Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa
File:                     c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa (raw, json)
Hash identifier:          lrGc482aWTK4TjFF9VmcO04NGlBawaY55NGF2+ZWUxc=
Subject key identifier:   51:02:37:E4:8D:DB:6E:EA:14:F1:C3:C6:0E:96:90:F5:23:10:F8:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F90A30C7B72DD6D7CF6BFD500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa
Signing time:             Tue 20 Oct 2026 13:00:13 +0000
ROA not before:           Tue 20 Oct 2026 13:00:13 +0000
ROA not after:            Mon 18 Jan 2027 14:00:13 +0000
asID:                     701
IP address blocks:        68.163.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:90:a3:0c:7b:72:dd:6d:7c:f6:bf:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 20 13:00:13 2026 GMT
            Not After : Jan 18 14:00:13 2027 GMT
        Subject: CN=32be7ced-a3e8-429f-aa33-1893633316ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:15:69:09:da:e5:d1:19:07:34:b0:8b:46:
                    6d:91:ea:da:cb:96:1b:34:9f:4c:64:54:6c:96:72:
                    92:3a:09:43:76:2d:cc:27:4e:f8:ee:b1:b5:44:42:
                    e6:03:d4:13:68:80:5f:e2:e2:65:c7:b0:f9:e1:b4:
                    cd:ec:7a:97:28:de:e8:3d:69:6d:b8:4f:4d:ad:84:
                    d3:54:1b:05:5a:88:e2:68:45:1c:b1:59:90:79:37:
                    ec:75:e4:8a:73:78:3d:20:1c:92:46:ad:47:e5:e7:
                    cb:98:13:1a:29:60:1f:dd:b7:06:6e:99:52:b2:ae:
                    eb:52:cb:ed:71:45:52:24:06:4f:e3:35:a3:27:92:
                    70:95:99:12:55:0c:cf:f8:fb:dd:85:ac:fe:0d:ff:
                    6b:80:80:10:cf:4c:d0:1c:1a:88:d2:2a:f9:40:08:
                    d5:23:e0:37:0a:54:e3:91:0c:5a:ef:da:90:9c:41:
                    63:9f:3f:41:06:85:94:60:a3:d2:b3:55:5b:9c:a9:
                    a2:79:22:04:5d:78:80:9b:5d:1d:d1:41:87:a1:dc:
                    cd:10:af:37:f1:58:8c:da:9e:e2:68:31:35:03:08:
                    df:20:a2:c7:e8:1b:cc:2e:de:0b:8a:de:76:58:7c:
                    11:73:cb:63:89:18:8f:04:2a:f3:19:66:f8:d5:da:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:02:37:E4:8D:DB:6E:EA:14:F1:C3:C6:0E:96:90:F5:23:10:F8:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.163.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9f:f4:bf:ad:63:ed:72:20:2f:4f:af:0f:93:6b:f3:38:19:
         7c:46:d5:8c:04:6f:0a:17:2b:64:99:0a:26:ee:4b:c1:50:f9:
         7a:e7:57:64:96:84:89:fe:84:df:9a:ab:50:0c:c2:ac:70:59:
         e3:78:f8:f4:cb:7e:3f:ab:a8:3e:23:ae:bf:0e:8b:d5:1f:e3:
         bc:27:a2:48:37:2c:74:54:cc:69:ef:59:bd:3e:99:1a:c6:04:
         30:d5:19:1e:06:04:9a:3a:34:36:2f:a1:b8:2d:22:6f:e9:47:
         0a:4d:e2:da:58:98:83:f4:00:23:47:74:db:3f:11:99:9d:a6:
         e8:db:6d:06:e8:17:bf:94:e3:c6:1b:59:fa:cb:07:cb:6a:83:
         8b:80:50:8f:b1:d9:91:6e:08:dc:d8:e2:1b:33:8f:62:50:27:
         a6:b1:8f:e3:85:ee:ca:0b:1c:41:d5:89:47:39:61:2f:07:a7:
         04:86:22:f9:86:6e:e6:7a:a7:da:da:77:97:99:2d:2e:b6:98:
         2e:00:13:61:fd:dc:fb:52:c5:0c:5d:54:1f:27:cb:31:9c:56:
         e6:3d:47:55:87:78:4b:49:ab:3e:a9:f0:a0:22:34:f4:cb:60:
         18:94:b3:59:50:6f:d5:5b:5e:db:a2:c4:49:f1:62:5d:b3:a1:
         e5:bb:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 11:58:35 2026 by rpki-client