Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/25e72791-2137-3482-acdd-de246c9c7c80.roa
File:                     25e72791-2137-3482-acdd-de246c9c7c80.roa (raw, json)
Hash identifier:          c6CUGx8vV9/uW2gq4hW31M/GkVo8PBogAbwMs4gbc58=
Subject key identifier:   34:09:36:5D:F6:35:A9:AF:94:1B:AC:D1:D9:23:AC:42:3B:76:1A:35
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584EAD1C4ED5E3E3699A3A170740
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/25e72791-2137-3482-acdd-de246c9c7c80.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     55293
IP address blocks:        68.66.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:4e:d5:e3:e3:69:9a:3a:17:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=be5e61d0-b43f-4f5d-ab3f-e6ddd8f56fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:f8:fc:e1:ac:ee:fd:da:3e:a3:5b:65:39:
                    49:b7:ae:40:e9:cf:1d:fc:8d:f6:a1:08:31:e5:e0:
                    97:ef:01:3a:ba:38:58:03:6f:3b:af:dc:44:28:6f:
                    ec:d4:ee:3d:8a:5d:13:fe:f2:d6:25:e7:f6:84:bb:
                    07:eb:a5:8b:71:c8:e0:9b:4f:e3:73:c6:5f:02:e1:
                    60:81:63:1f:ee:e6:ee:77:f1:cd:92:9a:76:ec:00:
                    20:d3:75:ab:93:90:24:94:fd:3d:30:c0:ca:21:03:
                    95:fe:93:8a:7a:69:20:58:ce:b3:d5:bb:10:4c:0c:
                    54:de:2b:aa:6d:15:cf:0b:39:0c:5b:ab:80:53:c8:
                    b7:20:d6:80:b7:93:3f:87:54:92:11:30:60:78:23:
                    b2:de:0f:b7:39:91:64:b9:bc:10:94:76:13:59:ca:
                    12:f9:93:b9:f4:e5:11:f7:71:ef:3c:a8:93:0f:a0:
                    8b:60:ec:41:6c:62:e0:c8:22:78:88:2d:82:fb:dc:
                    26:45:07:31:15:b9:2a:c8:d8:fe:20:28:c8:1e:a9:
                    28:d8:9b:7f:f3:00:ca:b8:e7:e4:15:93:e5:92:87:
                    1e:3c:fd:1b:f2:17:a2:d3:43:e7:03:2a:a1:f6:69:
                    80:49:39:35:58:71:89:54:bc:2c:af:ed:59:62:ed:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:09:36:5D:F6:35:A9:AF:94:1B:AC:D1:D9:23:AC:42:3B:76:1A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/25e72791-2137-3482-acdd-de246c9c7c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:ed:9c:7f:bb:3b:dd:d2:03:1b:a0:5a:42:2f:8d:a4:e6:
         59:dc:e9:df:3e:68:cb:23:e7:27:48:1c:ed:bf:62:f4:4a:85:
         af:2c:08:53:85:d5:1f:27:a5:fe:1d:81:6f:37:64:c1:f4:a5:
         56:79:0d:ff:63:2f:79:6b:91:e2:93:af:f3:67:5e:bf:c5:cf:
         a5:d7:31:05:a4:fb:1e:83:f5:b3:1a:b5:2e:f9:f7:1c:06:4c:
         a6:2d:ab:a8:69:58:1c:12:4b:96:f5:e7:78:4d:1d:d0:87:c2:
         47:17:47:2c:00:8b:1b:45:fe:bc:05:37:b0:1e:4d:b3:21:ee:
         3b:fa:ac:7d:dc:5c:9b:7c:72:d4:0a:04:e9:4a:86:e0:9d:23:
         57:dc:71:f9:c0:c2:53:d0:e8:44:84:e5:f6:d9:43:3d:f5:71:
         84:e2:5b:fc:ff:f0:4f:ce:67:73:2c:aa:32:e5:68:a3:5a:28:
         fd:df:97:81:a2:51:ca:26:22:50:64:da:f4:2b:e8:89:a1:58:
         12:4d:c8:b0:6e:54:8c:d2:f3:68:6d:23:74:af:ad:de:06:fa:
         06:ac:dc:b1:60:06:55:78:27:fd:24:71:a5:de:c8:2a:de:f5:
         08:c5:94:9c:e8:11:70:c4:42:83:14:d2:72:bf:3e:65:00:e7:
         61:0a:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:48:51 2026 by rpki-client