Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/fef0f768-e0b6-3553-a200-8540713370c0.roa
File:                     fef0f768-e0b6-3553-a200-8540713370c0.roa (raw, json)
Hash identifier:          6yEeX40hgE39sbYSxZ+yt/0NAySbiZmqly2LKsnXioI=
Subject key identifier:   17:9E:58:A2:95:5F:52:6E:6D:F1:5E:55:BB:C1:EB:3B:1C:B9:4E:F8
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584E376470333BE66ABE7423AD00
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/fef0f768-e0b6-3553-a200-8540713370c0.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        68.64.133.0/24 maxlen: 24
                          68.64.142.0/24 maxlen: 24
                          68.64.154.0/24 maxlen: 24
                          68.64.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:70:33:3b:e6:6a:be:74:23:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=18c3a9ce-5516-4990-adc7-8bbe2b73b027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:33:44:a7:66:6c:83:2b:92:71:09:96:93:
                    fd:87:d2:80:27:46:5a:49:2f:69:d4:12:56:7d:d9:
                    aa:c6:f0:38:22:3d:11:ad:5e:10:29:3b:50:41:0f:
                    bf:20:e4:09:64:bb:58:62:71:c1:f8:eb:9c:81:64:
                    80:df:eb:33:b5:16:01:3d:1d:1b:f1:97:c4:ac:13:
                    fe:1d:5f:2b:89:4e:5d:c5:85:03:85:b3:e1:12:fd:
                    5b:7a:51:55:89:00:b4:27:97:9d:4d:17:8f:f5:fb:
                    b9:b9:06:82:6f:e8:d3:9f:91:06:7b:c0:24:0d:7c:
                    1b:14:fd:f5:88:a3:3e:e7:6c:fc:47:8b:ec:d8:c7:
                    df:d1:57:98:19:c3:45:05:f4:54:e4:a3:98:f3:71:
                    a0:b1:0a:a3:9e:92:a4:88:57:dd:0f:bf:65:c9:cd:
                    38:eb:d0:bc:78:1f:2a:ba:55:1f:02:03:29:37:e8:
                    fc:14:f8:53:5c:5f:14:16:c6:75:7d:c7:44:4c:13:
                    12:e3:5d:0b:53:f8:6b:d0:04:99:93:91:57:ef:a2:
                    3e:96:58:1f:68:f2:7a:66:56:08:ba:ae:02:9c:e2:
                    bc:2f:7b:24:8a:aa:23:08:64:0f:1e:2b:84:29:b1:
                    4c:08:e4:98:cd:7a:12:5f:8e:23:04:0d:55:c6:13:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:58:A2:95:5F:52:6E:6D:F1:5E:55:BB:C1:EB:3B:1C:B9:4E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/fef0f768-e0b6-3553-a200-8540713370c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.133.0/24
                  68.64.142.0/24
                  68.64.154.0/24
                  68.64.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:68:39:c7:7a:65:3d:d7:41:e0:05:4d:e9:d1:53:22:42:5d:
         78:aa:c1:66:25:ea:a0:5a:fb:45:a6:95:34:91:0d:78:5f:16:
         cc:c5:79:3b:a4:08:ed:f2:bb:0d:cc:7b:83:d0:8e:c5:33:a6:
         04:ed:8c:34:9f:3b:9d:28:7b:7c:6d:59:f8:3e:cd:d8:28:a0:
         2d:47:06:85:78:c7:4e:7d:d1:d9:18:1b:d0:80:5c:90:e6:e1:
         61:d0:06:7e:4f:ec:f9:7b:28:f5:5f:b4:14:49:93:ed:f7:50:
         10:f9:60:2c:35:64:e7:1c:dd:ac:93:5c:86:77:10:94:0e:44:
         5f:95:85:ee:c6:25:14:9a:85:31:b3:cd:47:3d:ce:a3:2a:1a:
         96:72:a9:b0:36:0a:26:33:82:42:6f:e0:d9:15:87:02:3b:ba:
         eb:e8:aa:87:04:5e:d1:cd:82:24:b3:7d:99:c1:2c:9b:ec:f0:
         f0:5e:ad:bd:8d:34:a6:63:ed:ae:1e:2f:5a:c1:89:91:5e:bc:
         ee:eb:91:5f:1f:28:05:8e:7e:a3:e1:f9:a1:a0:cf:e7:2f:9d:
         d3:6e:fb:a5:bc:41:c2:db:d2:21:67:5d:d7:59:c5:89:aa:e2:
         36:8c:47:4e:ca:34:c1:0c:ec:2e:60:6e:84:94:38:32:a8:a9:
         00:9f:f2:39
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE43ZHAzO+ZqvnQjrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj
Mzk1MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MThjM2E5Y2UtNTUxNi00OTkwLWFkYzctOGJiZTJiNzNiMDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYMzRKdmbIMrknEJlpP9h9KAJ0ZaSS9p1BJW
fdmqxvA4Ij0RrV4QKTtQQQ+/IOQJZLtYYnHB+OucgWSA3+sztRYBPR0b8ZfErBP+
HV8riU5dxYUDhbPhEv1belFViQC0J5edTReP9fu5uQaCb+jTn5EGe8AkDXwbFP31
iKM+52z8R4vs2Mff0VeYGcNFBfRU5KOY83GgsQqjnpKkiFfdD79lyc0469C8eB8q
ulUfAgMpN+j8FPhTXF8UFsZ1fcdETBMS410LU/hr0ASZk5FX76I+llgfaPJ6ZlYI
uq4CnOK8L3skiqojCGQPHiuEKbFMCOSYzXoSX44jBA1VxhN6jQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFBeeWKKVX1JubfFeVbvB6zscuU74MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw
NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZmVmMGY3NjgtZTBiNi0z
NTUzLWEyMDAtODU0MDcxMzM3MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx
MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk
YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0
NzJmZGMzOTUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQARECFAwQA
RECOAwQARECaAwQAREC/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHxoOcd6ZT3XQeAFTenRUyJCXXiqwWYl
6qBa+0WmlTSRDXhfFszFeTukCO3yuw3Me4PQjsUzpgTtjDSfO50oe3xtWfg+zdgo
oC1HBoV4x0590dkYG9CAXJDm4WHQBn5P7Pl7KPVftBRJk+33UBD5YCw1ZOcc3ayT
XIZ3EJQORF+Vhe7GJRSahTGzzUc9zqMqGpZyqbA2CiYzgkJv4NkVhwI7uuvoqocE
XtHNgiSzfZnBLJvs8PBerb2NNKZj7a4eL1rBiZFevO7rkV8fKAWOfqPh+aGgz+cv
ndNu+6W8QcLb0iFnXddZxYmq4jaMR07KNMEM7C5gboSUODKoqQCf8jk=
-----END CERTIFICATE-----
Generated at Sat Jun 20 13:21:39 2026 by rpki-client