Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File:                     2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier:          EcZXb4/HgLvt6/iMNWh4Ay1X1cld1mdlis1SBVoRZY0=
Subject key identifier:   C2:B7:24:43:0E:11:1D:91:E2:05:1C:FB:1B:9F:9A:DC:C9:62:1B:96
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584F3A17D06613D6C90B80378500
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     396239
IP address blocks:        68.69.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:d0:66:13:d6:c9:0b:80:37:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=a0e0ada5-b45b-4c26-b9c2-1cabfb359dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:06:36:95:f1:65:d9:2c:2c:67:d7:1b:21:
                    65:5e:6c:52:b4:ab:17:82:f2:48:00:af:ee:40:0d:
                    10:c6:ad:37:74:15:9f:9e:4d:6c:8f:a7:e3:99:a2:
                    c0:66:33:ea:96:a8:34:33:56:d8:01:42:1c:96:c6:
                    a9:35:98:2d:4d:5c:43:24:20:63:38:bd:41:21:90:
                    6b:8a:de:90:d8:ff:dc:b8:d1:a4:f8:f9:eb:0b:7b:
                    e4:5c:92:cc:c1:c6:9b:18:1f:3f:50:8b:85:47:a5:
                    e0:af:21:ed:a8:33:33:fe:0d:e4:61:22:c6:c1:61:
                    48:d8:8d:ea:d8:da:83:f6:39:80:92:40:56:c5:98:
                    f5:f8:b8:3c:0e:2f:87:47:46:97:9a:b6:fb:96:5f:
                    78:c9:fe:66:f7:28:4c:b8:12:af:77:42:c4:cf:1f:
                    ea:dc:8f:f3:45:11:43:3f:07:c9:1e:7b:60:67:a4:
                    00:27:00:da:4b:ef:09:28:68:df:c7:52:ec:a4:d2:
                    78:92:b1:04:7e:ea:a5:07:1d:63:31:01:4c:da:c1:
                    0f:22:71:34:e1:39:ed:06:3b:92:e0:fb:08:12:8f:
                    c3:0b:97:45:3a:e4:5b:38:d6:3b:88:89:04:2f:61:
                    a8:0c:cd:7a:b5:ab:e6:22:74:54:45:51:0d:bf:f9:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B7:24:43:0E:11:1D:91:E2:05:1C:FB:1B:9F:9A:DC:C9:62:1B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:28:4b:06:5f:1f:fa:72:60:c6:90:91:51:63:ee:3d:67:
         d3:f1:46:a2:f1:38:23:c8:b8:20:24:fe:e1:ae:5f:58:9c:b7:
         4d:e4:a2:cd:ba:88:e0:53:d5:1e:90:af:d6:cd:aa:dd:cd:e1:
         e8:2d:dd:b4:c2:68:9f:d9:b6:61:9e:2c:d6:37:68:b7:be:83:
         9d:8b:5f:73:be:3d:d9:f4:db:4a:26:42:d9:f3:c7:b6:11:71:
         f0:4c:7e:c5:8c:00:a7:08:d2:16:7a:88:b1:ea:95:33:67:a3:
         99:e3:31:ba:af:6a:a9:8e:c5:d1:8d:ac:ad:fd:f2:9e:7f:b0:
         09:ef:16:89:01:53:5b:82:6c:bb:08:13:da:67:ee:95:c9:b6:
         5f:5f:77:ef:c7:f3:e8:2a:10:4e:d2:21:80:4e:77:14:47:94:
         b1:9a:2e:08:44:e4:48:7d:65:6f:a3:00:78:3b:45:1f:2b:79:
         34:d3:a2:13:b1:bc:43:ce:64:5e:31:a7:e2:97:0f:b3:b5:a2:
         4b:3f:5a:45:9f:e0:20:5e:19:3a:ce:7f:fb:1d:16:c2:da:5c:
         18:af:58:f3:5d:2f:7e:8f:e3:35:a1:a6:a5:33:e3:60:9e:31:
         a2:e8:77:21:24:59:e3:99:50:9a:8c:a9:9e:52:4e:f4:d2:a2:
         9d:52:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:12:08 2026 by rpki-client