Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ca03c659-adac-35fd-aa85-0090add38e19.roa
File:                     ca03c659-adac-35fd-aa85-0090add38e19.roa (raw, json)
Hash identifier:          n4wqPqJTb6/MF53GhBRCjjt2I2zQLYwH8VmFlePkoFU=
Subject key identifier:   48:2B:81:91:91:59:5D:10:CE:FC:9F:B2:42:92:65:8D:DA:74:55:6E
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584F188BB06166AEE514CEE29A40
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ca03c659-adac-35fd-aa85-0090add38e19.roa
Signing time:             Mon 07 Sep 2026 12:36:18 +0000
ROA not before:           Mon 07 Sep 2026 12:36:18 +0000
ROA not after:            Sun 06 Dec 2026 13:36:18 +0000
asID:                     30088
IP address blocks:        68.67.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:8b:b0:61:66:ae:e5:14:ce:e2:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Sep  7 12:36:18 2026 GMT
            Not After : Dec  6 13:36:18 2026 GMT
        Subject: CN=98d6c4eb-ed34-4969-ac5b-053cf4ad1911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:9f:d0:bf:f4:72:d9:f0:f9:d1:d5:af:95:
                    e9:84:52:89:a5:b7:fa:9f:c3:95:0a:db:7b:c8:aa:
                    78:4b:37:49:74:2b:60:26:e6:66:36:dc:c3:85:9a:
                    89:b2:86:46:4b:47:c2:ce:9a:43:8f:4e:9a:34:b4:
                    08:55:ba:e3:a9:b2:ea:95:9c:7f:2a:43:6a:83:97:
                    1d:40:da:a0:db:56:e3:66:d5:c7:b6:51:37:c9:71:
                    a1:10:96:7c:f6:fb:a0:9b:2a:97:0d:9b:a5:ba:7b:
                    c5:cf:0b:30:1d:17:7d:93:e6:dc:80:1f:10:43:9c:
                    05:27:24:71:67:a4:cc:85:72:e6:3c:55:34:fa:f4:
                    12:67:cc:27:72:4a:8b:93:17:a4:17:dd:7d:6b:17:
                    b9:18:75:ec:d7:de:0c:3d:2a:e1:2d:c9:95:fa:71:
                    89:a8:05:30:c0:de:a0:4d:33:dd:b7:cd:5f:9f:87:
                    d6:40:ab:39:ec:7e:25:4c:29:56:1c:fa:f5:d5:a3:
                    c2:d7:27:ef:2f:93:06:d6:3b:9c:60:bd:08:fa:cc:
                    56:03:cc:42:b8:cb:c8:ee:56:f9:f9:e0:8c:77:77:
                    0a:bf:b4:2c:f6:c0:4e:d9:00:94:e9:c8:7d:90:1d:
                    ad:bc:9e:b4:c1:35:da:2c:a4:b9:bd:26:30:4c:df:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2B:81:91:91:59:5D:10:CE:FC:9F:B2:42:92:65:8D:DA:74:55:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ca03c659-adac-35fd-aa85-0090add38e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:e9:15:12:b8:b1:8c:a7:6a:d7:79:8c:b1:b8:e1:bb:30:
         70:0a:ac:ec:bb:65:71:64:d5:97:5a:5c:47:f2:b8:32:81:35:
         5d:32:d5:d5:84:06:62:ee:d4:06:85:77:47:c6:d8:72:22:60:
         5a:68:b9:a6:81:64:ef:ca:5b:33:e3:5e:b5:9f:9d:b5:ca:e2:
         10:0b:89:34:4e:42:22:31:c2:95:c1:78:8a:4c:e1:38:64:60:
         2e:c5:bb:98:bc:b6:f6:32:5e:b9:28:30:0d:ef:f1:c9:26:59:
         67:b5:7b:5d:1d:06:32:23:8e:9d:90:01:d6:47:f1:d8:24:8e:
         6f:89:b8:bf:13:ce:74:bb:83:38:61:e9:94:e2:4e:bd:07:91:
         07:7c:74:05:54:83:bb:19:69:4a:f6:6e:cb:8b:a1:20:59:bb:
         45:58:46:a6:fa:2d:6f:4b:d9:48:cb:e4:ba:44:24:d8:d1:5a:
         8b:54:11:45:f5:23:d9:b5:20:db:27:49:b1:4d:d8:a4:41:8d:
         41:41:42:86:3f:7f:76:79:05:1e:1f:ad:1b:4f:fa:9e:1a:89:
         05:98:cb:24:74:77:8e:3e:c3:d3:c1:3c:f1:a8:5d:ed:cb:87:
         00:22:54:f6:90:d1:3d:06:55:4f:3f:5c:aa:48:9b:ee:fa:aa:
         18:90:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 19:46:56 2026 by rpki-client