Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa
File:                     b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa (raw, json)
Hash identifier:          bYfPKefzyWi8yQHs+gkHFMnZtsI/DxvL6+cUrREwk3M=
Subject key identifier:   2E:08:2F:AF:7C:FD:6B:FE:0A:DB:F3:5B:32:E5:C0:81:DF:DA:F8:48
Certificate issuer:       /CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Certificate serial:       010D0C9F4328584CC61208BE6E71F150D629E700
Authority key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     0
IP address blocks:        192.111.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:08:be:6e:71:f1:50:d6:29:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=1fe860bc-6846-483f-a443-f72ca86f370d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:bb:08:9f:eb:67:a9:47:1a:23:32:a1:ba:
                    57:b7:58:f8:2a:a4:bc:8c:09:62:44:c2:3a:59:65:
                    a9:d6:a5:85:1e:32:a4:a7:23:b5:2d:14:df:d7:f9:
                    6b:d7:83:6c:b7:32:95:0b:b5:6f:37:6a:88:3d:fc:
                    75:dc:a9:f5:4b:21:d3:ff:1d:2f:15:a1:be:fd:d4:
                    1f:41:b1:4f:1b:cb:46:d6:2d:f9:57:b7:ed:7c:bc:
                    a0:d1:8d:a7:3a:af:11:a7:5a:bf:80:6b:dc:60:a4:
                    d7:6a:e1:8c:54:d3:49:f9:6a:44:d9:f8:3f:ee:46:
                    20:a9:1a:e4:91:83:43:06:33:b5:c4:e2:43:0b:4b:
                    0e:c1:96:73:80:36:a2:11:76:5b:c1:0e:30:b0:00:
                    5f:3d:61:e4:62:71:10:c8:c1:84:24:9c:90:96:00:
                    0e:3b:43:c0:74:70:f9:b9:ac:4a:56:31:f5:b9:61:
                    e8:5a:5d:67:cf:c3:7c:68:cb:69:36:ed:42:b4:22:
                    90:b7:74:13:a5:81:e3:e5:13:25:87:96:1a:89:1f:
                    5f:81:0c:52:29:a9:34:ff:8e:30:51:61:95:2f:86:
                    c1:10:ef:39:b7:44:85:f0:7b:18:34:a8:37:0a:cb:
                    31:a8:ca:56:ff:c2:89:10:f5:9b:5b:89:51:90:18:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:08:2F:AF:7C:FD:6B:FE:0A:DB:F3:5B:32:E5:C0:81:DF:DA:F8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/b00dcb04-4078-3c85-9c69-ec3d51f2b5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:5b:74:c0:16:ec:a7:cc:1a:16:66:1f:2b:dc:9c:6c:25:
         b2:2a:39:75:eb:4a:58:10:d5:23:d9:4c:64:c9:50:b6:c4:3c:
         5d:39:a2:87:ea:7f:18:fd:de:a3:3a:4f:12:77:a9:d9:8d:1f:
         88:d3:6c:eb:c1:56:f4:8e:ca:e9:3b:02:02:f7:ef:7c:55:fb:
         75:cc:3f:6b:b7:7c:95:a8:7f:cb:eb:81:82:93:d1:c5:a5:5e:
         5a:99:3e:69:3f:24:39:c7:38:6e:cb:48:30:ec:b4:58:42:08:
         3f:0d:40:93:e4:a8:dc:33:2a:98:be:81:63:05:f0:3a:92:9e:
         54:8f:4e:5a:a0:da:cc:3d:06:91:ea:3c:f1:b3:b3:b5:42:3e:
         a3:ca:9c:d7:d5:33:b5:c1:b4:1c:5b:af:7d:b2:dc:1a:88:4f:
         02:53:fc:4a:c4:ab:73:83:5c:0c:8d:26:e0:12:f2:7d:1b:fa:
         36:5d:ea:bc:5d:20:8d:1c:2f:7f:4d:d5:fe:3e:15:65:b3:b3:
         93:1d:e4:07:6a:64:61:03:91:81:ae:10:73:5f:54:45:c8:c2:
         23:66:ee:c5:58:14:aa:61:a5:03:8e:3b:b1:80:6a:d0:f4:cd:
         ff:fa:b3:b9:ca:a6:a4:93:28:4b:d4:ad:eb:84:3f:4a:ba:d8:
         f6:bd:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:39 2026 by rpki-client