Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a2c8686-de16-3acf-8954-1fd653951608.roa
File:                     9a2c8686-de16-3acf-8954-1fd653951608.roa (raw, json)
Hash identifier:          TD2vyxK4QFgQKCmgX7z5q5aSWzSF04fvCI3PUFqRF7M=
Subject key identifier:   6F:F2:F6:19:A9:A3:97:3C:8E:89:10:26:EA:1D:6D:39:58:02:02:67
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE42355D8BAFE01F315DFB4D0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a2c8686-de16-3acf-8954-1fd653951608.roa
Signing time:             Wed 19 Aug 2026 18:04:01 +0000
ROA not before:           Wed 19 Aug 2026 18:04:01 +0000
ROA not after:            Sun 31 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        74.248.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:55:d8:ba:fe:01:f3:15:df:b4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:04:01 2026 GMT
            Not After : Mar 31 04:00:00 2030 GMT
        Subject: CN=32338971-8625-4d7e-9b63-56bf34795736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:e6:04:cb:e8:c5:05:14:22:0c:79:42:33:
                    59:89:0c:ca:d1:5c:c9:f1:73:de:3a:c6:f7:fe:51:
                    df:2b:82:23:f3:63:07:a8:31:6c:93:f3:9f:01:cc:
                    2b:5d:fc:9f:25:cd:0a:d9:db:c5:16:0b:0b:b5:24:
                    23:f7:bf:d8:e6:92:be:7e:84:37:6a:aa:8c:df:45:
                    60:90:f8:8e:9a:16:e9:62:25:99:e6:ab:4f:fe:be:
                    81:b1:24:e8:9e:6a:d3:74:d9:9c:46:e5:f5:40:e1:
                    8b:47:25:6a:70:f1:84:09:a8:36:f0:06:8c:72:f3:
                    39:9d:86:e1:82:1d:25:4d:47:73:0e:2a:e0:fb:64:
                    3d:65:09:67:4b:31:dc:76:5e:ff:04:b7:13:4a:ee:
                    96:17:79:86:ef:af:28:8f:26:0f:07:ee:1a:38:80:
                    ee:bf:f3:dd:2f:02:36:8c:cd:81:37:27:01:e2:7a:
                    94:5f:01:a5:c6:a2:77:2b:3f:19:38:87:d6:f1:52:
                    e9:15:44:66:a5:15:37:b5:4e:0f:53:1d:1f:39:95:
                    8e:b2:20:54:3f:39:be:6e:b7:ab:a4:20:52:33:8d:
                    13:a4:5d:0b:bd:ad:8a:d3:73:f6:71:75:36:0d:01:
                    2e:49:3d:fd:a0:fe:63:a4:6c:7b:c2:f7:b6:89:20:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F2:F6:19:A9:A3:97:3C:8E:89:10:26:EA:1D:6D:39:58:02:02:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/9a2c8686-de16-3acf-8954-1fd653951608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.248.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:ad:35:3d:d9:c8:40:2b:7d:a6:aa:5c:81:91:8d:c4:b2:
         67:9e:ed:28:a6:15:32:7b:30:75:fb:11:14:34:36:01:d7:92:
         05:da:bf:04:cc:bc:75:7f:57:df:d8:d6:33:5a:e4:e8:23:34:
         50:89:43:8e:fc:da:27:b9:dd:dd:fb:e9:20:52:46:72:3b:13:
         83:aa:39:1d:6b:11:4a:59:93:7e:0c:93:23:b3:11:6f:c8:69:
         b5:66:bc:c5:23:aa:74:b5:a0:0f:2c:bf:f3:fd:9a:22:b6:ed:
         98:e7:4c:84:51:e0:7a:19:ad:09:1e:9b:1e:2d:29:2d:1b:f4:
         a1:19:8b:1b:a8:75:da:34:4c:5a:2a:1d:f4:79:74:d9:e9:4c:
         b3:5c:6c:ef:ec:a2:59:ea:5f:d5:bd:c4:09:c7:d3:00:42:e1:
         1e:0c:80:9a:46:9d:66:ff:dc:7a:fe:86:20:cf:ae:0c:b7:b4:
         c7:fb:ba:6b:2f:0e:a5:db:4d:dd:03:44:be:a8:33:42:96:db:
         4f:b3:c2:48:50:ca:2a:d5:c1:be:6d:fe:7f:dd:19:9f:9c:e8:
         69:33:13:a3:9a:71:fc:27:ab:67:5b:f5:fb:24:57:38:f2:1c:
         51:96:bd:21:46:16:e7:3b:38:cc:56:df:de:e3:1e:23:1d:c0:
         bc:da:5d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:00:19 2026 by rpki-client