Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/6df6d76c-714d-3694-9253-5c84c3a4342c.roa
File:                     6df6d76c-714d-3694-9253-5c84c3a4342c.roa (raw, json)
Hash identifier:          s5yWlWmDgD4xDLeu+18gELOwwDgEeu/N0PrkTQRxw4I=
Subject key identifier:   47:32:D2:81:E2:93:BE:88:AC:4E:94:1B:75:2F:CC:46:20:97:A0:EA
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584CF4222E6A1CB94AC3A7FDC230
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/6df6d76c-714d-3694-9253-5c84c3a4342c.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     393238
IP address blocks:        68.169.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:2e:6a:1c:b9:4a:c3:a7:fd:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=749979ab-d26b-4e59-9e9a-7580e3e25196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:e8:5e:47:52:2d:9b:91:5c:7a:96:6f:19:
                    b0:08:d5:64:99:ca:25:8a:ba:05:bf:a1:6c:52:21:
                    a1:af:02:4f:fa:39:0e:90:63:30:bb:17:df:5e:8b:
                    24:48:01:84:c2:16:a9:a5:3a:17:ba:e2:6e:3e:4b:
                    36:87:ba:43:be:50:39:2e:a3:fb:f9:e2:c5:84:a6:
                    55:6b:50:fb:48:91:1d:75:58:23:7a:ce:76:b9:21:
                    f4:d1:a8:83:93:3c:f9:35:e8:cd:6e:a3:7c:12:55:
                    6c:f2:a3:4e:25:10:53:47:06:8b:2d:5b:8f:50:8a:
                    bb:67:33:94:0c:0f:52:1f:6c:00:bd:56:ff:b7:e2:
                    54:a9:8d:f9:09:e9:fe:8f:b7:d5:43:1b:14:a1:97:
                    01:d2:f0:2f:32:34:d0:5e:37:95:58:6f:bb:cf:bf:
                    19:85:fc:5f:de:9f:a2:d4:0f:60:86:18:0f:3a:cc:
                    12:28:40:63:cf:09:01:7b:4d:93:d2:8c:da:a5:c7:
                    96:7b:90:03:61:cd:87:89:03:4f:c9:0f:f9:d1:d2:
                    f3:47:da:2b:fe:37:9b:cc:5c:b2:c9:1d:75:3e:75:
                    18:ac:d8:67:e2:5f:50:26:f5:30:22:a5:c3:a3:81:
                    b3:47:f3:db:52:4b:40:c3:5b:36:d8:ba:4f:6b:6e:
                    37:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:32:D2:81:E2:93:BE:88:AC:4E:94:1B:75:2F:CC:46:20:97:A0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/6df6d76c-714d-3694-9253-5c84c3a4342c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:08:61:3e:5b:3d:d2:fe:02:2b:fd:52:fc:c2:92:47:01:20:
         84:52:f8:68:8d:2d:d2:6b:e7:d2:50:36:a0:0e:23:32:82:27:
         11:d3:f0:b9:26:d8:bd:55:33:da:6e:34:37:35:0d:16:65:70:
         9a:a0:a3:2c:a5:e9:bf:0f:bd:3e:11:75:e5:d2:cf:e0:7f:76:
         f1:17:6d:52:f1:c8:cd:34:6f:b0:d0:1d:ed:9b:82:1b:36:f4:
         45:dd:34:6e:ea:0e:09:2c:ab:40:3e:51:38:6d:e9:90:27:3d:
         cb:b7:eb:a3:ef:3f:c0:54:ad:72:ea:35:72:71:16:cc:a8:05:
         c5:a9:e8:ab:23:a2:9a:03:68:71:50:e8:f5:6e:67:bc:8f:f4:
         04:a4:d2:92:9c:e2:a1:0d:3b:e4:60:f1:cb:ea:40:82:ad:d3:
         6f:31:4c:af:f3:38:b4:3d:1a:c8:36:45:ef:b8:8f:39:a4:fd:
         04:41:92:3a:ba:8b:ee:39:b7:67:71:39:21:ad:ba:28:64:8c:
         05:88:57:bb:97:92:d4:ae:20:74:7e:98:18:2d:d9:81:f0:a2:
         9d:f9:58:8a:21:05:99:63:7d:4d:98:be:7b:ab:55:cb:dd:12:
         f2:8c:55:93:da:5e:bf:5a:83:5b:e6:43:24:68:36:91:ce:2d:
         6b:59:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:58 2026 by rpki-client