Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa
File:                     0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa (raw, json)
Hash identifier:          LGCXp5GZu9MWwa3A0+/kemYXV8GCD3eAXuaO6FhuPjw=
Subject key identifier:   3B:C4:B0:58:2C:EC:AD:FA:5B:C9:D5:87:27:69:BE:90:89:EC:CC:2C
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584EA7873B475F49C40E495BC930
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     109
IP address blocks:        171.68.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3b:47:5f:49:c4:0e:49:5b:c9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=14c7a49f-5f67-49f4-9b9f-6b04d224b5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:e3:32:fd:f8:a7:77:1a:f8:3b:9d:f7:ca:
                    af:44:e6:b2:2d:fe:f0:c3:ba:2c:7a:fe:45:f1:ce:
                    06:77:06:ad:b6:44:b8:d9:68:26:d7:c9:ad:7d:89:
                    b3:3e:3e:ac:13:d1:f7:76:57:3f:aa:4f:3a:50:0d:
                    73:97:6d:08:2c:43:af:21:9f:1f:8e:40:af:ce:e5:
                    36:2c:f3:8b:5a:15:ff:1b:a5:0e:5b:d7:76:6f:fd:
                    73:47:69:9b:80:55:23:06:bb:4f:24:cd:5b:5d:fb:
                    10:c1:75:64:fa:e4:c5:ae:2e:8a:e4:9d:5f:72:22:
                    fa:49:0a:26:94:a5:c2:f3:72:37:f9:b7:76:1d:ef:
                    46:dd:53:93:83:c8:81:94:3b:25:2f:d6:23:89:59:
                    d5:6c:90:30:ef:5b:83:43:90:a2:c4:cd:5f:56:93:
                    e3:0c:0d:9b:33:a4:dd:09:df:ca:d3:e5:fb:26:b7:
                    d3:15:42:f7:06:6c:83:2e:00:9a:d9:cb:5e:e5:1b:
                    01:02:a8:5f:94:8e:49:b5:25:99:4b:4b:39:15:07:
                    23:ae:bf:9b:24:d3:78:2b:af:66:bd:e7:54:ef:e4:
                    6b:cd:5c:de:d3:10:88:25:43:14:4a:70:6b:c7:db:
                    76:45:13:6d:48:73:76:ed:a6:53:d7:14:fc:7d:72:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:B0:58:2C:EC:AD:FA:5B:C9:D5:87:27:69:BE:90:89:EC:CC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.68.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:87:69:94:c8:28:43:d6:d8:5d:fa:00:b5:d8:1c:8a:5b:d5:
         54:8d:3f:1b:1e:6f:36:49:b0:6c:4b:e5:6f:7c:fb:9d:69:75:
         e1:d8:ae:b0:79:1f:0a:ed:29:3c:e4:ba:28:bd:01:44:a5:07:
         ce:a1:29:20:45:e7:3c:f2:10:01:84:b3:34:1a:bb:7a:28:29:
         73:05:8f:ea:de:c5:1e:f0:7a:10:dc:77:b6:95:70:df:40:94:
         6a:c6:9a:7e:c2:4f:66:d3:e1:5b:22:15:b0:f6:6c:52:c5:e7:
         c1:ce:0d:61:bc:ed:61:23:c3:b3:47:09:9a:33:c3:01:e4:b4:
         8f:25:6b:b7:e6:fa:42:31:e8:de:a5:2f:d3:d3:06:2a:2f:10:
         74:05:52:67:87:7f:ab:05:03:e7:97:4c:bf:a6:ac:05:35:d7:
         5a:4b:63:7c:13:27:7a:70:e7:15:40:a8:6e:a1:ff:b7:bf:ae:
         f1:4a:08:84:22:21:95:29:38:30:31:4b:ae:c5:37:22:39:f1:
         ca:02:22:5d:44:21:7d:99:b3:65:30:7e:62:f2:05:cb:27:e5:
         28:fd:de:0f:fb:bc:2f:c8:86:83:5e:bb:31:f3:ca:fb:9c:67:
         5f:31:3f:5a:47:e2:89:af:24:f6:2b:2e:a5:f9:97:cb:f9:31:
         8f:53:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:45 2026 by rpki-client