Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
File:                     ebce2800-71e6-302f-a9a7-77ba35072652.roa (raw, json)
Hash identifier:          M3CYaOQSePnVyf+LQPcr/XVCB4ske/tbtzaXv5uqWi0=
Subject key identifier:   FB:99:78:5E:49:8B:BE:4F:7A:EC:7D:2B:9E:5C:C6:92:47:9D:7D:8B
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584F4973AC310E0F9A1DFCF5C1C0
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15267
IP address blocks:        68.69.224.0/19 maxlen: 19
                          68.69.224.0/20 maxlen: 20
                          68.69.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ac:31:0e:0f:9a:1d:fc:f5:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=252d2f19-ea7a-45f0-9ba1-a7509b0270ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:e4:66:17:cb:42:fe:cf:b4:76:76:c9:58:
                    f4:f0:3e:fc:30:0a:03:37:ef:3b:78:66:09:4f:a1:
                    bf:17:4c:58:2a:ee:70:0b:1c:df:02:10:2b:1a:08:
                    d2:37:69:87:ec:b2:a1:31:26:41:34:9c:0f:d8:37:
                    3d:21:50:65:d4:0a:a7:55:0f:01:4e:10:a0:bb:84:
                    67:3f:6a:26:74:f9:6a:97:be:a3:72:51:b4:2e:63:
                    74:0d:05:12:f4:71:47:92:c1:05:44:e0:b9:2c:7a:
                    7b:bd:d0:70:80:43:9f:46:f1:04:68:d0:7d:01:aa:
                    30:84:85:52:26:85:13:07:dd:43:4f:94:8e:b8:d6:
                    c5:24:ad:4d:2e:3e:de:a9:6e:0a:94:7b:3c:47:26:
                    1d:21:76:5c:36:24:95:9d:af:b5:3d:39:1a:b3:20:
                    4f:a6:9f:38:f2:98:1c:75:58:ac:49:7a:5c:df:97:
                    99:a0:e0:c3:85:50:60:78:d5:b4:9d:34:b1:11:85:
                    43:bf:a1:33:ad:4a:f2:17:f6:a2:17:52:fb:7a:af:
                    e9:06:8d:0c:71:6a:e6:68:64:18:c7:8c:7e:5f:d1:
                    5f:cc:23:6f:9d:c8:38:ea:20:dc:31:50:4b:5f:2a:
                    d5:80:27:ba:e3:c8:05:01:55:7d:a3:45:00:d4:84:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:99:78:5E:49:8B:BE:4F:7A:EC:7D:2B:9E:5C:C6:92:47:9D:7D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ebce2800-71e6-302f-a9a7-77ba35072652.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:77:b3:de:ab:48:b9:fc:bb:72:43:85:8a:d9:dd:4c:e3:42:
         bb:42:17:77:47:34:40:bb:0e:69:88:11:c5:26:c9:1e:71:99:
         38:33:84:de:5a:61:30:2b:6b:a1:df:7d:70:c8:fd:d3:4d:81:
         3e:a1:5f:ad:1f:88:85:0f:10:0d:26:76:f8:0e:a2:b2:e6:a4:
         5c:8b:49:19:95:2c:40:22:f9:24:f1:c1:4d:36:ac:47:93:4e:
         75:99:ca:83:2c:f6:e2:e6:f3:71:cc:0e:ba:1b:ab:b9:5b:5b:
         ca:20:c6:19:70:1c:8f:ab:a5:92:22:df:da:f4:c5:32:b4:4f:
         28:73:30:77:09:c5:bb:df:70:a8:39:dd:cc:47:b5:72:df:7b:
         15:f3:65:21:da:54:4b:64:1d:50:dd:2a:76:79:f8:98:6e:3d:
         4d:53:42:b8:39:28:0f:db:b8:14:cd:10:a7:c7:dc:a6:b9:1c:
         bb:78:6d:98:81:82:40:98:da:25:f7:b5:97:9f:05:9a:17:ab:
         50:8f:c8:68:3a:60:f5:8a:63:b5:17:59:04:d2:d5:98:f6:e1:
         54:6e:41:72:30:d9:22:67:ff:4e:a5:ad:17:b4:f2:9b:f5:7a:
         12:1c:81:a1:c2:46:6b:d5:f2:29:c9:a1:b3:17:44:5f:16:55:
         32:d7:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:26:19 2026 by rpki-client