Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9cba1240-ac75-314f-941e-cedc117a048d.roa
File:                     9cba1240-ac75-314f-941e-cedc117a048d.roa (raw, json)
Hash identifier:          8E545P9IH3+0dY4JOWTnscqZ9T3oOoY+b4CFUwPJNMQ=
Subject key identifier:   FB:53:D9:64:70:9B:34:27:1F:FA:B7:FF:09:91:86:2A:D0:45:15:13
Certificate issuer:       /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial:       010D0C9F4328584EC20C5DDD91791946D6567740
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9cba1240-ac75-314f-941e-cedc117a048d.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     11550
IP address blocks:        68.68.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:5d:dd:91:79:19:46:d6:56:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=d70d2bd4-0500-40e8-af7c-98276d851587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:dc:e8:72:e9:18:03:24:c9:48:43:41:cb:
                    d8:b4:d4:75:03:67:f9:73:1d:80:f5:33:34:15:d2:
                    db:41:e8:17:be:fd:36:ff:28:b7:e4:11:a1:83:5b:
                    4b:94:fc:fb:ea:09:ca:02:b6:1b:ed:6b:9a:73:b6:
                    e1:ae:f8:58:47:1d:86:19:f8:07:ab:97:55:a1:aa:
                    3d:f3:ed:41:4d:c1:b1:3b:35:a1:cd:c2:a3:89:28:
                    e4:82:92:1c:39:21:db:11:fa:1f:4f:2a:05:09:86:
                    2b:ff:4b:13:79:db:24:57:1b:bf:35:1b:8b:f5:6c:
                    3c:f9:0f:21:c9:34:55:ef:07:82:9e:2d:ec:94:d5:
                    bf:31:82:fc:b4:15:29:2a:12:e2:f5:f6:8f:09:30:
                    5e:53:d8:32:92:18:8a:fa:9b:d4:1e:6b:0c:e3:e5:
                    93:6a:6a:7b:68:7c:d4:85:0b:02:4b:e1:4b:3b:23:
                    b1:8a:b0:86:b7:dc:6a:85:bf:75:47:39:c8:90:75:
                    86:55:ec:b1:ea:be:0a:ea:65:16:ab:56:31:68:db:
                    9e:ea:97:d2:7d:fa:ac:ed:3e:75:92:76:81:cb:c8:
                    e0:85:b0:be:29:d7:e6:2d:69:2e:a1:2a:4c:54:43:
                    3b:55:a4:37:ca:9b:5c:d4:d9:a1:50:93:08:5d:4d:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:D9:64:70:9B:34:27:1F:FA:B7:FF:09:91:86:2A:D0:45:15:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9cba1240-ac75-314f-941e-cedc117a048d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl

            X509v3 Authority Key Identifier:
                keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:61:11:29:ab:97:47:d2:a8:b8:be:b5:e1:d0:ac:a9:4b:
         95:43:a4:18:fb:8d:af:51:99:8e:7a:5f:36:e7:ee:b4:94:8e:
         1c:7f:d4:db:82:33:0d:bd:ad:eb:3a:7b:da:36:e0:bf:e2:5c:
         17:7a:7e:8c:26:dd:66:59:b3:91:7b:cf:b5:23:35:5f:31:01:
         b9:b1:31:03:85:70:92:7f:99:9f:af:2d:85:77:1d:51:98:a5:
         f3:ad:3c:fa:5c:83:f2:c2:17:93:73:07:a1:93:7b:71:9c:fc:
         e3:67:33:2e:d3:e8:d4:72:d8:ec:4b:a3:f1:16:1a:82:c6:d2:
         92:8a:0b:58:30:2e:fc:6f:b4:28:82:ef:b9:fe:8e:46:7e:ab:
         f7:31:56:b8:a9:12:23:8c:f6:7a:ae:2b:5f:20:fd:97:17:b6:
         a6:48:b0:87:f1:3e:15:75:6a:ae:24:58:eb:30:35:32:40:55:
         43:31:0a:4b:98:1d:17:2c:d1:b2:f3:74:51:fb:64:24:6d:12:
         30:dc:5b:80:7d:80:63:f9:60:12:40:3c:cb:d3:f0:f3:7a:ee:
         5c:83:b6:9b:af:8b:ad:bf:ac:b0:46:c7:62:78:92:ee:50:03:
         6a:61:87:9f:84:e2:87:24:0b:21:a4:e4:53:62:8c:9a:98:97:
         8b:4e:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:13:18 2026 by rpki-client