Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/03adf364-f12d-37a7-b744-3a04792d3a1e.roa
File:                     03adf364-f12d-37a7-b744-3a04792d3a1e.roa (raw, json)
Hash identifier:          oHZOyUTAR306wSswUe0/BinYb+NBCRxd56guU+0mxh0=
Subject key identifier:   25:76:8B:AE:7D:77:04:3F:37:B7:21:D2:60:BD:41:83:C7:29:7B:3C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E0435E419C6CCEE48AFF99A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/03adf364-f12d-37a7-b744-3a04792d3a1e.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     0
IP address blocks:        97.68.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:e4:19:c6:cc:ee:48:af:f9:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=fdb7605c-edd2-4dde-a437-06bf4763df5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:fb:cd:5e:27:d5:bb:39:c5:02:76:45:7a:
                    7d:86:d1:39:c9:a8:0e:9e:61:cf:96:a0:30:fb:0c:
                    6d:00:94:24:f1:94:72:96:14:4f:c4:f8:fc:18:a5:
                    be:ff:2e:c9:da:08:18:6d:8d:c5:c0:d4:a2:75:10:
                    b8:e7:5d:24:51:a7:df:ad:81:b0:98:f8:40:ef:38:
                    d2:9c:95:78:bd:82:68:9a:65:30:77:9f:4b:21:c2:
                    27:d9:2b:2b:ee:08:3e:42:8c:06:17:e1:27:37:8b:
                    b9:19:a2:b2:17:e9:98:95:3d:5c:1a:44:8d:15:52:
                    70:ca:5f:f7:d2:70:08:1a:1d:04:b4:58:27:c9:75:
                    6e:70:96:ee:25:59:62:a9:0e:c7:2c:5b:78:03:cc:
                    1f:7c:48:4a:bf:b2:da:c5:2d:e8:b9:86:5f:7f:fc:
                    40:e2:31:d3:81:f3:0c:e4:e5:35:0b:df:53:7a:f2:
                    74:b0:34:43:c8:8f:3b:b8:f6:06:f4:d0:62:b9:36:
                    fb:ac:4d:ff:96:86:6a:54:6e:11:3f:b4:02:71:dc:
                    23:dc:d0:bc:3c:c7:56:5f:8f:67:18:36:9e:65:c1:
                    10:1a:91:b0:6a:08:cb:9a:21:d4:50:5d:2a:3f:00:
                    3b:28:fd:e1:6e:40:cd:65:3f:e7:78:e6:f5:c6:e0:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:76:8B:AE:7D:77:04:3F:37:B7:21:D2:60:BD:41:83:C7:29:7B:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/03adf364-f12d-37a7-b744-3a04792d3a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.68.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fe:93:26:a0:49:38:9f:14:92:2c:93:ff:31:e1:f5:ff:97:
         b8:88:48:ce:29:25:6f:a6:d6:91:80:74:0c:20:8a:ea:cc:88:
         7e:b5:5a:95:fd:8d:76:ee:be:0b:1e:9c:0c:e4:c4:ec:24:c1:
         fa:ab:3b:66:9a:47:7f:7b:2a:7c:61:36:6a:d5:15:ca:0c:79:
         2e:c3:67:b2:4f:57:7c:1a:61:d7:7a:8d:70:d8:f6:b6:fa:aa:
         30:b2:c9:5d:29:ea:c9:dd:15:ae:c2:f0:b8:8b:35:23:bc:c7:
         ca:d0:9e:92:2f:ea:25:08:48:b9:89:9e:bd:7b:be:b7:f9:f3:
         6c:c8:a4:53:21:25:8d:a8:46:bb:70:94:c3:e2:11:dc:64:58:
         42:f2:0f:f8:1e:bf:4a:66:e1:a8:e7:25:85:1f:77:a0:b6:5b:
         81:34:19:f1:11:5f:2f:fc:f0:c8:6b:65:00:6c:2a:1d:7d:2d:
         2d:62:86:cf:27:96:d0:13:3b:13:34:72:3d:ad:ff:6e:f7:f0:
         f9:e4:f0:f3:d5:94:e8:df:a4:83:e0:00:d6:a5:45:0d:2b:bc:
         88:de:bc:ee:94:c4:50:6f:ee:72:cc:90:22:ee:01:e3:6f:54:
         88:3b:86:b4:c9:f6:27:9e:47:d5:43:9d:45:23:bd:a3:de:a8:
         ee:bc:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:06:47 2026 by rpki-client