Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6/b1848447-9fbb-337c-908c-aa5b03632200.roa
File:                     b1848447-9fbb-337c-908c-aa5b03632200.roa (raw, json)
Hash identifier:          qw/sJtQcys3pAFrfFBAKBlpcO/ZZQwk5OaIl73QxY4c=
Subject key identifier:   35:63:BE:DC:4C:6E:6E:3F:8D:EF:D9:98:1A:64:6D:5C:75:B1:D9:0D
Certificate issuer:       /CN=f6969223-7f7e-44b3-8723-2343298d2fe6
Certificate serial:       010D0C9F4328584EB9AC5478AB4FBA52945E6700
Authority key identifier: 53:51:F4:4B:F8:B3:11:4F:EF:C3:BA:BF:75:89:05:1F:B2:73:7D:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6/b1848447-9fbb-337c-908c-aa5b03632200.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     16276
IP address blocks:        68.232.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6/f6969223-7f7e-44b3-8723-2343298d2fe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6/f6969223-7f7e-44b3-8723-2343298d2fe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:54:78:ab:4f:ba:52:94:5e:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6969223-7f7e-44b3-8723-2343298d2fe6
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=e2347729-992a-481d-b3c2-d1ad493b272b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:d4:46:76:e1:d4:0b:26:df:77:28:fe:dc:
                    ae:b0:46:57:f4:7b:50:53:00:40:e5:c2:51:05:73:
                    d1:c3:ed:db:e8:23:95:4a:31:e8:6d:b7:93:f1:7b:
                    a9:72:55:fd:55:d9:2e:e1:d0:17:36:0f:56:a1:4a:
                    3d:db:b7:0d:b1:70:72:b7:1f:8a:49:23:aa:26:a4:
                    d1:02:0a:d5:03:38:f0:84:89:fe:96:06:d2:28:97:
                    6f:4c:b9:4b:38:48:b5:ab:40:d0:45:d8:3e:71:a3:
                    13:5a:33:fb:b8:e6:12:02:6c:2c:3d:eb:fe:00:85:
                    b9:a9:94:62:f2:ab:1c:38:49:6e:6c:dd:4e:2f:02:
                    cf:f3:66:6c:18:c9:b5:3b:43:9a:f7:a3:72:76:a2:
                    dd:31:17:42:85:8a:cc:1e:0b:ac:c0:36:9e:66:6b:
                    0b:34:99:a4:9b:62:d1:7f:e6:be:a5:7b:1b:f5:5a:
                    48:38:3e:4f:de:ab:99:59:4c:14:22:31:40:46:c2:
                    82:b8:4b:74:e5:72:09:81:f5:ca:5c:86:70:5f:03:
                    02:e4:d1:66:59:ca:e9:82:2a:eb:a0:2f:63:6c:9e:
                    21:27:81:32:61:4b:ed:e8:ea:50:e7:13:06:e1:08:
                    23:47:37:b2:b5:55:04:4c:5b:c0:23:49:8e:5a:c7:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:63:BE:DC:4C:6E:6E:3F:8D:EF:D9:98:1A:64:6D:5C:75:B1:D9:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6/b1848447-9fbb-337c-908c-aa5b03632200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6/f6969223-7f7e-44b3-8723-2343298d2fe6.crl

            X509v3 Authority Key Identifier:
                keyid:53:51:F4:4B:F8:B3:11:4F:EF:C3:BA:BF:75:89:05:1F:B2:73:7D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6969223-7f7e-44b3-8723-2343298d2fe6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:af:03:bb:02:3b:5e:a7:4b:ac:d2:17:fe:d3:d2:75:66:
         92:23:e1:82:6f:b6:39:08:ac:5a:3b:92:36:f6:d9:ae:b9:a9:
         fd:27:ce:59:b9:69:34:b2:4a:e1:8b:39:79:82:29:e4:ed:6e:
         f1:9a:7f:2d:d0:64:42:f4:00:d8:a0:14:29:11:ed:f0:81:59:
         66:7b:6b:9c:50:f2:56:53:62:74:be:da:59:9a:f0:49:45:db:
         37:15:0b:5b:a0:b8:48:bb:b3:99:1e:36:59:6b:5e:46:16:a1:
         e0:33:d4:ff:30:f0:81:92:b4:5f:20:38:42:51:fa:0b:6d:a1:
         e9:03:56:33:45:0c:2e:4b:fe:76:84:9c:f1:3f:f3:b7:e6:2d:
         43:c3:38:c2:d1:fd:c5:b1:da:34:6a:48:6d:7c:d2:8c:de:25:
         fe:fe:30:2a:87:c2:0f:68:03:01:e7:9c:ec:5a:aa:12:0d:aa:
         57:fa:5e:88:28:f1:8d:3b:33:40:de:25:17:89:3f:da:b9:a2:
         c5:90:9b:29:20:13:16:81:39:4d:9f:d1:f7:1c:b5:60:dc:e7:
         d0:d9:9d:ab:a2:d2:94:6d:59:01:d9:af:a6:d5:20:d1:f0:c5:
         93:6f:6c:34:e4:8e:58:42:35:ce:e9:a5:8d:28:bb:19:bc:1c:
         2b:8b:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:05:08 2026 by rpki-client