Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/068bb085-b881-3a36-bc51-790e34b0c1d4.roa
File:                     068bb085-b881-3a36-bc51-790e34b0c1d4.roa (raw, json)
Hash identifier:          ZRSWP1nceA5z85DBtqXa5YWfZgvuYR4BKcIeltx1rVY=
Subject key identifier:   5F:DC:CC:3D:FB:C8:E8:5B:C6:80:7A:CD:48:84:3C:76:79:E0:61:86
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584E30E0ED0651B31219060E9180
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/068bb085-b881-3a36-bc51-790e34b0c1d4.roa
Signing time:             Tue 16 Jun 2026 13:00:31 +0000
ROA not before:           Tue 16 Jun 2026 13:00:31 +0000
ROA not after:            Mon 14 Sep 2026 13:00:31 +0000
asID:                     63023
IP address blocks:        136.176.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:e0:ed:06:51:b3:12:19:06:0e:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Jun 16 13:00:31 2026 GMT
            Not After : Sep 14 13:00:31 2026 GMT
        Subject: CN=27312ca4-6212-4692-9d0d-43dc5bacad07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:9e:ef:6d:92:90:83:a8:74:77:41:57:fd:
                    9e:fc:34:24:85:41:06:67:cf:a1:bb:87:67:a6:8e:
                    e7:6d:6a:38:ed:9a:d4:32:eb:57:14:9e:32:b5:30:
                    92:6b:08:47:87:5d:1e:dc:7a:e9:59:ed:a0:e3:32:
                    48:10:f5:05:dd:a4:7d:9d:72:c5:d9:5f:fe:31:5c:
                    54:22:e8:6b:9b:e4:67:d7:61:ba:d4:c7:ad:46:27:
                    ce:a0:f5:10:d5:d5:94:ac:61:22:10:e8:06:b8:7d:
                    d8:e5:ee:70:f4:3e:8c:9c:ec:5b:e4:f7:05:df:7f:
                    95:27:9b:69:d9:d9:4f:28:c9:94:ac:5a:1d:d5:0d:
                    b6:eb:64:3d:e9:31:e3:cc:97:c6:16:86:f5:ab:8d:
                    fb:bd:19:21:a8:e2:f2:76:82:69:3a:e7:6f:c5:08:
                    d3:41:57:ff:8d:65:d7:f4:82:18:dc:b8:3c:ce:1c:
                    6c:6b:66:97:a3:86:f8:ac:10:87:bd:66:3e:45:6c:
                    d0:4d:7f:fd:e5:eb:5c:2d:35:0f:36:1b:b3:ce:3e:
                    ba:87:76:98:9f:5d:92:c8:ab:68:01:ee:0e:ee:c0:
                    9a:5b:d6:56:e0:4a:28:30:c2:be:7a:7f:23:00:fc:
                    b9:ca:86:79:d7:1a:2a:5e:af:a9:e6:37:d8:9c:a5:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DC:CC:3D:FB:C8:E8:5B:C6:80:7A:CD:48:84:3C:76:79:E0:61:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/068bb085-b881-3a36-bc51-790e34b0c1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.176.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:22:61:dc:17:c0:03:26:0e:08:9e:f9:75:c0:66:27:83:
         5b:fb:c2:0c:13:5c:8c:50:7e:59:9e:d7:39:93:27:dd:d4:3f:
         33:2e:9d:f8:1b:80:41:13:29:ed:9b:fb:cb:95:1c:70:27:f2:
         9b:b2:69:1f:2b:92:5b:2e:28:00:b0:7b:ec:f2:f3:a8:4c:67:
         b8:35:f4:81:f3:60:8a:05:03:f8:e0:25:8a:52:80:2e:b4:11:
         4f:69:d3:ab:b7:64:83:c3:10:ac:67:8d:dc:fc:29:5a:bc:97:
         c9:65:d0:dc:83:cb:8b:92:ee:88:ad:7f:80:15:66:52:a7:50:
         42:7a:c8:b2:88:7f:6d:58:50:35:6e:dc:d7:96:6d:c9:78:af:
         87:15:ba:54:e1:43:1c:48:d4:01:0d:67:40:4d:f3:61:92:bd:
         68:53:f5:ec:8b:b2:32:3e:a7:be:97:12:86:39:54:94:e4:65:
         6f:99:07:8b:bd:76:98:a7:e5:7a:c8:22:48:ed:84:89:de:bc:
         3b:72:5b:b6:ec:c4:bc:0e:7d:22:21:c5:f4:4a:27:e7:8c:78:
         52:97:ca:9b:27:5b:0a:80:4d:59:64:5b:32:1a:03:97:14:b8:
         31:1b:79:78:96:c4:92:cf:5c:1f:6e:f7:87:72:16:6c:15:46:
         33:b0:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 13:20:36 2026 by rpki-client