Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
File:                     f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa (raw, json)
Hash identifier:          SyKXAMf8X+Z3XuVqdg5OfSYhY5CjoislbOqkgtVs1j4=
Subject key identifier:   49:3F:D3:C6:65:7F:8E:D0:36:44:E8:47:84:9A:20:E1:C1:9D:24:E0
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584EDC920BDA3EB34DE95EA7FEC0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     25899
IP address blocks:        67.59.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:0b:da:3e:b3:4d:e9:5e:a7:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=c3faa6ad-808f-43e0-b403-fade545627cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b3:80:f5:4e:76:0e:51:95:b9:6b:81:35:13:
                    16:58:bb:dc:5c:d6:41:1a:a0:23:9f:d6:40:1b:37:
                    a3:04:f9:83:3d:7e:7f:82:66:f7:72:82:ac:91:70:
                    aa:0c:c6:53:7c:88:45:80:ad:5c:82:c8:93:38:7b:
                    ac:8f:73:2d:d3:2a:84:69:84:d4:37:7f:3c:0b:96:
                    a2:37:68:cd:fc:ba:2e:d2:6c:45:cd:25:10:81:0d:
                    b4:28:3c:e4:5c:d7:79:b1:1e:fb:f8:28:2c:13:a2:
                    38:41:a3:6e:f6:82:9c:c6:21:c2:4b:3c:8c:ea:68:
                    a2:9a:6f:b1:6a:d2:49:09:8b:03:fd:76:15:c2:f8:
                    42:f5:38:d2:ea:e3:4a:89:3f:67:21:29:ec:95:9a:
                    1f:88:b7:db:2b:2c:f0:52:0e:18:75:11:e5:60:e8:
                    fc:90:05:1c:1d:88:be:0a:ac:e0:ac:54:5e:1d:46:
                    f7:8a:5d:ca:2a:ff:0d:c4:2c:84:60:e9:e4:a9:0e:
                    77:41:11:77:c3:57:94:8f:65:0b:8c:65:91:5d:db:
                    be:c2:00:cf:98:38:03:9b:bc:f9:cf:f1:b9:f8:25:
                    aa:4d:37:14:a1:ae:3f:e3:1b:78:54:df:49:10:27:
                    88:60:a3:8e:85:e6:5c:80:ea:1a:e6:db:e2:2e:f6:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:D3:C6:65:7F:8E:D0:36:44:E8:47:84:9A:20:E1:C1:9D:24:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:87:cd:88:90:dc:68:01:e9:d4:6e:04:cf:af:a1:1c:e3:58:
         20:3a:31:55:ce:cc:48:fa:36:9c:7d:3a:1d:7c:af:b7:9f:d4:
         dc:39:84:3a:2d:07:ec:15:75:f4:4a:58:f1:c5:42:61:c8:0f:
         08:71:9c:ed:21:11:d6:c5:61:be:06:a5:9b:b4:65:f3:a2:a1:
         03:2d:f8:03:dd:99:5d:74:6b:73:c4:16:77:4a:70:66:6f:e5:
         f3:00:ec:63:f0:d2:3f:7b:c8:ed:72:5c:13:98:bd:78:20:bf:
         57:03:88:a2:f9:6c:19:a3:1c:04:e4:26:4d:06:e8:b2:e2:d3:
         cd:b2:bb:7f:0e:19:67:1c:eb:79:ca:8d:c0:55:f1:fd:b2:c4:
         45:21:43:68:de:ad:2c:d5:cd:4e:89:0b:78:11:2b:f9:3b:50:
         ec:78:ac:7d:d7:df:0d:e1:17:c9:07:2e:d0:40:32:9b:f9:a9:
         01:1a:80:98:8e:81:74:71:e7:c8:09:a0:e6:49:c8:b2:00:4b:
         b5:ab:b4:a9:d4:44:0c:3d:72:81:7e:6f:30:16:99:75:50:d5:
         db:ce:dc:82:41:04:d7:34:49:c0:12:72:c7:9c:75:1f:ba:08:
         f0:f0:e0:f9:d7:bd:b0:77:7b:a9:e0:c9:1a:5d:11:bb:ca:3b:
         1a:a9:64:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:23 2026 by rpki-client