Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa
File:                     6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa (raw, json)
Hash identifier:          dExQKRXVrK1xCaBtw2HjSxZtEOZaXFSeiWhJvj2Lnzk=
Subject key identifier:   59:62:44:C3:56:D8:46:B5:AD:1A:12:FB:D9:9C:4A:D8:ED:E3:13:F1
Certificate issuer:       /CN=f64099bb-9c22-4781-89a0-e4774501bccf
Certificate serial:       010D0C9F4328584F1E2CF8E106938F65016D5B80
Authority key identifier: 9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     36294
IP address blocks:        208.74.68.0/22 maxlen: 22
                          216.10.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f8:e1:06:93:8f:65:01:6d:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64099bb-9c22-4781-89a0-e4774501bccf
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=7d69acf2-faa0-4521-9816-dea665f1a3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8c:2b:21:11:46:e4:d7:b4:db:58:0e:14:9d:
                    16:e2:f4:9d:c0:f3:6d:70:d6:cd:3b:15:aa:c2:c0:
                    33:b6:8d:27:f4:74:cc:e6:dd:59:62:03:08:f0:0e:
                    e1:ab:19:50:ed:41:02:2c:7c:6f:a7:e2:bb:48:8b:
                    b3:83:6c:10:aa:ae:e4:92:8b:b2:1c:56:9a:76:bc:
                    c3:c2:bf:1b:cf:b2:48:8d:db:20:d7:36:1c:a2:72:
                    ea:1b:de:e4:a9:f9:9a:73:bc:5c:50:26:20:c5:21:
                    e3:5a:35:e2:d3:04:01:ac:c3:00:fa:3f:30:36:01:
                    b4:2c:16:57:11:a9:87:08:3f:65:e4:d9:65:cc:53:
                    a0:85:4b:99:64:69:1a:97:00:bf:4d:b3:d8:c6:23:
                    e0:fb:dc:60:f6:07:34:93:b9:2e:0c:d7:99:ac:52:
                    c3:a7:19:ec:22:55:51:60:4d:4c:92:57:49:fd:05:
                    c0:9f:8f:76:9e:91:4d:59:c5:0d:19:bb:60:69:65:
                    46:08:d0:1a:6e:ec:73:3a:c0:f1:67:db:92:9a:cc:
                    67:3e:df:a1:bf:f7:b5:91:3e:bd:e1:5e:cc:eb:87:
                    c0:31:5c:95:df:54:31:c9:ca:77:d2:11:13:29:3f:
                    e7:25:e8:9e:22:a4:a2:af:64:e6:54:5b:83:a5:d4:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:44:C3:56:D8:46:B5:AD:1A:12:FB:D9:9C:4A:D8:ED:E3:13:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/6b13af00-2ec7-38d8-8683-f8a378edbb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf/f64099bb-9c22-4781-89a0-e4774501bccf.crl

            X509v3 Authority Key Identifier:
                keyid:9D:EA:69:49:9B:E2:E8:3D:5B:B9:A1:89:42:6A:80:55:EA:FA:D2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f64099bb-9c22-4781-89a0-e4774501bccf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.68.0/22
                  216.10.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:73:18:86:e9:e4:b7:e7:06:f1:d6:61:06:15:34:86:6a:
         1d:9c:68:65:5a:c1:32:00:63:14:61:5c:8d:40:62:42:61:e1:
         e6:9f:c4:17:8b:51:9e:20:c4:ee:cb:cb:75:37:84:b9:87:31:
         8c:be:03:30:5c:92:ea:52:a3:a3:43:58:a7:99:6f:72:73:79:
         bf:c0:c9:07:c8:eb:ff:e7:ae:c8:1a:c7:ed:96:89:e9:19:05:
         ac:bd:7e:15:83:41:15:18:44:1f:a9:dc:5d:39:18:5b:d2:a5:
         61:f0:79:17:a3:c0:58:84:fb:33:1b:4f:2f:ac:2a:23:72:08:
         7f:da:c0:36:fa:f0:37:d1:1c:55:10:fa:d8:f5:58:1c:22:ba:
         71:1a:6d:20:d9:0b:b7:f0:5e:f5:9b:0f:82:6c:d7:76:33:97:
         87:9d:99:a3:10:40:93:ae:87:3e:63:9e:56:46:02:f2:3a:8e:
         50:2c:26:5b:c0:0d:90:eb:3a:02:1b:43:c3:44:2c:3e:1d:99:
         2d:53:96:ce:df:19:0e:f0:41:6f:54:62:93:1d:0c:cc:4f:b2:
         8b:78:96:3f:c4:7f:b1:ce:f5:53:d4:35:15:fa:1e:e4:0f:fb:
         67:2d:9a:f0:6e:a8:fa:a2:74:b4:8d:f0:e1:4e:a8:1e:e9:8c:
         cd:b3:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:44:06 2026 by rpki-client