Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
File:                     9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa (raw, json)
Hash identifier:          bKc1JHPKv+cim1XNzEbapj3b3V3G8oAf2UheqmTENf4=
Subject key identifier:   C6:00:43:F0:3F:8D:29:5D:76:98:97:06:1F:51:B6:D8:05:99:C1:37
Certificate issuer:       /CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
Certificate serial:       010D0C9F4328584D67DFBEA0E6F60863CEEA1200
Authority key identifier: A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     30036
IP address blocks:        68.66.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:be:a0:e6:f6:08:63:ce:ea:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=26a32cff-6309-4a02-a74e-4a38e4db99d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:2c:d1:ef:04:73:d3:56:c6:28:06:8f:a8:
                    11:a3:dc:64:93:19:ee:7f:17:8c:af:b4:93:2e:69:
                    f5:e7:c8:21:70:8b:8f:f8:9a:98:07:29:bb:8d:31:
                    b1:35:5f:ef:ae:c7:af:93:26:59:86:79:f6:5b:29:
                    1b:f2:bf:ed:e9:9f:13:d0:e9:98:1b:ff:1f:9e:f4:
                    b7:0f:17:09:03:e5:09:09:3a:62:98:ab:c1:f2:ad:
                    db:c8:80:8e:e5:b3:fa:46:75:3e:3b:e8:54:be:fa:
                    82:39:96:ed:ad:5b:eb:8a:0e:44:a2:40:96:dc:0d:
                    0d:66:e2:0b:3b:38:50:b2:03:29:14:3d:8f:14:22:
                    0e:9c:38:e4:9c:d0:f1:ea:94:ee:f3:7b:81:38:67:
                    92:b8:2c:a7:83:b4:b2:81:d7:b6:1f:b0:7e:a5:d1:
                    35:fc:1e:2b:f7:cb:12:e2:0b:5e:b1:5e:a5:c1:72:
                    01:63:3e:41:bb:57:59:1d:ed:91:23:17:10:89:01:
                    81:22:42:db:e5:9a:e3:b1:81:cb:b7:12:16:ab:fd:
                    f1:12:8b:6f:9f:f2:98:d0:0f:51:80:3a:30:2b:bd:
                    f3:4a:8d:ca:d0:31:f9:e0:27:b8:fb:99:64:ea:4f:
                    e8:3d:bb:9c:08:99:d4:ed:f6:e9:80:b2:91:c2:c4:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:00:43:F0:3F:8D:29:5D:76:98:97:06:1F:51:B6:D8:05:99:C1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:2a:32:14:5c:ee:bb:dd:e2:3e:ba:0d:69:bd:e8:ab:1a:
         1d:12:76:33:b9:e5:0a:74:11:87:06:e3:3d:3c:56:9e:52:5c:
         bb:c5:12:3d:38:5b:fd:39:2d:05:a2:72:e9:7b:25:cb:cd:e8:
         38:a1:d5:2a:67:98:93:c0:1d:ec:15:47:4b:ea:20:ec:c4:6b:
         31:a1:65:7c:51:70:a3:ee:77:12:18:2f:e7:4d:65:69:8b:af:
         49:04:85:f6:8a:3a:14:e7:38:23:64:40:13:1a:70:a4:5f:5e:
         0d:c9:f4:05:fc:63:ba:e1:cf:61:a3:6e:58:4b:05:02:9e:fd:
         41:b2:25:47:43:e3:10:c0:a2:da:42:f9:7e:39:3a:b3:d5:b4:
         a4:2b:c8:cf:f4:fd:ba:f9:34:0d:d7:40:1a:ba:a7:d4:b5:fa:
         3e:a6:f7:d0:b5:02:63:8a:88:2a:6d:05:bf:e9:f0:a0:72:9f:
         8a:d7:92:97:e9:06:52:be:e1:9c:e2:88:43:42:a8:4b:fa:bd:
         01:4f:ad:17:35:9c:b0:55:a6:ff:02:39:ae:51:af:c7:50:68:
         ae:80:23:4d:c6:e4:5a:a6:74:d5:d4:68:88:c7:df:a0:62:e4:
         4e:64:bc:cb:e6:86:b2:5d:e0:5a:85:50:71:aa:ac:28:e6:87:
         81:11:91:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:46 2026 by rpki-client