Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa
File:                     1482b004-1b22-3e7a-8fe6-76c54591fd71.roa (raw, json)
Hash identifier:          nHufFciSeEoSwBl+M0iiMlsllhjy0ml06w5NJoMAWNU=
Subject key identifier:   B5:1B:4A:2B:B0:13:4F:67:47:A1:E2:F4:C2:8F:7C:4A:48:E6:CD:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF7177E4DBE7E7AA6D1B43CB8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        68.160.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:7e:4d:be:7e:7a:a6:d1:b4:3c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=0ad69eb8-33a2-4cb2-95bb-41ac59902a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:73:73:f8:89:37:7c:d7:08:0a:fe:7c:e7:
                    2b:d3:e7:2c:bd:a4:cf:a0:2a:2f:14:bc:8b:e8:88:
                    e4:db:6d:16:e6:f4:7a:74:f4:c0:93:cf:4e:e9:12:
                    eb:36:06:08:5e:fe:19:9a:8c:81:ee:76:99:06:65:
                    bb:ca:79:83:ed:15:0e:f2:6f:dc:02:7a:3b:b4:83:
                    98:e6:f4:28:ba:0e:68:0a:b3:f2:5c:0e:2b:7a:ca:
                    14:65:dc:11:cb:c4:c6:d7:37:91:55:56:33:b4:45:
                    95:72:26:7a:61:6b:a7:14:27:cf:07:b0:dc:0d:eb:
                    32:34:b0:30:d7:0f:f3:b8:88:0f:42:1d:e7:43:85:
                    39:b9:cb:31:ec:64:f6:dd:ea:1b:89:ab:d2:ce:d3:
                    48:fc:ba:0b:d1:0b:b9:20:00:83:7d:89:85:20:9b:
                    cb:2f:fe:28:90:32:d6:cb:05:59:43:e8:b8:71:5a:
                    76:8d:b2:10:fd:78:79:fa:25:48:c2:66:08:13:0d:
                    13:dc:61:44:93:53:c3:be:01:77:a0:1d:1a:69:c4:
                    9e:35:ea:98:87:32:35:88:ca:41:37:14:a3:0a:cf:
                    87:c8:da:9c:47:62:52:5d:3a:1d:07:80:da:72:91:
                    d8:18:eb:c1:50:3e:13:35:8d:83:49:d1:64:5b:60:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1B:4A:2B:B0:13:4F:67:47:A1:E2:F4:C2:8F:7C:4A:48:E6:CD:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1482b004-1b22-3e7a-8fe6-76c54591fd71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.160.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:8d:ea:77:d4:32:23:b2:08:4e:d0:7b:b1:4a:3f:53:2c:
         e6:13:cc:29:8b:69:89:05:a9:8c:52:c2:43:dd:5f:e7:eb:56:
         9e:4c:46:59:9a:b3:43:dd:0f:a5:58:a6:2f:8a:82:42:80:89:
         e3:1c:d8:c4:36:a0:5a:e1:91:c4:73:e8:5f:b8:b5:01:c3:db:
         06:01:b4:97:70:fc:91:c5:c4:74:dc:75:1c:99:89:7d:a4:d1:
         99:3b:96:c3:5d:62:d8:b9:94:58:81:c7:1a:e7:6b:ed:1c:26:
         1e:88:81:6d:03:89:68:5d:29:73:09:7d:e2:49:f4:b0:97:38:
         a5:37:09:8d:bc:eb:8a:0c:fa:8d:d5:8f:20:b5:3a:7e:3a:f3:
         5a:2b:b4:66:cd:3a:6e:76:45:b3:11:d7:dd:60:1b:e3:95:89:
         2c:b9:52:33:62:e2:89:8f:ed:b2:68:48:f3:ec:44:47:49:a4:
         28:18:5a:16:63:7f:3e:2b:3e:b4:b6:74:fe:bf:29:2f:4a:c1:
         33:4b:bc:5b:df:fd:3c:1f:df:96:8b:cc:d0:9d:df:49:5a:20:
         55:4b:8b:63:3e:44:d7:d6:ec:39:87:2a:03:16:3a:c7:0f:bf:
         d4:36:84:35:51:f8:5e:f3:2c:f0:e8:ca:37:c2:f0:10:42:13:
         5a:98:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:04:36 2026 by rpki-client