Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/bb1e3f65-7e68-3a67-93d2-0ca65142bde5.roa
File:                     bb1e3f65-7e68-3a67-93d2-0ca65142bde5.roa (raw, json)
Hash identifier:          pD/FFc8RcVn0wdQdJcP6kij+sDxYnkT/iHDPgtQxGv4=
Subject key identifier:   7F:78:E1:4B:D3:09:F2:02:E6:D6:4B:2F:60:98:DF:24:CB:BE:0B:AA
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584F506D3D1E0C5D6DD80E36A180
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/bb1e3f65-7e68-3a67-93d2-0ca65142bde5.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     2914
IP address blocks:        68.64.154.0/24 maxlen: 24
                          70.39.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:3d:1e:0c:5d:6d:d8:0e:36:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=1812ec18-3c0e-41ef-9655-eefb4707833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:c7:3c:2a:5e:2b:2a:92:59:35:ea:a0:dd:
                    22:08:90:48:29:11:5b:4d:87:36:dc:90:e4:3a:2c:
                    ad:da:e6:1a:95:a3:11:a4:80:a6:34:18:07:99:39:
                    f1:70:8e:ca:25:ba:17:63:60:c1:95:3a:75:2c:5a:
                    f8:59:7b:68:66:58:a0:a1:09:89:25:2e:cd:89:c1:
                    96:f9:02:65:cf:af:78:ad:77:0d:60:3d:42:3d:fe:
                    33:a9:a3:c4:49:1b:b4:c4:2f:5d:c3:f1:9e:49:03:
                    57:ca:b3:37:38:b6:13:e8:24:8d:68:0d:3e:8e:a6:
                    e7:6d:61:f0:39:55:48:1d:00:f9:3e:ea:15:42:0c:
                    88:35:00:5b:56:e8:55:43:2f:9b:4e:0c:d1:be:ba:
                    50:06:f7:1a:60:2c:38:f2:c8:63:71:87:df:d8:7c:
                    0a:d1:de:82:37:2b:3f:24:24:2e:e7:c1:6b:09:14:
                    d3:6e:3b:2a:3f:b8:fe:4f:a1:94:7f:dd:b6:2c:a2:
                    1a:9a:74:95:5e:ef:84:7e:17:e5:a5:9a:7e:6b:c5:
                    af:bb:ba:ea:0e:3a:74:90:72:5b:96:a6:07:05:d0:
                    7e:76:c1:c9:06:bf:91:7d:5f:73:95:31:04:b5:78:
                    9b:2f:f3:94:a0:0b:4a:6e:7b:3a:33:31:2f:01:a1:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:E1:4B:D3:09:F2:02:E6:D6:4B:2F:60:98:DF:24:CB:BE:0B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/bb1e3f65-7e68-3a67-93d2-0ca65142bde5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.154.0/24
                  70.39.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:93:ae:7b:78:64:36:59:56:c6:c1:d4:ff:53:ff:3a:da:
         c5:08:67:93:ca:90:5c:b3:cf:26:4b:c8:54:72:cc:9b:9b:db:
         ee:e9:ab:e6:da:e2:67:bf:8d:48:4c:02:8e:01:53:b1:e0:85:
         92:35:f9:a9:59:4b:26:a9:92:1d:c0:ca:bb:0f:75:2a:8b:5c:
         cc:ad:19:dc:4a:9f:21:01:5c:bf:bc:d1:10:2d:f0:53:ce:b6:
         fd:14:5a:7a:39:ba:fa:4d:c8:b7:4e:9a:58:3b:33:8c:16:e3:
         7c:67:57:31:94:22:be:92:8c:1a:68:54:9d:0b:9a:94:cb:7f:
         54:c2:9e:10:49:90:2e:cf:cf:eb:56:22:a0:fe:55:04:a5:e5:
         aa:77:05:23:95:88:73:c4:51:52:86:d4:16:96:14:7f:38:c6:
         8f:dd:54:4f:9b:e3:bf:ea:f4:79:6b:ad:d7:95:05:17:5b:c8:
         4a:92:16:2c:ea:3b:7b:d9:cb:30:e8:67:f1:67:fe:07:fa:70:
         bc:ed:c4:1a:97:32:a6:3b:69:32:74:03:91:0e:27:06:d9:4d:
         8d:2a:b9:f6:07:2d:57:7e:3c:a3:41:73:eb:a6:24:5e:10:9c:
         b8:86:2e:94:60:dd:93:fe:b8:e8:65:5a:05:2c:71:5f:9d:df:
         23:c6:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:27:23 2026 by rpki-client