Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
File:                     7c39b49b-d4f3-3baf-902f-83a43c864e62.roa (raw, json)
Hash identifier:          bJNW/iiQfCkp0UZe9ZH4kPmmMwwtcemgLKop4pVBY/0=
Subject key identifier:   05:B9:C9:08:1D:50:28:D4:F8:4F:94:0E:25:41:57:C4:5D:DC:03:A8
Certificate issuer:       /CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Certificate serial:       010D0C9F4328584DA6B020E0C0DE386CF6E3BFD8
Authority key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     36704
IP address blocks:        138.67.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:20:e0:c0:de:38:6c:f6:e3:bf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=cd74f59b-a63b-4cbc-a439-e93ac2686cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:9a:8d:43:82:bc:01:c0:00:98:8d:50:e0:
                    70:bf:f0:8d:ff:24:09:09:1c:b6:20:bf:1e:7a:62:
                    4b:3b:bc:ac:b1:69:67:2f:cc:62:f0:56:c6:8c:21:
                    bc:af:a7:f8:21:d7:ed:a1:cb:a5:14:a3:d9:50:a0:
                    f7:e8:72:19:a0:21:d7:a4:81:18:a9:5c:e2:41:a8:
                    ef:20:e2:b2:d8:0d:87:12:b2:7a:46:6e:95:29:56:
                    3a:7a:2d:db:d2:54:1a:6e:fa:a3:23:e1:06:f7:cf:
                    7f:28:fd:c2:36:12:29:b7:27:e0:10:01:e6:0a:b8:
                    66:c7:c2:a2:a8:81:a0:ec:6f:33:ce:3c:13:94:67:
                    3c:cb:df:b2:3e:10:0f:e2:ec:3a:2e:73:97:90:4a:
                    1d:c4:1f:7d:99:fe:9c:ca:b7:94:b9:8f:8b:37:93:
                    5b:64:b0:1d:e0:63:82:29:91:ca:07:97:4c:9e:d9:
                    ad:41:04:30:0e:41:86:52:e6:07:82:a8:cc:5e:87:
                    23:3a:1f:22:64:16:5a:9c:90:32:f0:5e:61:11:14:
                    ea:16:d2:12:6d:29:95:9c:26:d6:c9:7b:56:6c:2f:
                    c0:d6:35:13:aa:1d:c5:9c:86:7b:99:38:6a:43:34:
                    58:90:03:6c:ac:3d:38:15:df:6d:3c:c6:45:29:01:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B9:C9:08:1D:50:28:D4:F8:4F:94:0E:25:41:57:C4:5D:DC:03:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:00:06:a7:e1:d3:2c:7e:92:15:07:7b:22:b1:dc:98:7c:
         2d:e1:65:b6:f5:87:ff:1b:2d:78:36:46:ef:2f:9c:cc:c3:e3:
         8d:41:71:07:7a:d0:95:09:53:c8:55:fb:38:fe:20:25:1a:0d:
         c2:91:eb:b0:13:0f:39:66:a7:f2:31:b0:17:05:34:fb:3d:2f:
         f5:9d:b4:30:01:db:a2:de:7c:c5:ba:23:d2:0e:e1:78:2a:60:
         87:ca:f5:54:2a:90:5a:19:32:61:ea:d3:b2:2a:bb:56:0b:3d:
         92:cf:f1:39:2a:26:31:6c:bf:69:77:a9:66:15:c9:b9:77:5d:
         d5:00:37:6b:84:6d:e2:26:96:5f:e4:18:15:54:60:a5:90:ef:
         19:73:22:46:d5:26:45:1b:d5:aa:31:e5:e0:9c:2d:cf:4b:c0:
         b5:00:8d:f1:ee:41:be:93:7a:c7:9d:0d:54:b7:d2:df:fd:ca:
         c7:cf:35:5c:8e:8a:f4:0e:3d:5a:1a:33:5c:2b:5a:e3:be:a6:
         74:2a:5a:0a:51:0b:de:00:ae:d4:ef:20:24:14:39:9e:60:58:
         f7:42:7f:1c:9f:5a:bc:c2:4b:9f:cc:c3:4c:b3:81:8d:83:5c:
         0f:30:28:57:c7:13:cb:62:39:0e:77:28:c3:24:93:55:27:7b:
         51:46:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:08 2026 by rpki-client