Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa
File:                     e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa (raw, json)
Hash identifier:          y/L3oQuP7mpK3lwCkj1w2ywxVADta7cSh/686qseBYE=
Subject key identifier:   66:D6:3E:34:62:19:9B:C2:1B:85:84:DC:A3:41:DD:CE:EE:A8:52:BE
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584CB81C86BD6B4A00D3635CBD80
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     10835
IP address blocks:        68.170.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:86:bd:6b:4a:00:d3:63:5c:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=cb158c65-1a62-47a2-a296-b716669665d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:0a:f9:fc:57:8b:a2:b2:0f:85:7d:a9:03:
                    6e:21:9c:e0:ba:54:c4:84:92:ee:2a:b1:58:10:40:
                    80:6d:87:a8:07:c2:00:44:52:08:05:6c:a5:95:e0:
                    a7:cb:26:0e:17:d9:60:46:37:dd:37:8c:79:4a:88:
                    9b:e2:09:ea:a0:3d:41:a6:4b:ff:e5:2e:3b:2c:51:
                    18:9b:b8:05:86:56:f0:9a:25:ce:37:c9:f5:37:d8:
                    6b:4e:e7:a7:15:c2:d6:47:19:db:19:1a:20:c9:f5:
                    fb:e1:f3:59:72:f9:c6:66:4c:bb:a2:33:1a:f7:e6:
                    ba:c5:a9:7e:a3:61:f3:52:0f:62:80:07:03:07:88:
                    89:f1:43:de:b6:67:b4:97:67:d0:aa:32:ac:ca:92:
                    70:9d:7e:b1:b5:b4:9d:11:3f:e5:ce:ca:56:fb:0f:
                    51:8a:7d:61:74:b7:5b:68:47:4e:26:65:89:3e:91:
                    e8:a5:52:3f:96:e3:03:0a:9e:90:9c:6a:39:5e:09:
                    8e:5b:8e:39:37:6e:0c:1c:7a:88:51:e0:37:b4:02:
                    b7:75:4d:20:52:8b:2e:99:a9:07:6c:4a:06:7c:d6:
                    c8:95:04:9f:a1:17:f9:f8:7b:cb:70:be:3f:3b:5c:
                    08:a2:90:19:3f:2e:06:55:53:2d:d8:3c:bf:64:d8:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D6:3E:34:62:19:9B:C2:1B:85:84:DC:A3:41:DD:CE:EE:A8:52:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/e34e8d74-4589-328e-a1ea-c4a4b49bd5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:aa:b9:de:2f:92:c5:73:fb:a0:51:f5:ca:cf:e4:4d:bc:
         02:4c:2a:54:c3:13:c3:5e:8c:12:2c:c9:b2:41:5f:9f:04:5e:
         26:d5:d8:73:91:b8:e3:87:33:4b:68:27:8a:59:5e:15:85:8c:
         3d:26:29:e0:94:c9:e2:7b:25:59:a0:b2:cc:b3:cc:f4:88:e1:
         c7:6f:c0:06:06:19:aa:e5:5c:83:68:da:25:8d:59:1b:ba:3a:
         e4:b4:d1:44:9d:61:cd:12:c6:8a:84:ea:e9:94:c8:94:1c:3d:
         97:fb:5a:57:37:06:3e:81:e2:dc:45:c9:7e:77:f4:11:53:39:
         7a:aa:30:7e:aa:e7:af:45:9f:1d:25:39:9c:17:b6:4e:ea:41:
         f1:73:5a:c0:b8:cd:34:73:43:14:85:41:de:9f:df:09:21:88:
         db:61:90:c9:96:14:7c:1e:14:7c:3c:6c:49:49:fd:b0:6f:0f:
         83:aa:cb:bf:29:e2:48:af:c8:1b:99:58:99:96:34:75:5b:68:
         cc:64:27:43:7f:ff:62:b8:58:93:75:9e:22:9b:a4:22:bb:9b:
         21:d4:d6:d9:e3:0e:3e:12:4e:ac:cb:22:58:67:59:2d:92:8b:
         1b:72:07:0a:37:2c:1f:20:f1:b1:c5:b1:c8:27:3b:1d:72:69:
         4d:b7:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:17 2026 by rpki-client