Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe875c1c-effd-3f67-a8b2-203a1ce65146.roa
File:                     fe875c1c-effd-3f67-a8b2-203a1ce65146.roa (raw, json)
Hash identifier:          ffmcXhXCjqRYCMQSRQeTm8UTlob+qKgNY/U30/ltXFo=
Subject key identifier:   59:F5:53:EB:A9:56:8E:65:03:62:E7:6C:56:14:03:7E:9F:0A:9D:67
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB76DA940BD001B3BFBAA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe875c1c-effd-3f67-a8b2-203a1ce65146.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     701
IP address blocks:        68.237.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:6d:a9:40:bd:00:1b:3b:fb:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=91b0d890-8f78-49a6-9345-aefe190ed4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b8:b9:b2:c7:b5:13:6a:b8:66:89:10:9d:0e:
                    74:b2:c0:e2:24:fa:54:98:7e:2f:52:0f:17:02:63:
                    e9:88:e2:7b:71:ca:f8:49:ea:9a:50:46:d0:1b:91:
                    7b:6b:7d:72:7d:ff:d9:dc:15:ff:40:3e:5e:ed:38:
                    7a:7c:c6:e4:75:1c:28:7a:35:5d:98:ed:a1:3d:ac:
                    de:af:7e:8a:dc:d3:fa:0d:b9:d9:7a:33:3f:29:c2:
                    7a:c2:3c:82:fd:d2:ed:32:3e:9e:78:f0:60:1f:bd:
                    5a:94:cb:e6:af:7e:cf:4d:b9:ff:b7:a4:77:fa:d0:
                    8d:95:11:b0:86:ba:97:c9:6f:f2:2a:ec:6b:a8:32:
                    bb:46:7b:80:ea:a2:b0:24:7c:a3:45:83:41:e2:9e:
                    57:9d:6b:47:7c:8a:d9:e8:8a:68:60:85:10:90:91:
                    65:88:15:de:3d:9f:c3:50:bd:ae:7c:d8:d9:3f:0f:
                    a2:c2:df:88:a7:b1:1f:6d:60:91:7d:28:f4:a4:e1:
                    22:4e:fa:1b:56:80:f1:b0:e2:c7:d0:81:03:89:0d:
                    6b:2e:f3:19:e0:94:a0:03:93:2c:36:17:62:31:1f:
                    1f:35:67:f3:14:2d:60:1b:d1:19:c5:b9:9a:24:f9:
                    20:e2:ce:85:c2:3e:74:78:51:4d:96:da:46:d1:04:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:53:EB:A9:56:8E:65:03:62:E7:6C:56:14:03:7E:9F:0A:9D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe875c1c-effd-3f67-a8b2-203a1ce65146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.237.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:63:cc:96:40:32:dc:2f:8a:f2:57:70:a1:9e:49:dd:c4:e2:
         98:6e:45:da:b0:f8:b4:82:e2:1f:8d:5f:e3:07:9d:9c:36:b1:
         fe:e0:b5:fd:3e:ef:0d:b3:2f:00:e2:1f:6d:6b:75:91:0f:b7:
         ad:44:81:d2:76:ea:89:48:ee:b7:f0:53:5e:d7:65:41:b4:b0:
         bb:7b:e0:0f:bc:e2:df:ff:1f:33:71:76:87:33:30:11:1d:13:
         16:ed:dc:60:f8:0f:1a:d5:b1:c8:c0:da:ad:e1:33:6d:15:11:
         7c:4d:86:49:05:40:0a:54:67:5a:29:63:97:a8:ed:24:04:b5:
         e7:ae:4a:b3:36:2b:d2:56:29:38:86:eb:3c:16:94:12:ad:e2:
         b4:42:45:ec:4c:94:a5:af:26:a4:8e:7f:38:0e:7c:3d:e0:c5:
         fd:dd:02:3b:f2:ac:23:aa:95:e6:f3:1c:00:d8:55:56:6b:b7:
         fe:24:fc:2f:98:3a:1a:db:76:9f:da:05:a0:02:b8:73:2d:d3:
         0c:46:0d:04:13:d8:bf:65:e9:8e:98:9d:00:c3:53:d3:ea:76:
         46:4e:bd:a7:52:3f:0c:e7:bd:e4:7a:e4:6a:80:88:ef:11:86:
         2b:77:08:51:f0:8b:1f:af:de:a7:de:10:2d:d6:e3:72:9c:d1:
         ad:bf:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 18:09:51 2026 by rpki-client