Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa
File:                     864d2064-093d-302b-a8f7-e6d5c44327c5.roa (raw, json)
Hash identifier:          ip9bOHZfw8J+v9+445D1IOTkcqPZPTXcU6xvE8d36d8=
Subject key identifier:   B1:0F:17:36:FF:EE:33:62:06:28:55:62:E4:19:5E:44:B6:F0:8A:22
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F85785D036F4B39659347FC80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     20001
IP address blocks:        68.182.208.0/22 maxlen: 22
                          68.182.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:5d:03:6f:4b:39:65:93:47:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=a3e63aae-5645-4c06-b216-8e5e1248c0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:05:7c:30:c0:70:20:c5:b8:6d:83:3b:21:
                    e2:ce:c4:74:fa:7b:58:a9:e2:29:06:de:ad:e8:b3:
                    55:97:71:2d:84:ae:ce:84:e5:ee:b9:2c:62:c3:44:
                    7a:18:5c:d7:a6:4e:4d:0d:86:80:65:6a:b5:40:e2:
                    d9:c9:4e:79:e1:89:8f:e3:4c:f6:57:3a:2a:22:be:
                    7a:51:f2:3c:d8:37:89:9d:aa:c9:08:45:77:e9:e3:
                    72:b7:44:a5:55:9f:a7:e4:bd:9c:64:16:fa:60:fb:
                    f9:bd:85:e1:d5:f4:8b:2a:e3:14:64:08:94:39:df:
                    92:e3:e7:6e:0a:20:77:4f:c3:5b:f4:3a:3e:ac:4d:
                    6c:a0:67:92:06:29:a8:15:f9:8b:a4:1f:b2:b6:45:
                    35:e2:9d:c6:8b:73:e9:b2:95:69:a2:7e:de:56:c5:
                    02:21:45:57:13:69:15:b7:a1:6c:64:80:a2:80:43:
                    84:b7:59:0a:0b:4a:74:a8:68:09:12:ad:d7:3c:1a:
                    66:94:56:ec:04:cd:aa:06:0a:a7:82:9b:64:1c:00:
                    15:7b:04:1c:7f:f8:82:55:1c:99:2e:7e:ab:3f:f7:
                    7b:d1:61:bf:64:da:e1:59:17:fc:08:c1:76:ec:c6:
                    70:c0:f2:e4:7a:7e:a5:1d:85:dc:1e:80:bc:5d:7d:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0F:17:36:FF:EE:33:62:06:28:55:62:E4:19:5E:44:B6:F0:8A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/864d2064-093d-302b-a8f7-e6d5c44327c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.208.0/22
                  68.182.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:c7:78:69:92:e3:09:70:1a:74:b2:cc:5a:35:80:f8:31:4c:
         1d:6a:a3:4f:df:ae:05:57:dc:83:9b:d6:95:34:d5:76:f2:7c:
         8c:22:3b:5c:37:df:a2:40:71:28:88:6f:44:7b:e0:dc:98:d6:
         c7:a1:20:36:1a:fc:d4:f5:48:bc:e8:93:a7:ab:a8:0c:db:7e:
         1f:92:9c:40:d7:37:0a:a1:53:ff:b9:49:50:5e:53:6b:a7:06:
         d0:0e:36:eb:39:48:0c:35:4a:65:42:72:08:23:9a:39:72:aa:
         04:fd:d2:85:db:69:45:b5:a9:20:9f:e8:8a:7a:0d:24:29:ac:
         8c:15:c2:86:07:f1:14:b5:46:aa:3a:00:93:37:dd:ee:e5:15:
         e2:2e:7f:df:37:3e:ec:5c:13:06:5c:d5:c1:a6:6e:dc:c4:f8:
         1a:77:1f:28:66:f5:8c:df:7a:d4:89:98:4c:e6:12:93:0c:54:
         db:60:1a:f2:b8:b4:94:65:df:2e:29:82:83:cf:f7:0a:15:66:
         b1:8b:44:db:cd:e5:f2:60:22:40:81:9c:c0:a7:45:35:32:ec:
         0f:55:d8:33:0d:b5:9c:0a:84:cf:f1:71:fa:42:25:0d:24:cf:
         20:2b:34:23:59:cf:6c:83:f8:58:de:97:30:a7:a7:f7:88:28:
         4e:af:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:30 2026 by rpki-client