Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cf7643de-29bb-3ebb-90f8-b52a7fa45e77.roa
File:                     cf7643de-29bb-3ebb-90f8-b52a7fa45e77.roa (raw, json)
Hash identifier:          4Uf3/TlSrY4EV24ywckiyTzJkwQ702LIBtRA++QSxHA=
Subject key identifier:   FC:C3:CA:37:8A:7A:F4:28:02:B0:95:D3:85:10:86:CF:32:E8:AF:EE
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584DDBBB21BC1A41F723E2049600
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cf7643de-29bb-3ebb-90f8-b52a7fa45e77.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     402226
IP address blocks:        68.69.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:21:bc:1a:41:f7:23:e2:04:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=86233b15-f93b-49a5-a0a0-47d9c2f2e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:bb:47:4f:f5:ce:38:60:6b:17:1d:e2:e1:
                    a0:4b:3f:6f:79:54:00:a5:4d:c2:29:9a:5c:a9:76:
                    ee:cc:5b:30:f5:b9:ad:e5:69:51:44:a3:09:d9:ed:
                    1c:0f:4a:76:e2:09:ae:6b:97:b7:6f:00:dd:de:72:
                    e1:b3:c3:6d:a1:09:c7:10:15:ac:3c:a0:43:61:9c:
                    c6:85:d6:81:af:f2:ff:24:10:53:52:67:4d:5a:b8:
                    3f:a6:81:46:9e:c2:65:08:54:b5:5a:78:37:f2:df:
                    bd:8f:f1:45:8f:e0:88:47:a3:9d:e7:d8:f7:51:47:
                    11:cb:12:b3:f5:d7:82:a3:cd:66:3e:6a:6f:0d:d6:
                    36:d2:5a:13:8c:66:4c:25:ca:e6:fd:21:46:25:48:
                    9e:d9:2f:0d:87:90:61:a6:ec:5c:f8:f8:89:0b:28:
                    fb:0e:22:35:ff:7e:86:08:07:5a:03:72:67:83:a5:
                    e2:d8:da:41:1e:3b:bf:81:3c:69:80:8d:df:7a:2f:
                    fe:3d:28:c1:6e:86:69:3b:a2:b3:56:15:8d:d9:c0:
                    62:bf:4c:e6:d8:d8:bb:ef:4e:08:be:98:e5:76:d1:
                    26:67:b4:31:ae:2c:6a:b6:28:df:99:48:0b:ca:03:
                    db:80:d3:f0:c2:da:f2:3d:63:e6:15:01:a2:fc:b3:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:CA:37:8A:7A:F4:28:02:B0:95:D3:85:10:86:CF:32:E8:AF:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cf7643de-29bb-3ebb-90f8-b52a7fa45e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:9a:40:60:4e:7f:ff:39:be:81:53:7a:d0:56:8e:48:7b:
         80:62:b2:b1:fe:9f:a0:83:21:45:98:ea:44:90:85:dd:13:c2:
         de:ae:93:9e:97:a9:44:b8:fa:8d:c9:9a:97:ba:b8:63:ca:d7:
         88:e7:21:35:0c:00:6d:9b:e1:63:2b:36:2a:0b:e7:c7:68:8f:
         b2:04:0a:d7:29:5d:aa:68:8b:a6:34:b1:ef:50:70:75:70:6e:
         6a:bc:2f:a1:c5:3b:a0:0a:84:ae:fb:ba:17:2b:ea:d5:2d:a3:
         2d:3c:23:6a:52:52:8a:38:f5:e5:06:57:06:72:e9:67:0e:6a:
         f5:80:60:6f:15:8c:5a:2b:95:54:a7:80:a5:3f:ef:e0:b6:32:
         34:4e:9a:e9:88:f8:d8:fd:98:f7:4a:fd:4c:f7:c7:36:82:1b:
         bc:e8:87:21:59:6b:a0:10:d2:ba:57:b9:13:e1:58:4a:87:ed:
         b2:6c:d7:9d:16:7d:53:e5:eb:65:cc:74:fc:1e:18:6c:79:51:
         bb:d5:94:42:dc:e9:ae:b2:fc:e7:04:55:51:38:20:a8:10:47:
         80:b5:06:83:b0:c1:25:06:47:0d:0d:c2:52:e4:81:8b:b5:86:
         01:90:63:97:58:c6:70:d5:31:be:14:9c:f0:2e:be:c9:85:4f:
         5a:d2:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:27:32 2026 by rpki-client