Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/740b944b-aea3-3ec8-8abe-b5b312babc0d.roa
File:                     740b944b-aea3-3ec8-8abe-b5b312babc0d.roa (raw, json)
Hash identifier:          4Wb0e2s0Y+TpiCe6PlkMm8Nk1kDUObnSmP1H8kFf7cQ=
Subject key identifier:   6B:20:72:56:D4:F8:4A:69:BC:02:C0:78:F9:52:23:4B:D3:B2:E8:EF
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE42357D541CD2EDD6B6BEA80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/740b944b-aea3-3ec8-8abe-b5b312babc0d.roa
Signing time:             Wed 19 Aug 2026 18:04:02 +0000
ROA not before:           Wed 19 Aug 2026 18:04:02 +0000
ROA not after:            Wed 03 Apr 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        72.152.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:57:d5:41:cd:2e:dd:6b:6b:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:04:02 2026 GMT
            Not After : Apr  3 04:00:00 2030 GMT
        Subject: CN=aa41ac06-c611-4424-9808-c71fc956835f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b1:6a:31:1d:7b:1c:e4:e8:82:81:94:b3:25:
                    c1:bc:4f:44:73:1c:4b:e2:7f:96:5b:92:fc:48:e6:
                    d3:70:e2:66:fc:04:04:ea:c2:ce:ad:cf:8c:42:e6:
                    3d:07:c9:bc:98:72:7c:a3:36:57:54:22:57:e5:32:
                    be:60:09:8b:71:34:94:dc:f8:e3:35:a2:68:a1:0d:
                    cc:22:87:44:1b:a4:a8:db:f7:5b:37:21:ba:27:03:
                    71:39:fe:c0:d3:2b:2d:c1:34:9c:2f:64:3c:03:b9:
                    b3:64:63:ee:84:3d:09:1b:1a:82:b2:87:cc:3f:38:
                    c9:04:4d:25:0c:0c:bc:b5:5a:7e:f2:e6:35:fd:f0:
                    66:ad:8b:d8:7a:9a:cc:19:55:a2:2a:3a:66:c0:23:
                    6d:ce:64:c8:e7:c2:dd:cc:c1:81:23:ff:35:85:6f:
                    6a:af:03:15:89:1d:52:0e:78:c3:c2:6d:a5:81:2e:
                    fc:7c:fd:c1:b8:f2:ea:a7:69:a7:e9:e8:68:98:69:
                    9e:93:5d:39:28:19:9e:a0:32:a5:4b:2c:4e:37:d2:
                    f1:f3:44:06:8c:0d:ce:cf:59:76:27:48:60:62:ee:
                    be:7a:e8:c4:bf:04:a0:9c:c8:7e:48:f8:4a:63:fa:
                    6c:be:99:ea:9b:e1:8a:1f:9d:3d:63:fd:46:c2:38:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:72:56:D4:F8:4A:69:BC:02:C0:78:F9:52:23:4B:D3:B2:E8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/740b944b-aea3-3ec8-8abe-b5b312babc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.152.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:30:c2:9d:32:c4:6f:23:53:bf:8a:8c:0c:40:34:2b:e9:
         97:54:4c:be:73:bb:8b:94:18:c5:ce:40:77:22:6a:e5:7a:f4:
         19:65:11:33:59:b8:80:d2:ea:0f:33:eb:98:7c:97:99:79:d7:
         0b:57:aa:e5:cd:d0:45:39:5b:c7:9d:03:90:a7:76:76:78:1d:
         76:02:59:5a:ca:b8:8a:23:fc:e0:a1:19:51:6d:12:51:cf:49:
         a4:3f:c3:50:f6:f2:11:56:7b:47:13:66:f5:8d:89:30:9e:c8:
         03:60:bd:35:d5:a3:94:23:91:f9:82:08:d6:b8:0e:0f:ef:d7:
         77:25:1a:a6:e6:49:f5:b9:0c:71:63:87:01:70:fa:e6:ee:29:
         a2:17:3e:a7:14:da:52:6b:c4:fa:1f:70:c3:d5:6b:78:f0:d0:
         a0:7f:9a:0c:74:dc:d1:bc:f8:ad:84:ab:12:bc:b8:46:4c:26:
         dc:23:78:9c:87:f2:20:bc:32:dc:b3:76:47:95:08:b7:67:e9:
         16:6f:c8:e3:45:9d:74:a2:0a:f5:e9:f0:42:6a:06:5d:b4:a3:
         86:8f:44:a0:ef:22:ad:ab:1a:ee:f1:d9:d5:fb:88:08:60:d3:
         d4:5e:1a:74:1d:e6:7b:48:f7:25:61:1f:c9:cd:86:95:5f:20:
         d6:f2:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:55:46 2026 by rpki-client