Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7d8078d0-e310-37da-b0cc-4074b25103e6.roa
File:                     7d8078d0-e310-37da-b0cc-4074b25103e6.roa (raw, json)
Hash identifier:          VdO3YeBOc1jxhBy6OTGOZTkRzwhKYGWSwG1p1o7cmXM=
Subject key identifier:   0A:05:CE:03:22:FA:1B:D5:59:FC:7E:9B:9D:28:8E:B2:71:B5:90:19
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584EC3726FE1905DA5ABD3D97380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7d8078d0-e310-37da-b0cc-4074b25103e6.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     16787
IP address blocks:        68.114.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:6f:e1:90:5d:a5:ab:d3:d9:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a5018632-e0b6-48c8-9d74-543786ae71bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:0a:2c:b2:a0:4c:4b:ae:64:13:b3:57:fb:
                    6f:49:0b:82:13:fc:a8:78:a0:7b:fe:be:39:b3:c6:
                    3f:7b:4b:ad:4f:3e:d4:65:96:de:4c:08:b6:fe:e5:
                    54:7c:0a:8d:3f:cb:aa:66:2d:2b:5d:ae:81:26:be:
                    5b:eb:54:4c:7a:40:6d:f4:7f:ff:38:b7:b9:26:55:
                    97:34:40:b6:80:83:e2:3a:b5:fc:70:1b:15:c4:b8:
                    cc:af:f0:12:8c:2e:34:80:4e:93:cc:ae:2b:3f:d5:
                    a3:06:c8:3c:9a:6c:de:db:8c:b4:4c:22:c2:b2:ae:
                    e3:4e:94:f7:dc:b0:c7:fb:54:25:98:2a:27:81:18:
                    f3:14:f6:d5:7d:63:ac:b9:cc:93:4d:3c:de:46:22:
                    d3:b9:92:85:db:a0:43:5d:ee:7c:2d:8d:f3:2f:cd:
                    ef:f5:55:b0:26:db:6a:9a:d1:fd:35:09:7f:e5:91:
                    fd:e1:ae:a7:b3:f4:54:05:0b:39:71:7a:74:03:35:
                    9d:e2:03:ca:b3:16:c8:78:2c:3d:01:6e:78:ce:f7:
                    fb:2b:99:bc:58:81:c3:a7:9d:95:a4:a4:00:89:cc:
                    6d:e8:e9:ab:1a:ae:9d:fd:56:2a:91:62:eb:08:f7:
                    3f:fe:9d:9b:71:39:1f:b4:31:60:69:ba:2d:86:7c:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:05:CE:03:22:FA:1B:D5:59:FC:7E:9B:9D:28:8E:B2:71:B5:90:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7d8078d0-e310-37da-b0cc-4074b25103e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.114.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:62:b4:67:3e:66:d6:f1:2e:a2:38:ca:58:bc:45:1a:75:3a:
         7b:eb:af:4f:b2:cb:ea:7d:52:1d:2d:1b:27:34:73:d1:32:94:
         b4:9c:a3:00:1e:2c:a8:94:02:46:d6:1a:3f:9f:ea:3f:28:c9:
         6f:6a:6e:57:44:bd:d5:0a:3e:4b:c6:6e:9f:f0:15:96:47:80:
         a5:ca:61:af:6e:12:d2:a2:86:b9:7b:89:0d:31:12:dd:18:bf:
         37:37:9f:f6:f1:12:e9:33:8c:45:f9:d3:7f:5a:59:bf:50:87:
         88:00:88:16:ea:ba:fc:a7:aa:26:03:78:1d:cd:2a:a2:a8:1c:
         39:7d:3c:00:85:5a:6a:8f:4e:56:9b:1d:3e:f8:fb:f3:30:dc:
         09:f9:a8:9e:f5:44:21:bb:d9:3b:1a:6d:52:16:62:a4:3f:91:
         75:9f:cb:51:35:64:d3:49:ca:76:6b:c5:99:de:b1:b8:03:bf:
         87:b4:2c:fb:50:33:d3:9b:ad:8c:71:cc:e8:9b:46:95:cc:1d:
         d2:16:08:8a:93:c3:a3:2e:30:38:c8:54:d4:eb:68:27:fd:54:
         c1:ce:3c:3a:ac:9d:6b:10:90:00:c3:09:f4:24:91:13:54:9c:
         6b:47:5a:97:11:62:29:cd:14:31:36:64:ed:1f:81:18:57:bb:
         80:c6:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 19:13:37 2026 by rpki-client