Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa
File:                     470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa (raw, json)
Hash identifier:          FO/ldxOIk7YYrmbgZlqQUoIO+poIw1e1ATAMq9TggQQ=
Subject key identifier:   61:76:A9:9B:5B:BC:DE:0F:E7:D2:C7:96:23:79:04:32:76:17:B0:80
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE42359BEC88B1F57D4CDC300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa
Signing time:             Wed 19 Aug 2026 18:04:03 +0000
ROA not before:           Wed 19 Aug 2026 18:04:03 +0000
ROA not after:            Fri 29 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        40.126.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:59:be:c8:8b:1f:57:d4:cd:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:04:03 2026 GMT
            Not After : Mar 29 04:00:00 2030 GMT
        Subject: CN=5985c290-b388-4d9f-ab26-42c2340ca82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:67:6a:8d:15:a7:a6:fb:07:a2:db:93:b3:
                    50:ea:17:13:06:93:41:4a:a0:21:b8:09:bc:65:53:
                    c1:44:a2:86:fd:ea:af:3e:c6:d2:10:24:39:b6:93:
                    e9:87:34:56:6e:e0:f6:83:69:e6:61:e2:07:25:b1:
                    a6:32:8c:be:7b:c5:bf:82:55:35:c5:a5:91:de:62:
                    5d:28:43:39:9a:1d:2d:9f:02:b5:ea:e5:e0:47:75:
                    a3:d1:e4:ba:33:01:bf:e5:48:7f:6a:e3:9e:8e:41:
                    b6:f8:5b:6f:a6:a3:97:e1:b7:85:e7:a6:d4:50:d6:
                    0f:96:bc:fd:91:b9:9a:51:0a:bf:1c:d6:84:8b:10:
                    f7:06:43:40:d1:7d:de:eb:3e:1a:70:ac:90:51:d0:
                    a0:e5:1d:31:b7:15:0e:e3:91:d8:39:1c:34:c8:7a:
                    6d:77:29:4c:9d:bc:8c:3f:ba:96:63:45:e0:e2:13:
                    a2:f2:88:14:31:f8:75:2a:3b:80:68:da:9a:46:c2:
                    55:f2:17:a3:0a:77:1e:e0:e1:47:9d:71:4c:bc:9e:
                    a0:a7:85:66:ce:74:f6:0f:4e:c3:0f:d1:2d:e3:9b:
                    79:74:f2:69:c6:20:af:b7:c5:5c:27:98:75:98:7c:
                    23:fc:df:f1:be:3d:56:18:02:6b:02:9b:9f:6f:2b:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:76:A9:9B:5B:BC:DE:0F:E7:D2:C7:96:23:79:04:32:76:17:B0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/470dbb79-0a2f-3f6c-8c6f-974373258ec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.126.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:f6:9c:ec:e1:ff:af:bd:17:e8:8a:ce:dd:3e:0a:30:e4:
         22:b4:b5:4e:ff:e8:4f:0e:8f:e6:4d:36:97:92:69:b1:eb:92:
         80:82:af:b1:e0:82:f1:a0:e2:5e:6d:7d:9f:5c:2e:88:e6:10:
         3e:f5:34:bf:a2:7b:5f:e0:eb:ee:f1:6f:19:27:01:dc:7a:31:
         ae:fc:bc:4b:bd:d3:09:52:15:55:7c:17:32:d1:e0:30:cb:c7:
         4b:9a:49:67:63:82:34:2c:35:d6:d8:8e:4e:f5:97:f2:7e:58:
         d8:05:50:57:d3:e9:81:5a:67:79:c7:28:7b:85:5f:da:5e:77:
         e7:63:b0:d7:c0:d2:5d:27:ba:b9:2d:ec:b1:a4:e2:c1:02:66:
         2f:78:60:f2:8a:e9:c6:f7:ff:a0:27:8e:41:21:37:b6:ec:99:
         e8:af:f5:a3:d4:a4:d3:9a:96:6b:db:7c:3c:cb:a1:09:0c:a0:
         04:02:03:6e:1e:14:36:f4:47:20:76:fc:53:6c:76:9a:fb:52:
         bd:53:04:f2:dd:11:16:61:55:ff:4b:c5:c4:c0:45:e9:b0:2b:
         a7:64:78:1c:de:89:6e:98:5a:69:ec:34:0f:45:12:7b:19:4e:
         6c:2d:b7:09:0e:58:16:b9:46:a3:b0:ee:f5:0d:2e:ae:67:14:
         ed:c7:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:59:11 2026 by rpki-client