Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa
File:                     ceeaa841-ed82-33d1-843a-3a411e6fee58.roa (raw, json)
Hash identifier:          Qona3ca8T6WA46lEM2UQGJprBHf8WX5JWA/aPnXCg9Q=
Subject key identifier:   8F:F5:35:15:43:AD:E4:3E:F1:02:9A:D1:88:7B:2A:71:B1:EE:A2:08
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F4328584EA791C124F9D035771F5FB380
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394195
IP address blocks:        68.64.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:c1:24:f9:d0:35:77:1f:5f:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7a9d4229-dc57-4752-926a-33da2eb7bb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:99:29:fd:97:3a:3f:cc:da:30:77:71:a1:
                    e0:5c:d3:3f:da:ac:01:03:db:6b:0e:30:fe:6a:9d:
                    a0:0e:2b:e7:aa:8f:dd:12:04:e9:e9:5f:e7:e4:ba:
                    f0:35:80:80:01:a9:ef:1e:ba:83:8a:d6:cc:f1:d6:
                    c5:21:ea:4b:80:ec:da:fa:41:93:ea:d7:be:c7:04:
                    d7:b5:d5:40:ab:b4:4c:43:d3:00:11:e7:e6:bc:8f:
                    65:4f:8f:52:92:a1:ae:06:86:82:de:9b:d6:c3:76:
                    ca:a6:58:a7:3f:1f:0f:22:f4:03:52:c4:79:6e:89:
                    ae:b0:60:e2:6f:8b:77:d7:1b:a4:c5:fd:ec:d5:16:
                    1e:c4:37:64:dd:28:7f:7f:ef:c7:22:ea:8e:99:dc:
                    97:b2:d4:d1:58:3a:fc:ab:a0:d8:54:e3:b9:ff:9e:
                    d8:a4:15:68:aa:51:78:af:1a:9b:d8:40:3c:45:2f:
                    0d:80:a6:69:cf:a3:43:cd:95:7b:14:f0:19:00:73:
                    6d:39:ef:1d:15:1a:ff:6c:b3:42:54:0e:60:ef:b9:
                    94:96:38:32:ef:3a:f0:10:58:56:31:56:62:f8:36:
                    f1:ab:17:be:ae:9d:e7:66:e2:78:77:9e:2c:03:04:
                    15:50:49:a5:a3:62:54:38:e5:6a:91:63:55:d1:87:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F5:35:15:43:AD:E4:3E:F1:02:9A:D1:88:7B:2A:71:B1:EE:A2:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/ceeaa841-ed82-33d1-843a-3a411e6fee58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:48:b8:f6:b2:2f:fb:13:88:94:8d:6b:a3:7a:ee:84:f4:
         db:49:3d:67:06:a5:68:29:6c:96:9e:e0:3c:90:d2:d0:81:9f:
         8b:42:e1:94:e6:49:31:ef:0b:a4:98:87:f2:a6:d8:32:12:7f:
         2c:4d:a3:67:98:3a:21:f8:62:80:ee:31:68:ba:11:26:5a:ee:
         53:09:58:b8:4c:81:11:18:ee:d6:69:d9:36:0c:29:d2:25:ea:
         29:0c:44:51:39:87:e3:b7:03:c3:a7:cf:27:e7:d9:22:8b:c4:
         45:54:42:66:aa:93:c7:86:d0:1c:95:4d:21:62:3e:46:e3:0b:
         96:fd:33:1b:3a:5b:c5:e9:85:d7:b2:f1:8b:ad:2a:93:1e:6b:
         6e:eb:32:be:f4:36:3e:07:7a:2c:76:a6:80:1e:db:c9:ab:6c:
         6a:c6:d2:fd:7e:d3:cc:d5:3d:40:f3:22:47:ee:6f:10:31:6e:
         0f:e3:58:4b:36:22:dc:64:8c:21:c3:c0:26:ec:7a:c3:7f:0d:
         fa:d2:da:e3:01:86:2d:dc:be:df:09:99:4c:c9:d1:45:d3:d2:
         fb:32:09:13:d8:4c:fa:ee:62:88:6e:c1:aa:9b:e8:1a:8d:48:
         d0:8e:8c:24:a7:4d:3d:c9:4c:32:4d:dc:f0:6b:8a:27:70:9e:
         46:c3:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:11 2026 by rpki-client