Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f3ba5f4-1246-3fcb-9b95-46c627abaa47.roa
File:                     1f3ba5f4-1246-3fcb-9b95-46c627abaa47.roa (raw, json)
Hash identifier:          t8W+xOwDTKcNjrG/mheRfxikdsAHd2BaUSZSE6RKdQM=
Subject key identifier:   2E:1D:74:C1:9A:EB:0D:45:79:AC:00:C3:EB:B5:DF:A2:18:6B:AB:D4
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE4235A686F515F06D0F52880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f3ba5f4-1246-3fcb-9b95-46c627abaa47.roa
Signing time:             Wed 19 Aug 2026 18:04:03 +0000
ROA not before:           Wed 19 Aug 2026 18:04:03 +0000
ROA not after:            Mon 11 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.80.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5a:68:6f:51:5f:06:d0:f5:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:04:03 2026 GMT
            Not After : Mar 11 04:00:00 2030 GMT
        Subject: CN=fc67d11d-5645-4916-a4ae-5304a5e0d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:01:06:e3:bb:ca:69:fb:8b:1a:3a:8d:84:
                    c0:ba:23:b9:d2:6d:23:eb:0d:4e:75:83:06:25:17:
                    a7:66:fa:38:9d:87:7e:93:54:c8:aa:74:c8:63:ce:
                    fd:f9:0d:f5:4b:6f:39:18:1a:73:30:6d:fa:80:b5:
                    03:76:41:22:1b:48:d1:af:fb:96:5a:da:82:94:52:
                    1e:41:ae:20:59:67:a1:55:47:10:69:d8:08:1a:0c:
                    6f:d8:b1:6f:86:27:20:81:8b:6e:b9:e3:d6:b6:5b:
                    5a:c2:a2:c4:78:ef:b2:58:e4:ef:80:40:5d:13:b8:
                    36:5d:db:1d:5c:b5:6a:27:8b:94:e8:e6:59:ab:96:
                    15:d9:5e:b7:91:44:d2:63:2a:0d:d3:5d:18:18:ba:
                    b9:53:fb:09:00:29:11:de:19:8d:c3:34:e3:b2:e8:
                    cd:17:a3:60:ee:a2:5f:81:06:44:53:ee:73:c6:d9:
                    74:bf:df:d6:ef:d3:c4:ea:ba:5a:d5:44:a3:a6:00:
                    a7:5c:cd:fc:4b:da:e4:09:8a:06:23:ff:49:40:5d:
                    b6:b2:a9:33:45:d9:f2:45:93:54:25:78:18:6b:ed:
                    6a:5e:d8:16:15:cb:49:ad:5b:41:63:45:6d:30:35:
                    de:e8:85:b5:c5:e9:e7:c2:b2:b6:88:62:75:3a:0f:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1D:74:C1:9A:EB:0D:45:79:AC:00:C3:EB:B5:DF:A2:18:6B:AB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1f3ba5f4-1246-3fcb-9b95-46c627abaa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.80.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:10:60:73:9e:6f:9e:a6:25:4f:7d:e1:4e:e7:f2:89:b4:89:
         a1:b6:8b:83:4e:ea:98:eb:1f:83:9a:13:70:79:ea:53:84:19:
         54:ed:fa:12:1f:60:8e:d9:d6:52:d9:4e:d6:22:14:1b:84:61:
         ef:bc:f1:ff:73:ad:32:c7:c5:92:92:49:6f:32:9c:d0:0b:5d:
         28:62:81:78:1c:e9:eb:e3:c2:c5:e9:e9:e2:82:7d:d8:69:5b:
         cd:54:80:c5:51:83:88:a2:ef:f7:9f:79:cc:1d:f6:0a:1a:00:
         20:08:51:33:43:0a:7f:5a:f5:3c:9a:de:76:98:28:95:c6:88:
         b1:ac:9a:06:0a:a3:bf:9c:9f:c6:00:dc:fd:7f:6e:61:59:a6:
         96:79:52:f6:d3:2d:13:60:b4:54:36:3f:b9:b9:77:ab:a8:78:
         dd:81:df:21:e5:eb:8d:3f:69:25:58:20:ed:90:ad:a3:f3:96:
         d0:95:87:e3:3e:bf:eb:d9:db:87:58:bc:3f:c7:24:c6:06:c1:
         07:f5:97:84:97:61:ae:d7:62:58:96:92:58:94:0f:39:a1:d9:
         0b:62:c5:2b:52:5f:d3:d8:e5:0f:49:6f:e3:3d:85:0f:b4:d3:
         88:65:84:f1:da:1f:b4:f0:75:e9:c8:38:ad:a9:3b:06:59:f4:
         82:14:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:16:12 2026 by rpki-client