Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa
File:                     36234625-4a26-3605-90a3-4b465a3b61b7.roa (raw, json)
Hash identifier:          mIUY0RYoKFjtOR08VBh8WPnjKu/JZSH0jYp2Tlpc4jA=
Subject key identifier:   4E:5E:17:8F:2D:F3:74:27:6A:30:9C:FC:41:2B:D7:4A:7C:ED:AB:E6
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F4328584EBDDC5C2D6DEEABB37406E700
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     4476
IP address blocks:        192.68.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:5c:2d:6d:ee:ab:b3:74:06:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=1766f88d-0fbc-4558-8c6f-ac97e7ad4c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:a2:4f:f7:61:75:f3:1a:96:62:cf:96:20:
                    27:c1:71:99:33:8a:7b:43:9e:4b:c5:03:a9:ae:9c:
                    69:8f:f4:07:ac:b8:65:81:b5:fe:fc:a3:1b:b9:39:
                    96:59:2b:34:f0:20:6c:49:fd:a0:08:50:05:fe:31:
                    b3:c2:6c:93:f9:f2:42:7d:af:32:04:e8:f2:09:66:
                    64:6a:0a:23:f5:fa:87:c1:74:73:72:1e:1a:89:3e:
                    46:54:fd:a9:93:6b:92:a5:d3:05:78:6a:ef:0c:7e:
                    71:b0:82:fe:36:e3:5d:28:f5:ce:32:c5:4c:7a:90:
                    d9:91:ed:4c:39:d3:9a:65:6a:f4:fd:0c:23:30:cb:
                    a1:1a:60:48:2f:ec:17:fd:05:15:f6:54:5b:4d:d7:
                    f7:1b:c9:09:b2:49:e4:b3:63:dd:ca:90:88:8a:62:
                    31:8d:08:34:bc:22:ec:ba:a9:60:cc:22:71:fb:02:
                    7d:84:83:fd:9b:5b:25:01:3a:9c:89:ac:f3:16:65:
                    c5:ea:4b:fa:6d:c6:88:db:3e:9a:e6:51:81:63:27:
                    66:1f:7a:e0:50:7a:11:af:94:77:36:99:17:f3:10:
                    b3:a5:a0:03:6e:42:0b:37:f4:3e:e0:05:9b:6c:5f:
                    68:2c:f0:31:f9:00:1b:55:b0:b6:5a:28:c2:42:0f:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5E:17:8F:2D:F3:74:27:6A:30:9C:FC:41:2B:D7:4A:7C:ED:AB:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/36234625-4a26-3605-90a3-4b465a3b61b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:09:b4:b6:4e:ac:2d:6c:d7:ed:47:c0:bb:5c:b9:e4:a7:4a:
         fa:3e:00:7d:37:ee:4f:67:0f:7a:f9:5d:32:a0:45:db:34:f4:
         9d:bc:fe:5e:d3:6c:76:f2:42:25:a5:6d:02:fd:3a:7c:91:e7:
         f3:a1:3a:ed:3f:14:0e:52:88:10:cd:f0:33:7b:d4:ee:50:d1:
         81:a8:a6:2a:e6:8c:e3:9d:d3:d1:15:40:cb:9b:88:57:0b:c2:
         7f:dc:0e:8a:58:56:00:b6:e5:8c:f7:3c:0f:49:70:da:ad:a2:
         10:17:64:07:2e:11:5c:98:22:bb:a8:b4:23:bc:4b:a8:e8:f6:
         a7:d9:9f:28:f6:d2:df:8d:81:74:69:58:dd:69:ad:8b:d0:aa:
         51:e1:05:cc:89:b1:f9:5e:69:94:8f:22:06:0c:37:e7:2d:c8:
         d2:d8:d4:8f:f5:2b:ce:ea:fd:97:77:4b:00:a0:04:6e:23:a9:
         f4:85:f7:65:2e:85:88:3f:c1:7b:4f:c7:7c:66:6b:45:38:17:
         b5:91:94:08:de:d3:71:be:2c:ee:b9:14:15:dd:da:85:57:80:
         db:27:68:4b:9f:a0:09:34:fb:f2:cb:25:ae:41:d7:a5:db:ed:
         31:fa:ee:b2:67:fc:d3:61:39:fb:61:5f:55:b6:c9:6c:f1:1a:
         b8:96:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 08:36:46 2026 by rpki-client