Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68fd0851-d2bb-33d1-8760-c3ed1b8fec67.roa
File:                     68fd0851-d2bb-33d1-8760-c3ed1b8fec67.roa (raw, json)
Hash identifier:          fH7B6H24aiG6GDE1yIKPI6D1HPMd+5uJvQDThjuR3SY=
Subject key identifier:   65:FF:09:ED:4A:20:CB:6D:09:EB:D0:B2:B8:81:7F:CA:E7:32:10:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCC46C3221462EAF812580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68fd0851-d2bb-33d1-8760-c3ed1b8fec67.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     701
IP address blocks:        64.1.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:c4:6c:32:21:46:2e:af:81:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=0e2c1c11-dc65-4afe-9c94-c47e03badef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:a9:05:dd:be:cc:cb:6f:8f:bb:fd:d3:69:
                    68:8f:77:84:af:cf:f4:25:54:79:91:12:fc:1f:9c:
                    5e:0f:bd:e6:ba:11:48:72:52:b0:67:61:a5:dc:e9:
                    3a:8d:1c:4f:93:24:a7:31:68:40:94:41:69:93:4b:
                    11:98:eb:d6:c2:be:40:ab:00:32:d7:6c:d3:08:6c:
                    71:1d:a8:b3:48:3d:b5:d0:49:a7:42:84:76:ea:aa:
                    c3:a6:c9:8f:0c:0d:01:81:68:3b:f1:60:8a:b4:af:
                    e1:17:31:db:26:41:3c:f6:85:c8:14:f5:9a:df:df:
                    5a:80:f2:ed:78:03:00:14:a2:c4:4b:1e:d9:9e:4a:
                    e9:5f:bc:33:ad:f6:e6:de:2e:cb:a9:b6:11:bf:ef:
                    14:8d:4f:e3:40:40:27:f7:38:8f:ca:a1:80:17:f2:
                    19:7d:6d:1e:b6:7d:b6:16:a6:e4:40:e4:2e:83:16:
                    b8:70:4e:1b:c2:10:7a:24:35:36:b6:11:77:aa:59:
                    ec:79:9c:dc:b3:d0:d4:4c:ab:c2:a8:d7:28:27:c1:
                    b7:91:c9:f0:99:a1:6b:fc:e4:67:97:f6:72:b7:7d:
                    13:4e:fe:cf:d4:e8:cd:95:07:00:42:f0:1b:82:09:
                    ea:c6:75:68:51:97:62:d8:a4:49:5d:51:e0:e4:7d:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:09:ED:4A:20:CB:6D:09:EB:D0:B2:B8:81:7F:CA:E7:32:10:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68fd0851-d2bb-33d1-8760-c3ed1b8fec67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.1.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:30:9a:3c:65:ef:54:91:c2:d7:76:68:a4:f9:6d:9a:91:19:
         98:4b:c0:f4:1c:b7:80:18:ae:cb:c5:ef:fb:2b:a9:44:59:79:
         bf:f6:b8:98:f6:07:e0:55:79:03:0f:5a:1f:26:be:85:b3:7a:
         8f:9d:aa:fc:a2:6a:67:82:6c:fb:26:b7:9b:98:de:62:a4:56:
         fc:17:61:56:8d:33:a4:6f:0d:2d:16:86:df:4b:67:9f:78:72:
         cf:d5:82:90:81:55:59:79:e7:a2:ee:86:81:e7:b8:48:dc:64:
         6f:0c:4b:7f:98:1f:c0:81:21:a3:26:b2:ba:31:41:df:04:b7:
         e4:3e:8f:58:a0:74:f0:3a:1c:da:41:fa:d3:89:43:17:eb:93:
         b9:2d:06:fd:e9:7b:56:94:dc:a7:c5:00:5d:9b:34:32:25:23:
         5b:8a:61:ad:d4:c4:65:fe:39:4b:3a:78:46:f9:d1:f4:ab:aa:
         1d:22:d0:26:42:5f:a4:8c:d7:97:c5:20:f1:a0:69:8f:47:18:
         2c:fe:b1:47:c0:50:83:83:c7:4b:f2:05:8e:17:a4:2b:1d:b8:
         92:1a:ee:c8:e8:de:b9:73:53:10:da:da:8a:92:0c:91:b3:5c:
         1b:ab:80:cf:69:63:69:f5:a0:c6:d1:33:4b:a3:2b:db:56:c9:
         73:51:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:02:56 2026 by rpki-client