Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa
File:                     4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa (raw, json)
Hash identifier:          kPaUutXyHzyy+nkDeV1052Utay4hF2rW3xyZTtX82Dc=
Subject key identifier:   9C:72:48:FF:56:63:3F:8D:C0:D1:1F:39:A4:39:20:EA:CA:2F:96:9A
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584F58CD514D814386BDEDB5E280
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     834
IP address blocks:        68.67.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:51:4d:81:43:86:bd:ed:b5:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=d2d45560-6b1f-4abc-8a8e-dc77179f9eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:c3:bf:aa:b4:3a:27:31:18:11:7a:26:77:
                    b7:31:09:f9:ce:4a:49:13:d3:d1:12:1c:20:6c:06:
                    df:26:fb:a5:fb:f5:a4:3e:b4:23:f1:74:dd:d8:a8:
                    30:85:22:74:ea:7f:cc:ec:df:13:30:05:db:ed:ef:
                    91:00:9d:5a:06:a2:f8:34:80:68:6c:fc:d2:00:42:
                    55:99:68:22:6d:bb:4e:c4:c9:35:6a:a3:81:c3:5f:
                    93:ca:d4:e9:65:20:a8:94:cf:ff:8a:2b:42:68:b2:
                    1b:44:59:0e:a0:db:8d:c4:10:04:0a:24:59:a5:8d:
                    45:40:ed:23:2c:7a:9b:1b:b8:8c:90:7b:2a:33:0a:
                    48:91:a9:75:5a:c1:f6:06:f5:65:e6:79:de:31:53:
                    13:a4:d0:e7:64:b7:0d:e3:f0:ea:28:29:2d:68:52:
                    c5:1e:e7:70:62:89:dd:0b:4f:22:c9:8b:94:1b:32:
                    98:c7:dd:39:ed:03:f4:6f:25:c3:bc:7c:0f:7f:7c:
                    23:4e:c2:c0:fa:70:3a:bb:b8:79:5d:e8:5f:6c:d9:
                    68:df:ff:62:ef:7f:1d:bb:5c:bc:57:a9:f1:b7:0a:
                    e0:80:96:f6:42:74:57:81:ee:35:5c:90:53:97:63:
                    85:0b:6e:34:82:84:b6:83:f1:e7:19:cd:46:e2:c0:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:72:48:FF:56:63:3F:8D:C0:D1:1F:39:A4:39:20:EA:CA:2F:96:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:20:59:40:29:ad:b2:6e:26:d4:0a:b9:fc:71:73:12:f1:5f:
         ef:fe:de:df:af:da:7e:6f:d2:f2:9b:79:cf:c0:53:ca:56:da:
         c0:78:45:ca:55:5a:4b:97:02:90:0a:68:dc:f6:e3:d3:7a:0e:
         3e:ca:0b:7d:e0:f9:70:57:7b:36:5f:bf:a9:7a:72:2d:85:a3:
         94:a4:28:07:76:b4:49:c9:4d:ab:0d:46:21:12:4c:97:f7:42:
         a3:53:c4:ca:69:c6:bc:3b:7d:47:f2:77:d4:41:72:d3:d7:cd:
         48:2c:e9:63:de:88:5c:58:00:40:65:c0:56:13:80:6c:7f:a7:
         54:ad:95:04:c6:d1:c2:c9:61:28:16:83:a9:db:06:19:5a:72:
         f6:de:1b:ba:95:1d:a2:35:5c:2c:c4:45:ba:5b:1c:ce:03:45:
         0b:15:33:f2:0f:42:a6:17:5d:fd:23:57:70:de:91:01:cc:11:
         d4:c6:26:59:71:b8:10:81:91:a5:54:0f:17:db:e9:97:8a:42:
         45:ac:ac:e5:0e:bb:11:6f:8b:64:94:44:cb:a5:cb:33:62:02:
         00:b0:ab:11:c6:be:69:cb:31:70:ef:af:ed:73:7a:fd:a3:3f:
         90:bb:36:d6:4c:34:70:ed:e2:e5:f8:6d:31:9f:56:e0:3b:0a:
         c0:cf:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:10 2026 by rpki-client