Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa
File:                     379a4041-9b9d-3d0e-bb79-4431614aa2db.roa (raw, json)
Hash identifier:          IAkDPw5Twfj36r/brWF2VqNC9uDezmhe4WXWgrdFJoA=
Subject key identifier:   FC:07:46:02:21:25:67:1F:86:40:55:2D:92:EE:20:4F:B8:3A:BF:EE
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584D143D451C47FE05944734B100
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     212238
IP address blocks:        68.67.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:45:1c:47:fe:05:94:47:34:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=0a8abf6d-fc82-4d70-8cc1-9962e28a2852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:d9:25:3f:b9:3f:42:9e:71:51:cc:16:3b:
                    05:05:aa:c4:ab:dc:41:50:70:d9:97:df:10:40:44:
                    57:7d:34:c7:21:52:7d:1c:1c:aa:66:17:6f:5f:ca:
                    36:0f:39:dc:0f:9d:b2:0d:c8:ec:b3:bb:45:1b:26:
                    33:ff:52:0f:22:70:82:2f:f2:a5:7c:fa:28:88:e2:
                    95:5c:95:cf:5c:f5:d7:fd:98:b0:2a:16:ff:0d:81:
                    da:2c:b0:c4:f8:98:8d:e5:44:1b:03:8e:d6:e4:29:
                    de:ac:2c:e8:04:eb:a9:99:ed:3f:24:a0:df:7e:08:
                    5b:01:b2:18:37:33:52:6a:b4:77:b4:99:b9:8c:46:
                    62:24:15:83:f3:54:d3:25:bd:a6:42:8e:74:5e:e6:
                    e0:aa:79:1a:f8:80:2c:9f:0c:e4:3a:ed:4c:25:48:
                    9e:f6:2d:a0:f1:e3:58:10:69:88:fd:4f:27:53:f5:
                    50:14:03:66:4d:f9:cc:a9:3c:0c:70:0c:0b:62:6d:
                    2a:46:72:29:26:cd:3d:90:8d:00:bc:0a:45:50:e1:
                    92:7e:b3:94:c7:63:af:a9:1d:25:f8:0d:6b:48:15:
                    24:ca:b7:91:47:35:ba:00:54:da:a2:21:39:da:1a:
                    66:b1:15:3f:69:cb:24:51:a4:48:53:86:c2:dc:a3:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:07:46:02:21:25:67:1F:86:40:55:2D:92:EE:20:4F:B8:3A:BF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:60:61:5d:53:3b:76:7f:94:0c:30:7f:e7:d5:e4:b1:ef:4f:
         92:3a:15:05:c3:51:f1:1d:37:8b:11:1f:56:d4:f2:88:8d:e1:
         2f:ec:07:b9:33:f6:b5:55:26:23:d1:69:d7:39:0e:ae:03:d6:
         e7:88:42:3e:07:e4:1a:28:2d:ad:b5:24:2e:b9:e0:a2:af:a9:
         53:ec:24:92:a3:7b:7d:d1:c4:ae:35:b4:53:92:da:a2:da:99:
         c0:ba:8c:f8:84:7d:fc:ea:ae:8f:84:6e:a2:17:a1:e9:02:87:
         b6:f8:dc:28:91:e1:75:c1:91:06:a5:b2:03:d7:3d:f8:76:f2:
         ad:2d:f1:5e:ba:f0:ca:f2:98:1b:d0:6e:8e:a1:8b:f5:0b:b4:
         22:8f:00:db:a6:70:02:35:fe:39:ce:e4:ef:f3:89:c4:6d:13:
         7d:a4:f6:04:46:c4:c3:c1:79:ff:1e:68:5d:10:e8:6d:cc:d7:
         6e:c6:51:b9:3e:fd:77:46:f3:ab:2f:5b:79:a7:1a:9a:e7:d3:
         97:58:26:86:61:45:75:92:59:bc:86:cd:f0:b6:8f:f4:48:60:
         e2:bb:ef:24:32:6f:8c:8a:bd:e9:6e:39:38:fe:39:38:ff:96:
         5b:fd:8b:61:f1:bb:8c:b8:84:83:9f:eb:7a:14:1b:f2:0f:d3:
         72:62:ca:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 03:30:29 2026 by rpki-client