Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa
File:                     68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa (raw, json)
Hash identifier:          zz0bCIlfqHDpRWRSl1OJHX4xPQLSaObD39wfbnTJnao=
Subject key identifier:   75:79:27:9B:B3:1D:8F:24:89:99:38:9A:D0:58:2E:5F:47:77:31:4A
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584CE3620FD21FDE5F226F782C80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     27539
IP address blocks:        69.26.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:0f:d2:1f:de:5f:22:6f:78:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=1d83b312-150f-4cfe-861e-359ba0a93070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:97:14:df:07:57:72:59:8c:e4:af:c6:5b:
                    5d:fc:e5:89:8b:5c:98:37:14:7a:2b:bd:ff:8b:eb:
                    1a:58:cc:98:66:a6:6b:5e:42:b1:d0:b7:ae:53:7c:
                    ac:c6:8d:a9:e5:41:76:e0:13:a6:34:37:95:0b:1c:
                    34:6b:d9:95:8d:b9:1a:f1:6e:c4:2a:5e:f8:a6:59:
                    c3:72:74:99:7e:b0:77:57:ac:cc:dd:0b:ab:07:fc:
                    43:21:c1:0c:03:24:92:69:f3:23:42:dd:7f:c1:94:
                    f7:71:df:55:0f:33:c8:ac:c2:61:dd:3d:0f:28:8e:
                    37:3d:15:e7:73:51:42:cc:6e:8e:94:f0:f3:a8:81:
                    43:ee:bc:7e:d3:bb:c4:1d:fe:73:6c:5c:ad:e1:cc:
                    cb:f0:10:16:7d:7b:30:9a:54:1d:d9:35:45:51:8d:
                    de:7d:dc:d8:5a:3a:a3:a4:b9:97:b4:99:30:b1:37:
                    6c:57:cf:e9:68:82:bf:c6:35:e7:2a:91:b9:75:f6:
                    ae:29:35:a2:d1:ee:04:09:ec:0d:cc:30:ec:ab:ec:
                    64:49:f1:a4:75:ae:8f:e6:e0:53:3a:ea:eb:f6:4b:
                    8b:50:67:8f:2a:8b:2e:c0:80:4e:26:1c:75:fd:85:
                    63:44:f1:bd:70:bb:40:b0:e4:29:e0:8b:fc:b9:b1:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:79:27:9B:B3:1D:8F:24:89:99:38:9A:D0:58:2E:5F:47:77:31:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/68a76cc5-2955-3aea-b67d-b54d38cf20d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:26:46:c0:5f:a2:48:2a:94:2c:a5:2e:93:1e:29:5c:99:
         d3:2c:d1:61:80:91:83:27:0a:2e:5b:64:bf:df:a9:38:c2:37:
         fe:bc:b5:f9:db:68:93:98:97:cd:a4:a3:a6:d9:c7:02:4a:a3:
         5d:bb:8e:81:69:35:ad:b6:13:71:bc:96:5a:e4:fd:70:2b:14:
         a4:4b:4a:6f:66:57:87:52:99:e6:21:f9:85:6b:37:c0:4c:84:
         a2:a1:c7:64:bb:dd:88:8a:81:c0:32:12:28:f8:6b:87:3a:1a:
         c8:5d:32:41:87:bb:c0:36:f4:a2:58:26:0e:bc:09:a4:42:a6:
         b4:86:d8:8a:ea:e6:32:fc:00:9c:fb:6f:10:5a:7f:21:42:49:
         cb:85:69:e6:b6:c3:c4:41:f8:36:7d:c0:17:08:b4:7a:78:84:
         a7:d0:bc:9a:07:d4:a0:ca:9c:cd:1b:a5:8d:24:2a:1c:c8:1b:
         fe:c3:9f:b8:af:3d:fb:6f:b5:dd:60:13:aa:00:fc:a6:79:a2:
         5c:ef:d5:68:2e:7f:c2:ab:44:40:39:da:b8:77:d9:b1:a1:a7:
         2b:18:a3:b4:c3:ef:59:11:2b:4b:ae:46:af:8c:7d:ac:74:68:
         ea:70:d5:0e:a4:35:e6:24:06:5a:e8:a9:d0:9a:f3:f9:33:a7:
         8e:8d:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:47 2026 by rpki-client