Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa
File:                     8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa (raw, json)
Hash identifier:          RE8ZLO3wWfYQpbdf2ZS9wx9VL1WbkAIZE+6c+AKr74Y=
Subject key identifier:   55:A9:1D:B3:A2:35:7E:E3:20:BF:10:79:E2:A0:AE:DF:EF:F9:D4:F9
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584EB2B1FE9763EEC421ABD40FA8
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     5065
IP address blocks:        68.64.148.0/24 maxlen: 24
                          68.64.149.0/24 maxlen: 24
                          68.64.150.0/24 maxlen: 24
                          68.64.151.0/24 maxlen: 24
                          68.64.156.0/24 maxlen: 24
                          68.64.157.0/24 maxlen: 24
                          68.64.158.0/24 maxlen: 24
                          68.64.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fe:97:63:ee:c4:21:ab:d4:0f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=8b7f3489-fc5c-458c-aab9-2a7e45fb97d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:af:0d:d3:0c:54:2b:fd:b6:99:10:7d:9f:
                    8e:3e:a6:4c:e5:49:7e:f9:51:e8:3e:e5:46:f6:83:
                    84:40:87:b1:d0:b3:c9:1b:58:33:14:75:82:2f:a3:
                    a3:9b:6a:27:5d:5f:3f:51:33:9c:2f:c1:7b:cd:c7:
                    58:d4:49:6c:87:db:00:2c:d6:40:c1:86:13:80:53:
                    71:09:bd:a2:ed:f0:bb:4d:46:d9:5c:e4:51:0e:c4:
                    d5:66:f4:9f:a0:e5:90:1d:ac:e8:cf:90:b1:62:46:
                    04:59:d4:72:c7:94:65:7c:5f:ea:00:96:c4:ed:e1:
                    0d:cc:b5:66:6d:5a:1f:19:77:4b:66:3d:e7:32:e9:
                    0a:9c:14:07:74:2d:86:47:3c:0f:e7:05:34:1b:5c:
                    ea:04:b6:82:ab:09:1e:e5:06:20:fe:e5:db:d1:7f:
                    25:6c:87:d3:ec:3f:ca:c2:bd:8b:46:54:81:1a:25:
                    53:58:ca:b6:7e:3f:be:38:69:15:6b:12:bf:6a:13:
                    c2:d5:34:74:3d:5f:85:8b:e5:09:b8:c2:3d:53:40:
                    53:b6:6b:d4:2b:75:81:d3:00:fb:5a:17:43:65:3a:
                    f3:02:5e:94:86:eb:d5:53:16:11:f3:02:3b:4a:21:
                    52:88:4e:33:66:47:37:e8:bf:7d:1e:ff:b9:f7:c2:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:1D:B3:A2:35:7E:E3:20:BF:10:79:E2:A0:AE:DF:EF:F9:D4:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8556f96d-ca0b-3fa9-926c-a968aaa44a64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.148.0/22
                  68.64.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:07:b8:1c:68:2f:41:d6:f3:a0:68:a1:72:26:a3:bb:b8:82:
         3e:8d:9d:a7:5b:d8:ec:bf:60:f5:2e:ff:3f:9d:81:78:48:e2:
         d3:53:60:55:d4:79:17:65:2c:ee:83:dd:c3:54:51:79:17:34:
         d0:a5:f3:25:9f:36:28:e3:e0:cb:97:25:4a:30:eb:fa:47:5a:
         70:ce:1f:3c:4f:fb:3a:ca:1f:48:92:0a:b0:28:78:11:a5:57:
         2e:e0:e1:9f:31:c3:5a:69:ce:9c:41:2a:1f:1d:46:a4:10:59:
         1f:2c:96:1a:37:dc:60:a8:d1:49:14:92:a3:09:d3:af:97:f2:
         21:ef:72:a2:37:4f:27:f5:dd:46:73:9b:ba:15:e6:9f:37:48:
         2b:65:e3:d4:91:1f:c3:f6:a4:a9:ff:76:b7:e4:34:0f:c2:ee:
         cc:33:66:d0:9b:2a:00:bd:ad:16:47:9d:54:63:b3:06:ec:97:
         7d:b4:91:63:b2:c4:6f:51:85:c6:b8:2a:1f:ca:f4:25:af:55:
         86:6e:65:8d:a0:54:07:39:42:95:5e:4c:20:43:b6:93:27:93:
         2d:63:7a:dd:c7:a1:15:c8:87:b7:7b:dd:c2:28:a0:0f:0f:c5:
         0d:e2:7b:49:24:2a:f6:6c:3c:74:58:da:1e:d1:fb:3d:d4:b3:
         82:84:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:10:33 2026 by rpki-client