Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
File:                     7a374813-872b-39b6-8d07-7b6319971a35.roa (raw, json)
Hash identifier:          mqsHpsy7g5z2vp/WSBV6WQSifsrqUDLEHncLM6/3K3g=
Subject key identifier:   3F:CA:85:FE:9E:CE:23:55:2C:D0:71:80:90:EB:C3:25:B3:48:2B:D4
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584CD6D20A50F2A8405CA1E4E4C0
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
Signing time:             Thu 12 Feb 2026 14:00:40 +0000
ROA not before:           Thu 12 Feb 2026 14:00:40 +0000
ROA not after:            Wed 13 May 2026 13:00:40 +0000
asID:                     396239
IP address blocks:        68.69.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d6:d2:0a:50:f2:a8:40:5c:a1:e4:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Feb 12 14:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=5da2e409-8fcd-4e32-abc7-33921df44099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:03:0a:97:8a:25:f0:3b:cd:20:0a:43:0c:
                    d4:d8:18:2a:f9:e0:c9:24:2e:fc:84:ab:e7:f4:fc:
                    c1:a9:d2:53:ee:fe:1c:19:af:26:f4:9d:b6:3f:b3:
                    7b:ba:9e:00:98:9a:d0:0b:55:84:4f:c6:97:e5:6f:
                    70:b8:ee:dd:c4:09:93:a4:4c:0e:cb:67:90:86:3d:
                    fd:4e:6a:94:a0:34:21:51:cf:f9:cd:ff:7c:5a:37:
                    30:1a:45:ba:1f:8f:c3:4b:79:5a:0e:4a:8b:6a:44:
                    3f:13:e4:58:63:52:71:42:7e:07:3f:e6:7a:a5:1b:
                    6c:1c:05:02:a5:c6:b1:a3:0e:60:37:be:53:a1:b0:
                    dd:9c:29:74:03:68:b6:3d:62:71:ef:5e:d8:60:e9:
                    0b:81:62:f2:ac:92:af:c4:4a:5f:3d:3b:bc:d2:ba:
                    76:b2:07:41:c7:af:03:68:69:c6:5c:25:63:c2:14:
                    6d:cc:ac:6e:5d:f4:23:cf:f7:58:cc:c2:c0:20:7d:
                    78:40:ed:a9:0f:03:e9:ae:33:7d:9e:75:90:4c:63:
                    48:e4:d2:4c:74:97:7a:a5:ad:f7:f0:bd:74:24:46:
                    56:e0:20:19:62:19:ac:90:73:b8:ce:7c:ed:ae:69:
                    ac:54:78:68:3c:9b:13:59:89:dc:26:dc:ad:c9:0b:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:85:FE:9E:CE:23:55:2C:D0:71:80:90:EB:C3:25:B3:48:2B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:20:47:ac:f9:18:f0:e0:ee:bb:30:0e:3f:d9:a4:64:2e:c0:
         af:88:d2:43:1d:c2:e6:7f:5f:96:fb:f7:43:43:08:e5:ab:e2:
         c0:bf:6f:5b:79:ca:3f:30:f2:3e:de:22:8e:29:0d:1b:8f:76:
         56:7d:a0:14:0c:7b:dd:a6:f9:1a:08:72:5c:64:57:97:c0:4d:
         9f:c8:72:e7:29:93:38:fd:ef:d7:7d:f8:69:f6:c1:dd:6d:4b:
         cd:9c:cd:c8:fc:05:dd:01:74:85:d2:64:21:fe:ed:e8:e8:69:
         22:0c:4a:34:41:dd:6a:3c:42:fb:33:7f:21:cf:62:ef:3f:0f:
         1e:c5:43:d0:1c:88:77:99:72:85:f7:dd:72:b6:1e:29:34:db:
         d0:7b:95:e1:c6:78:ec:39:a8:cd:c0:45:6f:8f:c0:8b:a9:5d:
         a2:ca:83:d3:ad:21:d9:4c:98:43:a9:91:8c:68:66:c5:52:67:
         45:ed:5f:68:e7:eb:b6:40:7a:6a:cb:73:67:72:a2:7f:2c:af:
         3f:c3:c4:07:22:c6:2e:e9:58:66:93:da:c6:ce:84:1b:6e:95:
         1e:4a:40:81:c8:1c:6a:e5:e2:eb:8a:df:0c:a3:23:e1:77:ce:
         0a:52:28:cb:ca:8c:62:92:21:62:26:24:f5:87:4e:c7:41:5a:
         24:40:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:51 2026 by rpki-client