Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa
File:                     7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (raw, json)
Hash identifier:          XJkr5fnvRSagS6VRyvNO93OrrvYSfNfOo6AWz9wlhdY=
Subject key identifier:   35:5E:56:45:0B:30:8B:CF:B8:3F:E6:69:4D:68:60:D6:E2:28:F2:9A
Certificate issuer:       /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial:       010D0C9F4328584D2644A7DEF491737D8E220600
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     149522
IP address blocks:        68.69.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a7:de:f4:91:73:7d:8e:22:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=11502776-df81-4936-b315-7f3ee3c2e8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:1b:41:df:5a:86:0a:ed:5e:ff:24:d6:08:
                    70:e7:c3:ed:e2:53:b1:a6:75:d8:d7:c8:bb:3a:d1:
                    60:15:2d:7a:ee:cd:96:76:57:a6:3c:29:f0:b3:a8:
                    a2:fb:4f:7c:dc:c5:56:ef:83:af:2b:32:59:a3:e2:
                    13:61:3b:c7:7a:ef:23:a4:78:47:75:88:8b:6c:4a:
                    4d:c9:87:3e:d7:a2:74:54:17:8f:bf:fb:94:17:9b:
                    bf:57:7b:e9:96:5f:84:9c:fa:87:65:09:17:90:51:
                    c4:2b:a1:67:d9:b4:01:ba:f3:5b:7f:be:ac:d4:93:
                    e9:78:1c:4d:c2:d4:10:5d:81:50:90:45:77:4b:fd:
                    1c:55:2d:d3:33:0a:6b:c9:59:4f:86:12:47:c1:e8:
                    b5:0c:ab:ad:f3:18:d9:d5:cc:6e:35:3f:2a:5e:40:
                    9e:ee:67:ea:56:95:8c:f8:25:35:8d:02:2d:17:a2:
                    a2:95:81:84:e2:a5:39:41:f3:27:63:59:5c:41:d7:
                    a4:be:e6:24:2d:3f:6a:13:1e:81:26:42:12:20:cf:
                    63:34:19:6b:be:80:51:8e:50:e6:9e:6e:8a:76:a6:
                    8e:6f:64:58:6d:a4:9f:42:2a:35:ff:1e:3e:cb:ab:
                    d5:f0:7f:55:35:93:5a:a3:27:ff:85:17:67:8b:a3:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5E:56:45:0B:30:8B:CF:B8:3F:E6:69:4D:68:60:D6:E2:28:F2:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl

            X509v3 Authority Key Identifier:
                keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:11:0f:d4:31:1c:1b:09:d4:c5:cf:81:38:81:a9:96:40:9b:
         f8:0f:8b:de:e9:c8:f3:d5:91:a2:21:c0:ce:5c:80:80:01:6c:
         f0:a7:0d:ca:e5:ed:ba:70:7b:6f:72:e9:f5:e9:0c:76:46:fa:
         3c:6b:a0:f6:3e:25:c5:0e:d3:54:fc:a4:7d:ad:68:e1:3b:fe:
         6c:ed:68:52:55:e4:bf:e2:ee:b8:9d:65:7e:7f:72:ac:12:5c:
         a9:12:c6:a1:05:cf:e0:a0:aa:66:df:bf:7a:66:ee:96:df:e3:
         cb:39:86:f3:ec:e4:63:91:1a:52:2b:35:f3:e4:b4:8e:3b:1e:
         33:c0:30:03:eb:11:40:a8:87:e6:3f:0e:3a:6a:35:44:b6:12:
         78:33:c8:59:11:43:6b:8d:af:f8:f7:3b:73:a2:11:ed:cc:c1:
         16:d9:9c:59:46:20:16:e0:5f:a0:8a:b3:f1:b0:c8:1e:2b:d4:
         95:0a:9c:a0:8f:8a:07:3e:48:a1:b4:01:07:29:fa:ea:0b:41:
         ef:f0:54:0c:b1:1f:50:da:c6:28:de:00:81:33:1f:61:4b:9a:
         4b:f6:10:e9:d3:63:09:7c:0e:6d:9d:15:fd:1f:8a:65:bf:54:
         a4:4b:4a:aa:fe:2f:38:17:92:f3:db:a6:23:ae:f2:41:6c:0f:
         f3:20:81:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:50:28 2026 by rpki-client