Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
File:                     c1cad078-8b5d-38b5-8141-35b1324af051.roa (raw, json)
Hash identifier:          2RqwFSrVR6Tx/qnc8Qriox2HM4RFjWTjIBrbEQU7YPc=
Subject key identifier:   7A:A2:32:C3:F9:65:EF:3E:ED:49:F8:BB:0F:12:E2:E2:1C:2B:4F:91
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584F189790C94DF2A38278AF9000
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     400040
IP address blocks:        68.67.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:90:c9:4d:f2:a3:82:78:af:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=359a4bf7-8b3d-4811-9aa0-8b9e99db294d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:b0:27:8e:55:e3:4b:04:4f:6d:6b:34:d1:
                    4a:9e:06:a9:55:2d:09:f5:f5:ad:91:f3:7a:32:c7:
                    96:13:bb:dd:84:2c:8b:16:46:f1:d9:e6:8c:e5:64:
                    87:26:e9:e3:a6:a8:06:d4:ec:85:17:21:53:f1:3d:
                    2a:e6:24:56:d3:d9:00:49:84:8c:97:72:92:4d:df:
                    80:ef:af:eb:fe:ee:7c:f0:84:73:1d:91:61:5e:d5:
                    d7:fb:ab:6a:b8:3b:ce:55:cc:f1:8f:88:3c:38:30:
                    10:71:a8:d9:00:50:9e:ca:92:91:30:8c:c3:fb:81:
                    47:29:66:0d:c8:4f:65:10:1a:53:88:a9:14:01:73:
                    f3:41:8e:c7:01:58:48:10:c5:fe:72:19:84:85:c5:
                    98:9c:e8:94:14:cc:77:4a:f6:39:a2:23:8e:7b:7d:
                    f5:42:27:64:8c:da:33:92:e2:03:d2:64:48:02:4e:
                    02:da:5f:5a:89:de:7c:7b:f2:11:06:7d:2f:85:38:
                    a8:ec:3b:00:e4:90:ba:1e:8e:de:bf:3f:08:c4:b5:
                    17:18:07:2c:ee:50:59:ea:c7:4f:38:bf:ad:42:22:
                    16:3a:4e:29:d9:ef:61:ed:28:0b:34:c0:b7:42:07:
                    b0:20:63:fe:f7:b5:b4:80:32:56:a7:23:77:c5:a8:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A2:32:C3:F9:65:EF:3E:ED:49:F8:BB:0F:12:E2:E2:1C:2B:4F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a4:88:00:82:b9:7f:43:b1:5a:8b:c9:35:89:89:31:5a:da:
         12:95:e4:4f:04:d1:68:ec:41:f2:d4:73:f0:7c:4c:c2:77:84:
         ed:d3:b5:60:ee:6d:c2:a9:57:bf:d3:a9:62:8f:20:5b:54:1e:
         1a:16:47:a8:b1:ec:d3:d9:d3:54:49:92:17:f8:5a:df:19:c2:
         d5:5d:b9:dc:f0:ca:15:0d:e7:4d:39:ad:f0:67:1f:c3:e9:30:
         eb:6a:f4:6d:0b:2f:be:a6:d0:0b:8d:e8:75:7a:a0:dc:73:b3:
         61:53:8a:34:03:a8:7b:c8:91:5e:0e:3b:8b:0a:f1:12:01:84:
         e4:72:ac:db:92:99:9a:72:0f:ad:44:da:9f:48:e8:7e:46:22:
         d5:ac:37:3d:2d:d1:50:83:4b:86:1f:c6:71:06:2c:33:8c:ef:
         dd:a1:9d:2f:f9:17:a5:86:a1:30:e8:26:ec:59:0d:34:7f:c0:
         80:3e:3f:cd:93:ba:19:56:f4:ed:a9:4c:4a:e5:7b:74:35:52:
         ed:a1:d6:65:84:ea:6c:80:4b:01:55:d9:e9:57:99:2d:03:5a:
         0d:93:55:6b:e1:cb:17:b7:d3:d8:c2:f1:83:7d:9b:18:57:0b:
         ae:a4:63:f4:7c:ac:01:b1:68:48:ab:e3:d9:49:14:dc:51:4b:
         da:c8:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 23:00:42 2026 by rpki-client