Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056/0edd6b57-4818-305c-a0df-f4273bf87118.roa
File:                     0edd6b57-4818-305c-a0df-f4273bf87118.roa (raw, json)
Hash identifier:          wTRHrZQLeCD9ldf5hqgKo33ZbPFGkbCUabBeGcdpXRo=
Subject key identifier:   D5:04:21:91:BD:0C:24:50:0C:5B:77:84:C7:A8:8E:07:4F:39:25:8E
Certificate issuer:       /CN=47036aa4-5627-41cc-9f4b-d70133ef0056
Certificate serial:       010D0C9F4328584EA7888BBF79AD0D8544FA5900
Authority key identifier: F9:72:1F:68:1F:49:2B:48:3F:98:ED:D4:24:6A:F3:6F:DE:0F:FA:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056/0edd6b57-4818-305c-a0df-f4273bf87118.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26369
IP address blocks:        68.67.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056/47036aa4-5627-41cc-9f4b-d70133ef0056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056/47036aa4-5627-41cc-9f4b-d70133ef0056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:8b:bf:79:ad:0d:85:44:fa:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47036aa4-5627-41cc-9f4b-d70133ef0056
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9ef60847-19be-4899-aac3-5703178eaeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:50:83:a9:c0:49:46:99:19:8a:5b:08:00:
                    ef:0e:01:44:2c:99:08:f4:31:f6:0e:d1:e2:2d:b2:
                    c2:a7:53:dd:72:ed:08:2b:09:6e:ac:4c:cd:a6:56:
                    6d:61:b6:87:71:7b:60:df:02:6e:ec:80:32:9e:c6:
                    71:ab:16:cf:d2:9b:3f:05:b6:0b:2c:81:fe:2e:c0:
                    76:b2:73:64:54:09:cf:df:72:a9:72:73:4c:6d:c7:
                    8a:32:65:17:db:7f:9d:05:37:03:b8:1e:94:f0:5b:
                    cf:5f:88:8f:31:7e:00:b1:eb:f7:66:4c:da:90:aa:
                    28:d1:12:c0:2a:85:3c:bf:1f:42:67:df:6d:d2:c5:
                    01:bf:7b:e1:c1:f9:1c:6d:3f:7c:d6:c5:ac:43:6e:
                    0e:aa:e0:47:2e:6a:d7:2a:e8:c5:f5:f2:5c:a5:e0:
                    17:1f:d4:11:40:44:0d:e5:3d:58:57:6a:7c:ab:a8:
                    fe:a4:c9:fc:97:17:ab:a9:26:19:dc:90:59:5b:2c:
                    e3:ef:f0:73:d2:0a:17:1b:90:2a:0f:9c:cc:7c:1b:
                    45:a9:52:0a:a8:f4:e1:ec:74:c0:19:41:a7:c6:c0:
                    8d:66:5c:5e:70:5c:b9:03:8b:d1:12:d7:6c:7a:f7:
                    0c:f8:07:23:66:5a:0b:5f:c7:4c:3d:6b:b2:f3:3a:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:04:21:91:BD:0C:24:50:0C:5B:77:84:C7:A8:8E:07:4F:39:25:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056/0edd6b57-4818-305c-a0df-f4273bf87118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056/47036aa4-5627-41cc-9f4b-d70133ef0056.crl

            X509v3 Authority Key Identifier:
                keyid:F9:72:1F:68:1F:49:2B:48:3F:98:ED:D4:24:6A:F3:6F:DE:0F:FA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/47036aa4-5627-41cc-9f4b-d70133ef0056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:ea:cf:48:d0:41:2c:d6:ae:6c:b8:e3:eb:6f:c3:59:0b:
         47:40:58:bd:aa:d7:b1:3b:63:ac:34:66:a6:a7:0a:31:39:9d:
         91:68:a3:14:ba:5d:b1:d3:b1:db:a0:5f:85:e0:68:3f:e5:f1:
         e9:7e:32:3f:b4:6f:64:41:ec:b3:a8:56:fd:19:56:33:5a:35:
         2b:29:ac:7e:4e:df:b4:dc:23:de:31:48:81:c9:0e:98:a0:61:
         ed:83:a6:c7:04:68:5c:bd:24:13:8f:e5:d2:fc:3f:53:3e:6b:
         c9:2f:23:9f:d7:16:3d:ff:59:04:7a:e6:06:a4:f2:f2:fe:02:
         53:a0:eb:c7:14:53:41:2f:3a:51:71:d2:a1:36:53:78:aa:fa:
         25:a6:02:4b:ef:ed:12:02:ba:3b:dd:28:79:33:0b:d8:0c:a0:
         77:7d:f4:c4:39:43:d1:f4:ce:f2:be:f6:1c:58:55:86:49:3d:
         6a:58:d6:78:26:be:66:78:96:2b:08:77:16:06:4f:dc:9a:3c:
         d4:a7:74:fe:55:8f:dc:79:88:0a:c7:ab:71:b7:b2:b6:7b:d9:
         9b:3d:6e:cb:f6:56:dd:32:22:73:62:5a:21:02:fb:44:75:39:
         b0:61:71:04:3c:89:11:b4:95:14:a9:3d:b4:41:12:5e:d8:24:
         a2:6e:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:38:43 2026 by rpki-client