Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0016c99b-5a61-3371-91dd-b7567103b3f2.roa
File:                     0016c99b-5a61-3371-91dd-b7567103b3f2.roa (raw, json)
Hash identifier:          l1E0RxwB1hM0U6FiLZIpuwx1t2n/Lal60GzzsgBeyW4=
Subject key identifier:   27:32:61:31:D9:29:87:E3:E1:20:56:30:AE:96:A8:53:67:83:04:C1
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CDDCCF1DA194BECD515557C00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0016c99b-5a61-3371-91dd-b7567103b3f2.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22652
IP address blocks:        68.67.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:f1:da:19:4b:ec:d5:15:55:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=ca3d404e-a063-4880-8f67-67e700547ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:5f:dd:0b:0a:0c:17:7d:75:2f:27:ce:eb:
                    52:87:7a:b6:71:68:86:15:3e:cc:2a:8f:2a:ac:5e:
                    55:e1:b7:19:ae:ac:66:3e:d9:be:38:81:e7:e2:fc:
                    1d:4c:23:05:a7:62:93:9b:24:f3:24:ed:da:0c:93:
                    af:f3:f7:3e:21:0d:7c:61:98:c0:91:32:69:e5:f8:
                    d9:68:32:10:50:60:dc:c1:62:f8:af:28:1e:96:99:
                    84:64:2c:83:7c:fb:26:ba:ca:5f:49:7a:0c:2d:f1:
                    db:0f:f4:62:43:51:8c:17:5b:5d:ad:fd:d0:07:af:
                    af:20:64:ef:ad:da:b8:0d:40:53:8e:1d:5e:ad:6b:
                    94:18:60:06:f6:fd:ce:38:68:1f:eb:72:48:25:72:
                    b6:2f:d5:cc:ba:37:b7:f7:23:9a:26:51:40:d6:97:
                    60:3d:c7:1a:54:a1:f2:c0:84:6f:91:c5:8c:87:a4:
                    41:3a:64:e8:22:2e:72:6a:db:55:3a:98:cd:e8:e4:
                    d8:aa:8a:b9:dd:2f:35:01:9b:4c:58:4b:88:58:75:
                    1c:1f:a1:f0:64:f9:ff:06:cd:81:84:91:04:d8:d5:
                    c3:58:1b:f0:b8:8d:8f:67:d1:c2:ae:34:7a:df:4c:
                    20:e7:7c:c2:27:38:81:24:40:ab:f1:bf:23:61:4d:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:32:61:31:D9:29:87:E3:E1:20:56:30:AE:96:A8:53:67:83:04:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0016c99b-5a61-3371-91dd-b7567103b3f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:40:e9:05:17:04:43:d4:c7:40:40:da:bb:81:0d:97:34:6d:
         d6:14:6d:07:1a:32:b0:c5:43:53:38:9f:6a:45:b9:c6:fe:5c:
         d0:cb:2c:45:0e:d6:28:72:dc:7b:b0:ae:cb:b4:f0:f7:de:1e:
         ae:c5:54:d6:32:63:7b:f3:05:ef:eb:5f:9d:91:e7:69:8a:73:
         fa:51:b9:cc:77:29:cf:f0:15:2e:96:e1:89:6d:8b:ec:b8:c6:
         f1:97:90:4e:45:0e:b4:b4:3a:d7:3d:f0:2a:10:f8:8d:e1:3d:
         7e:3f:67:7a:8c:a8:25:04:e0:f1:88:20:61:48:ce:3a:47:d8:
         12:0c:d4:25:78:3b:b0:ba:49:1e:2a:52:e2:18:f0:c1:65:24:
         07:e1:09:d3:40:97:4e:02:bd:22:7a:5e:f2:93:13:34:78:6a:
         25:d7:56:a4:ce:d0:a9:5a:8e:83:82:40:d0:96:df:23:a7:02:
         0e:85:9b:d6:bf:ad:4c:ba:be:3a:79:55:26:e2:2f:45:a4:ef:
         6b:c8:da:3b:5a:cd:40:ac:5b:a9:5b:10:59:52:1b:4d:89:a4:
         a6:54:23:c6:d4:fd:f3:fd:c4:99:99:49:6b:ab:03:b0:7e:27:
         87:f5:f2:f8:a9:e7:a2:64:98:e0:bd:21:5e:a9:87:83:45:69:
         b5:1b:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:29 2026 by rpki-client