d3:20:7b:73:bd:dd:60:73:cb:bf:2d:9c:80:
         4d:21:e2:06:7a:ad:6f:76:8a:c4:90:ff:ae:7d:dd:14:11:b4:
         c8:a2:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:46:22 2026 by rpki-client