Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/35dd3347-275b-38c4-acc8-90d951cdc787.roa
File:                     35dd3347-275b-38c4-acc8-90d951cdc787.roa (raw, json)
Hash identifier:          TkepUk2mfQhce8MqTqCkf838Cq6R6mVMzVO9jarc730=
Subject key identifier:   4C:A4:4D:27:4C:5F:D3:34:05:EE:21:7A:16:41:40:5F:34:BD:44:2A
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EA7916B01E5647090301A9540
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/35dd3347-275b-38c4-acc8-90d951cdc787.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29951
IP address blocks:        209.63.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:6b:01:e5:64:70:90:30:1a:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=476ef1f1-4ff0-4635-b120-422f664d16eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:38:7b:ee:a5:af:05:ca:cb:a8:48:d8:c8:
                    7b:f5:63:88:4d:68:97:a3:8f:9d:ca:99:18:0d:cf:
                    12:c7:62:8d:7b:4c:57:11:7a:52:ad:9a:bf:ff:1d:
                    49:c5:52:3f:64:ff:80:a8:46:7c:1b:9a:9a:06:9a:
                    91:bb:76:45:f9:3a:2a:93:bd:da:61:42:e2:ce:96:
                    cf:78:cb:8a:c8:60:e7:0f:5b:b8:25:74:fa:a4:cc:
                    86:c5:a7:cd:fa:2e:aa:68:ca:b5:87:6f:e9:f6:d9:
                    18:4c:6f:83:95:be:20:98:9d:0e:c1:ff:91:f7:7e:
                    a8:c3:80:ea:6c:d6:d3:4a:62:0e:bb:10:7b:ff:93:
                    5a:32:fc:71:c7:9c:d0:30:ad:33:07:85:91:54:13:
                    32:45:aa:a2:ae:d6:00:5b:cd:a0:bd:8e:ab:2e:e2:
                    8d:36:40:f0:50:62:d7:e3:2b:ad:7c:66:74:e1:7d:
                    93:ea:4b:fa:d9:1b:c9:eb:81:36:f1:0d:24:ee:53:
                    ba:81:a8:fd:50:e5:10:c7:26:bd:ef:78:ed:0c:c7:
                    33:e9:15:84:5d:0c:03:76:b7:34:8b:57:16:20:45:
                    80:d1:2e:7d:43:09:6a:0e:0e:f2:e0:01:dd:d9:aa:
                    17:10:8a:1a:f2:d3:53:81:15:f4:1a:fd:0f:d4:11:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A4:4D:27:4C:5F:D3:34:05:EE:21:7A:16:41:40:5F:34:BD:44:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/35dd3347-275b-38c4-acc8-90d951cdc787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.63.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e8:ac:f9:f2:1b:e2:a9:c2:4a:7f:1e:47:b2:c7:22:0a:90:
         94:b5:dd:90:f6:8c:37:17:05:ce:37:78:ae:d6:69:af:0a:46:
         f6:37:9b:43:6d:5f:ee:26:d8:be:07:24:49:9d:65:7d:86:bd:
         91:51:04:b1:3c:07:68:70:29:1f:3b:8c:dc:51:b6:21:6e:59:
         27:16:c4:16:67:82:d5:71:9b:cc:9e:95:a2:4a:c4:e4:3b:d2:
         bb:72:62:57:d0:83:9d:82:5d:57:ff:21:03:6b:f3:e7:c7:27:
         2b:61:43:87:2a:38:78:b5:25:e2:b1:ec:5d:07:e9:29:d5:ea:
         a6:3b:a3:c3:aa:d8:05:bf:ec:f6:d1:7b:07:dc:3b:c3:f6:5d:
         52:5e:e2:36:7d:4d:a7:69:60:1f:56:a0:97:1c:7a:35:b2:5b:
         e5:d4:aa:d8:3a:f8:b8:ce:5a:51:51:b9:20:0e:b1:8c:df:70:
         41:e8:a8:75:10:cd:fc:7d:a2:c1:9d:a3:84:d3:14:e4:13:7b:
         6a:96:1f:bb:a3:ce:7b:b5:9c:44:e8:ea:11:6b:ac:02:4f:b0:
         69:0b:48:e8:74:93:96:56:c8:67:e5:7e:f0:f0:2d:a2:48:21:
         8a:da:1e:2d:2d:34:11:e9:8a:90:a2:fd:d7:c4:b4:16:fc:dc:
         82:34:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:39 2026 by rpki-client