Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c585112-e47b-3ec2-8e98-2716fecf750d.roa
File:                     2c585112-e47b-3ec2-8e98-2716fecf750d.roa (raw, json)
Hash identifier:          H34RwkuIlWFmcSQYXge3+Zx2Ny6k7miAPCKIbPRzvJc=
Subject key identifier:   BD:92:6A:6E:15:95:38:F0:D8:B1:A6:BF:D9:83:83:3F:37:AA:2D:59
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353DB33E1EE23B4470EDC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c585112-e47b-3ec2-8e98-2716fecf750d.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        68.234.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3d:b3:3e:1e:e2:3b:44:70:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=7780cca0-bd73-4f73-9098-f7b1d0b1be95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:18:37:ba:a2:a8:52:7e:4f:9d:8a:96:df:e1:
                    ad:f2:39:a2:5f:07:73:72:a6:f4:0f:fa:4b:9f:a6:
                    b7:65:9e:e2:36:6c:5c:03:c7:fa:ee:b6:0e:e4:2d:
                    65:5e:78:94:15:a5:8a:6d:87:7f:bb:98:fb:5a:80:
                    eb:f2:1e:c3:21:ee:15:fe:8a:43:ef:d3:8b:02:47:
                    59:5a:05:44:de:df:c3:60:a1:44:ff:9d:15:49:20:
                    b9:c2:10:27:7f:06:6f:e7:0a:10:9a:fe:c8:40:3e:
                    1a:aa:e5:62:e2:34:5f:91:45:b3:24:81:6a:0a:b8:
                    4a:fc:49:54:e7:fb:82:24:0b:f2:e0:c7:a7:df:b6:
                    82:ae:12:32:22:69:5a:f7:6a:68:f7:9e:05:11:66:
                    4f:71:94:e4:73:59:d0:dd:99:2e:23:02:0b:ad:f3:
                    aa:a2:f2:65:44:9b:b0:6a:86:47:16:28:05:b3:de:
                    91:4c:12:c5:26:03:ed:d8:01:6c:95:62:99:0d:ff:
                    88:1f:d3:0e:55:ff:c9:80:b9:5e:3b:9e:a3:fc:07:
                    9b:3c:1a:d0:09:24:07:35:77:62:06:ae:ae:f7:10:
                    7a:8a:3a:d7:18:4f:37:c3:1f:50:bc:c5:cb:61:a5:
                    8b:1e:a7:f9:5a:d8:ea:71:cb:87:f7:35:33:a4:8d:
                    e2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:92:6A:6E:15:95:38:F0:D8:B1:A6:BF:D9:83:83:3F:37:AA:2D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2c585112-e47b-3ec2-8e98-2716fecf750d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:53:c0:75:42:b6:f1:72:cd:3d:f8:b1:88:11:03:10:38:31:
         d2:a1:ba:32:90:e7:2c:bd:02:38:9e:9d:37:a4:66:a8:94:60:
         d8:db:2b:82:4d:bf:08:7d:6a:65:52:ac:56:01:be:40:8a:3a:
         57:d6:cb:3b:ee:99:70:9c:60:94:0b:7a:e0:05:f4:33:f4:18:
         a9:b6:f5:c4:99:81:b5:ed:7a:a9:a0:13:3b:38:df:8f:0b:5b:
         84:a7:f4:5c:0c:df:3d:5b:1e:07:a3:31:d3:a4:ec:de:52:b9:
         a8:36:cc:85:dd:c1:24:af:ec:49:13:28:ce:d7:74:77:bd:4e:
         dd:3c:6f:8f:d0:14:17:49:67:2d:d5:c1:aa:cf:0c:4b:ed:e6:
         04:c7:77:32:2c:a9:34:54:76:31:d7:93:ec:80:59:86:43:88:
         fc:75:e1:ef:92:a5:8c:39:94:4b:a3:55:3c:64:ef:40:de:ef:
         73:42:d8:66:b4:de:81:29:fc:a5:7a:bf:7f:e3:53:2b:42:f1:
         28:d6:5b:20:22:a0:40:1d:ae:22:d0:a9:e1:c5:4a:e6:ca:52:
         07:33:0a:6b:bb:fd:40:13:4c:c1:f9:f9:27:93:02:c9:0c:d9:
         90:fd:f5:d4:68:10:81:ee:57:39:5b:94:24:4b:f6:9d:ae:67:
         5b:cd:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:19 2026 by rpki-client