Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa
File:                     fd2b756d-dca9-320f-a24d-589725851877.roa (raw, json)
Hash identifier:          pGrfyaC9g5L+hb3qrBB/4Naxse57+Zs6ulOsK5pesOU=
Subject key identifier:   03:B0:0A:9B:F0:40:7C:1D:E7:F1:81:80:16:24:35:2F:82:16:FF:B1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EA792BC0A28B04809EBD06240
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397228
IP address blocks:        199.7.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:bc:0a:28:b0:48:09:eb:d0:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=350ad5e3-6b5c-4930-9278-2e726ae8f193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:cf:6c:9e:0b:e9:37:8b:0b:c6:a4:43:41:
                    5a:0a:3c:86:e8:e7:33:71:80:31:45:d7:1e:3f:66:
                    3d:7f:fd:0f:61:63:59:83:8b:84:30:46:2c:d3:85:
                    2a:03:50:56:e5:14:d2:20:a8:17:70:cd:0d:93:fc:
                    f3:2e:cf:13:18:e5:35:5f:17:e9:f5:aa:79:06:08:
                    86:1d:df:6e:d1:9e:11:c0:1d:e9:a6:22:f0:3f:bd:
                    f0:54:2f:c5:2d:ea:90:2c:f4:3c:6a:dc:6a:ac:0e:
                    f2:9f:d6:f5:aa:c9:9c:8b:c6:32:37:ed:f5:c6:a2:
                    7b:5b:37:77:3f:0c:3b:14:7e:6f:05:35:22:fb:ca:
                    2c:e9:c3:7d:1f:84:58:32:36:04:c8:06:60:73:7d:
                    0e:50:2f:11:d2:40:5d:da:d1:25:99:04:4f:1e:37:
                    f2:38:06:79:06:4f:b9:7e:d1:c6:e4:b1:b4:96:61:
                    29:bd:85:45:e0:d5:c0:78:00:58:f1:58:af:ed:19:
                    e4:81:9b:e8:ed:97:95:f5:38:9a:1a:cb:f1:43:9a:
                    00:dd:1a:ac:a5:5e:d8:f8:53:43:f9:dd:8e:a4:f2:
                    70:a6:51:2a:92:f8:b3:f3:69:96:04:9b:4c:09:c1:
                    29:a1:44:76:58:ce:c5:a4:a5:69:b9:af:35:9b:46:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:0A:9B:F0:40:7C:1D:E7:F1:81:80:16:24:35:2F:82:16:FF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:5c:0a:cd:71:1e:58:6c:d9:ea:65:42:27:d7:14:02:97:
         04:d6:a7:2a:bb:52:ba:83:8f:8f:a9:b0:34:33:4a:b9:ed:a2:
         11:7a:21:ee:82:3f:72:b3:bb:01:f6:be:c5:3d:a3:ac:d7:c8:
         ca:6a:38:1c:f1:93:41:50:06:5c:5d:eb:04:bd:11:e4:7e:bf:
         b8:65:4f:f9:d5:ff:6d:50:a5:ce:84:94:e2:10:af:52:b3:c4:
         e4:da:51:c8:f2:b7:f1:d5:3c:ab:6d:9e:d7:97:6d:90:79:46:
         41:c2:9d:17:f6:45:43:86:03:51:4c:fa:02:2d:29:df:b5:79:
         32:29:c2:5f:03:bc:45:3c:9e:eb:be:33:7f:3d:4d:01:5a:6c:
         d8:5c:cb:53:d8:fd:53:0d:18:ca:3a:7d:9e:09:8f:1d:e9:d4:
         9a:ca:ab:97:50:9b:d6:3c:ec:af:af:7d:8d:b8:81:ef:e4:c6:
         0a:01:51:7c:c6:ab:4c:67:1a:e3:c5:ff:95:98:aa:85:fb:f7:
         ab:23:04:64:cd:bc:a4:b6:7d:4e:60:11:56:13:3d:bc:bd:ce:
         c2:95:5f:09:68:38:49:bb:1a:50:3f:7b:a5:aa:4c:61:73:40:
         23:18:0d:bd:3f:17:df:5e:53:f0:43:ef:cf:ea:8d:94:74:6d:
         eb:55:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 07:42:35 2026 by rpki-client