Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/770edb79-903e-30a3-9028-652c938b0a72.roa
File:                     770edb79-903e-30a3-9028-652c938b0a72.roa (raw, json)
Hash identifier:          xJQJsk/2HtZPxmLlLov1SxcnYX3vgJGzQ4AWsE3IIZs=
Subject key identifier:   57:77:DB:CC:1B:B8:14:AB:8B:A9:D5:F5:2F:F0:2E:4C:92:AB:A0:84
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584E253F057CB4F27773A7F46800
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/770edb79-903e-30a3-9028-652c938b0a72.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     19528
IP address blocks:        68.69.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:05:7c:b4:f2:77:73:a7:f4:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=9d15674e-f8b7-4f1b-8389-c4de3d2ca4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:dc:35:b0:c9:a0:4e:cc:30:a8:85:a0:41:
                    dd:36:a6:2f:5d:4d:08:cb:55:bb:82:48:86:be:5c:
                    f5:ab:5f:76:57:f3:60:aa:60:9e:94:6f:7f:36:98:
                    0e:a6:85:7d:c5:2a:f7:58:dc:30:fc:fa:42:b5:7d:
                    83:c0:5a:0b:0d:9b:59:c9:32:f1:a4:81:97:89:8a:
                    13:17:47:d1:d6:44:97:0c:5d:75:75:99:59:b1:a4:
                    ef:ba:70:77:eb:66:ea:fb:ef:f2:5d:e7:ae:f2:bc:
                    5e:f3:89:14:dc:98:ee:e2:7c:10:fc:88:eb:33:e7:
                    c9:49:b5:15:57:f5:c8:10:78:1d:5a:d2:e2:67:fe:
                    56:09:8c:36:46:3b:3c:5f:5c:ac:10:d8:22:45:ad:
                    3e:3a:dc:43:0d:2f:d9:63:7e:97:f3:f8:39:52:55:
                    5c:80:42:6d:6f:e7:e9:f6:a1:45:40:18:89:34:f8:
                    ac:00:e3:a3:d7:c8:73:41:ca:9f:db:e4:2a:95:c8:
                    71:4c:cf:06:d8:07:56:b3:99:80:e1:1d:39:c4:d0:
                    81:86:3f:69:d9:74:4a:83:77:1f:aa:4d:09:6f:32:
                    75:ca:cc:70:d6:a8:f6:a0:e4:9f:08:32:e9:6a:e8:
                    5c:d6:7b:0a:a6:a4:07:98:4f:b6:85:b2:9e:36:6d:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:77:DB:CC:1B:B8:14:AB:8B:A9:D5:F5:2F:F0:2E:4C:92:AB:A0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/770edb79-903e-30a3-9028-652c938b0a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ed:b3:f2:eb:58:ca:b4:28:cf:01:d7:26:c1:76:5a:b9:99:
         f3:96:29:c0:82:46:8b:0e:82:a1:ce:d7:8f:79:66:10:67:cf:
         c4:f5:69:a7:c0:83:b4:9f:52:2e:ee:22:3c:01:44:f1:14:42:
         39:2c:17:82:a2:20:c5:36:c6:ef:45:20:f1:68:28:58:65:c7:
         a5:c0:34:df:5d:57:69:82:c2:e9:72:44:78:e0:3d:84:26:6e:
         6f:09:11:15:6c:b3:ce:94:2f:f7:13:1d:b9:d7:bb:b4:e8:96:
         98:00:43:f9:14:ea:eb:9d:6f:85:7a:8b:82:f3:fc:72:20:be:
         ad:4d:9e:c2:ef:a5:fc:60:77:c9:67:57:a1:50:8f:23:d5:f1:
         60:68:4a:09:08:cb:a2:05:6a:29:a5:2a:3a:3d:24:64:43:8f:
         d7:a1:61:b2:dc:5f:f4:bc:f8:67:97:ea:6b:1f:8b:59:4e:2b:
         da:f1:f8:63:3f:bc:88:a6:eb:24:58:e5:79:38:e5:0c:bf:89:
         21:86:99:2f:ab:4b:c5:ce:87:89:d5:38:49:f5:3f:bb:a0:8f:
         e2:3c:bc:e9:c5:2a:d4:d1:82:a0:06:8a:f1:36:8d:c8:81:cc:
         a3:ae:6e:0f:d8:e0:f8:a7:99:f4:93:8c:04:26:87:1c:44:c8:
         65:ab:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:59:08 2026 by rpki-client