Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa
File:                     68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa (raw, json)
Hash identifier:          fPtWRz4gMe1wPjggA/wSMuRW9CZkWu9TXyniznQFyzI=
Subject key identifier:   10:0E:70:E0:2B:9B:DD:D3:C4:C1:A4:34:FA:F9:E4:3B:99:38:9A:A0
Certificate issuer:       /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial:       010D0C9F4328584EA7980FE0932D33F01634B000
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396032
IP address blocks:        64.38.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:0f:e0:93:2d:33:f0:16:34:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=37d2f033-5b82-4816-898d-8bb7740d8354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:48:a2:b6:b6:b7:79:f6:8d:b4:46:3e:70:
                    ba:3f:ea:ac:92:87:b5:3f:5e:81:8a:37:27:c3:f6:
                    af:59:be:b5:1a:b6:78:c2:2d:cd:d9:5b:54:f2:4a:
                    ce:cb:80:c0:fb:ea:fa:6f:85:36:2e:28:ef:94:c4:
                    66:2f:4c:a7:7a:bb:9c:93:9e:d4:84:be:08:32:ab:
                    4d:53:ba:0c:37:72:06:1b:6b:45:ff:a4:c5:86:72:
                    f4:9e:65:d1:ff:11:0e:c9:34:c9:2a:83:7e:0d:01:
                    ad:ee:d0:29:d0:03:aa:df:76:88:58:f7:75:ee:30:
                    39:c1:9e:7c:04:71:17:60:04:69:d7:63:cf:17:94:
                    88:e6:ef:28:85:30:67:6e:5c:97:56:52:b0:6b:24:
                    cd:11:e0:f0:79:08:c0:6d:01:50:9f:18:98:79:97:
                    50:d4:5f:30:0e:60:8e:ec:d5:48:f0:2c:86:23:fc:
                    66:db:4f:d7:f6:a6:46:ea:53:9f:7b:f7:4e:69:57:
                    b5:af:69:86:cb:49:01:70:61:49:f4:b3:cb:44:44:
                    a0:b5:f1:7b:f3:de:0d:8a:14:23:68:27:d8:b1:a5:
                    8b:fb:87:37:47:1a:f9:b7:c2:29:3a:36:4e:fa:ff:
                    20:ff:c5:c0:a8:07:2b:be:04:c2:f7:6f:8d:98:b8:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0E:70:E0:2B:9B:DD:D3:C4:C1:A4:34:FA:F9:E4:3B:99:38:9A:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/68dc68ae-b6c4-3701-a2ad-62098b1f1393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl

            X509v3 Authority Key Identifier:
                keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:69:1a:10:1b:d2:40:5a:d7:ad:82:d3:6c:7b:19:f8:06:d8:
         1a:fe:a2:fb:d3:da:4a:40:4a:02:eb:b0:27:a2:91:f8:35:dc:
         20:d1:de:15:7b:4d:4e:94:c9:ec:78:f9:9d:cc:96:ef:ec:5e:
         d4:8e:10:b8:b2:1e:81:35:b4:5c:e4:fe:98:b1:21:2e:e2:5c:
         79:f5:65:ac:f8:de:00:57:64:7a:7a:5c:a7:32:7f:46:e2:e5:
         43:34:9f:eb:64:13:99:ca:b4:0e:b6:c5:77:f7:9e:9e:54:3b:
         60:0d:05:18:c3:ad:1c:b6:e3:41:e3:a5:20:67:9c:2c:33:cc:
         ff:3b:45:76:72:72:ee:73:73:3d:6c:66:97:ac:f0:ae:13:7c:
         f2:29:36:d9:84:43:15:01:87:70:db:f0:e4:bb:1e:54:8e:31:
         b6:45:9e:76:ad:0e:96:29:71:55:e5:b1:67:ff:1c:5c:1c:09:
         8d:d9:74:65:b0:80:55:57:1d:20:05:d0:62:a0:78:bc:45:32:
         30:bd:73:83:01:d5:5e:cb:11:b3:c0:d1:86:8c:ec:9c:70:89:
         63:48:00:b5:68:33:94:9c:78:96:3b:f7:0d:77:0b:f8:eb:17:
         b1:6a:d0:ac:ab:e1:a2:21:72:3c:fe:a3:ea:4f:a3:f8:d9:c3:
         15:29:0e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:49 2026 by rpki-client