Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/b5d59c49-f12b-377f-9cde-f190629a4941.roa
File:                     b5d59c49-f12b-377f-9cde-f190629a4941.roa (raw, json)
Hash identifier:          zh+p7SkyjGR2sv3LStv6GaZBn5tKmnuHTI8nQpfN/Ww=
Subject key identifier:   14:26:AB:5B:40:47:2E:A8:5D:DF:F3:E4:C1:E5:27:BA:0C:ED:08:FA
Certificate issuer:       /CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
Certificate serial:       010D0C9F4328584EA78792741419C2B24531DE00
Authority key identifier: 47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/b5d59c49-f12b-377f-9cde-f190629a4941.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1054
IP address blocks:        68.68.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:92:74:14:19:c2:b2:45:31:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5304d5cc-6ae1-4d28-bdfb-ad6830f05722
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2a571f69-11e2-4927-809d-c256dd67745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:2c:99:45:b3:e1:55:0e:67:61:1d:58:49:
                    ce:2e:0a:fb:e0:8c:03:39:ac:a2:28:85:e3:c5:77:
                    b2:9d:be:76:eb:11:af:97:94:ad:01:a3:f7:12:7f:
                    e3:92:f4:7c:dc:ab:39:62:ce:e4:fe:04:2b:47:16:
                    dd:50:d4:91:c2:26:5b:fa:d1:fe:69:71:09:87:66:
                    f0:cc:c7:bc:31:91:cf:61:3f:af:e3:d5:11:93:27:
                    d9:11:74:36:05:3e:34:5e:52:b3:a5:a5:e6:a6:25:
                    54:6d:c4:85:90:e1:b0:78:45:84:b2:d6:e5:a5:34:
                    c3:e0:4b:3f:e2:66:77:a5:45:27:28:33:f3:c3:b7:
                    44:f7:97:ae:90:2f:13:22:c2:9f:2b:bf:44:70:22:
                    d5:b9:f2:9f:2f:e4:44:73:1a:c5:69:00:74:d4:dc:
                    55:b7:93:e6:20:5c:4e:ff:8e:ee:2f:74:d9:28:6d:
                    23:0d:78:39:6f:29:ad:64:62:21:59:d7:f2:a4:1f:
                    82:ef:a9:5d:ab:aa:53:aa:87:eb:0f:fe:34:44:71:
                    c9:ae:33:09:8b:7e:05:c8:b5:f3:63:b1:8b:39:7b:
                    e2:e7:bc:1e:21:f2:8b:69:fc:c9:94:05:56:57:69:
                    db:e6:26:9a:5e:d4:3c:0a:03:a9:f8:c2:3f:73:3a:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:AB:5B:40:47:2E:A8:5D:DF:F3:E4:C1:E5:27:BA:0C:ED:08:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/b5d59c49-f12b-377f-9cde-f190629a4941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.crl

            X509v3 Authority Key Identifier:
                keyid:47:0A:7B:9F:96:3B:10:50:58:F8:9D:A9:63:E2:FD:0B:D2:FC:1F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5304d5cc-6ae1-4d28-bdfb-ad6830f05722.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:68:19:e5:65:d6:ba:d9:64:51:0f:70:a6:e0:86:41:67:73:
         91:1c:75:7d:8c:8c:7e:88:ca:fb:78:02:5f:74:70:b0:55:08:
         e8:a7:b9:39:18:71:c7:98:77:ff:fc:e4:03:3a:76:a5:bc:c9:
         e3:30:52:7c:f0:6c:44:d6:cb:88:ed:97:28:6e:d3:96:86:26:
         24:bf:6d:18:7e:9e:5a:e7:71:af:d0:9e:b8:64:8b:7e:d8:9e:
         1d:04:68:bd:45:ce:73:fe:25:66:08:02:be:c3:3f:63:e6:d1:
         f2:ea:0c:8c:81:fb:f8:10:92:ba:35:65:6e:62:bf:71:04:fc:
         f3:0b:69:e3:12:2b:80:56:a5:3b:ac:8e:3d:b3:42:47:95:16:
         8b:0d:0a:84:a4:23:d6:37:6a:ce:0a:02:2e:25:90:73:a4:82:
         80:be:13:93:6e:06:07:8e:8a:ec:69:0f:5f:24:78:78:5f:da:
         9e:d6:2b:12:5b:da:68:fa:ce:81:2f:d9:45:94:d9:26:46:f4:
         44:cd:91:40:77:d9:a8:cf:00:d9:99:a3:4f:71:36:61:df:27:
         ea:fe:b1:41:ee:9e:a4:c9:26:9f:78:7e:c7:b7:6f:e0:5c:be:
         7c:4e:e1:b1:e6:5d:36:b0:73:0f:71:bc:f7:72:0f:67:08:b6:
         c4:f1:2d:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5J0FBnCskUx3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMwNGQ1Y2MtNmFlMS00ZDI4LWJkZmItYWQ2ODMwZjA1
NzIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmE1NzFmNjktMTFlMi00OTI3LTgwOWQtYzI1NmRkNjc3NDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrQsmUWz4VUOZ2EdWEnOLgr74IwDOayiKIXj
xXeynb526xGvl5StAaP3En/jkvR83Ks5Ys7k/gQrRxbdUNSRwiZb+tH+aXEJh2bw
zMe8MZHPYT+v49URkyfZEXQ2BT40XlKzpaXmpiVUbcSFkOGweEWEstblpTTD4Es/
4mZ3pUUnKDPzw7dE95eukC8TIsKfK79EcCLVufKfL+REcxrFaQB01NxVt5PmIFxO
/47uL3TZKG0jDXg5bymtZGIhWdfypB+C76ldq6pTqofrD/40RHHJrjMJi34FyLXz
Y7GLOXvi57weIfKLafzJlAVWV2nb5iaaXtQ8CgOp+MI/czqE9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQmq1tARy6oXd/z5MHlJ7oM7Qj6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81MzA0
ZDVjYy02YWUxLTRkMjgtYmRmYi1hZDY4MzBmMDU3MjIvYjVkNTljNDktZjEyYi0z
NzdmLTljZGUtZjE5MDYyOWE0OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTMwNGQ1Y2MtNmFlMS00ZDI4LWJk
ZmItYWQ2ODMwZjA1NzIyLzUzMDRkNWNjLTZhZTEtNGQyOC1iZGZiLWFkNjgzMGYw
NTcyMi5jcmwwHwYDVR0jBBgwFoAURwp7n5Y7EFBY+J2pY+L9C9L8H7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81MzA0ZDVjYy02YWUxLTRkMjgtYmRmYi1hZDY4
MzBmMDU3MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARET5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxoGeVl1rrZZFEPcKbghkFnc5EcdX2MjH6Iyvt4Al90cLBVCOinuTkY
cceYd//85AM6dqW8yeMwUnzwbETWy4jtlyhu05aGJiS/bRh+nlrnca/Qnrhki37Y
nh0EaL1FznP+JWYIAr7DP2Pm0fLqDIyB+/gQkro1ZW5iv3EE/PMLaeMSK4BWpTus
jj2zQkeVFosNCoSkI9Y3as4KAi4lkHOkgoC+E5NuBgeOiuxpD18keHhf2p7WKxJb
2mj6zoEv2UWU2SZG9ETNkUB32ajPANmZo09xNmHfJ+r+sUHunqTJJp94fse3b+Bc
vnxO4bHmXTawcw9xvPdyD2cItsTxLQQ=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:52 2026 by rpki-client