Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/90930869-75da-3709-8b15-025e368d65fd.roa
File:                     90930869-75da-3709-8b15-025e368d65fd.roa (raw, json)
Hash identifier:          ac17eRnDuXOwVaRO+qcjLmw7JY2IggwGMim0ghRc6NY=
Subject key identifier:   67:67:28:63:9C:AD:BE:96:29:3C:82:BA:5B:99:AD:7D:59:69:8C:6A
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584EFCACCEE5412403383BC4B480
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/90930869-75da-3709-8b15-025e368d65fd.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     36666
IP address blocks:        68.168.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ce:e5:41:24:03:38:3b:c4:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=73cba341-b118-4ed8-8f9d-0610b80e7805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:15:1b:99:e6:e8:12:1a:c7:94:2f:79:d5:
                    db:67:42:71:31:ec:5c:23:6b:04:8b:f6:8e:e8:13:
                    e6:b8:41:0d:af:c4:66:a3:74:90:6e:cc:f9:ae:6c:
                    80:01:03:11:6a:7d:de:f3:b8:b1:09:ba:3e:6e:7a:
                    fb:bb:21:44:bf:70:06:29:89:a3:97:b2:d9:a6:a1:
                    2b:8a:67:33:a7:38:a0:a3:0d:e4:26:54:b6:1a:6d:
                    a7:25:93:b6:ea:f7:e1:5e:be:d3:6f:86:cc:d7:f3:
                    4a:20:13:14:74:e0:01:f3:b5:bd:db:19:52:56:bf:
                    3c:3c:c7:c3:28:ee:e8:64:23:a0:97:91:4d:d0:e8:
                    00:d1:47:68:fe:77:0e:24:2a:ed:c5:91:c6:f4:97:
                    61:3a:a7:2c:e1:9f:54:7e:a9:c0:79:80:0c:5d:2e:
                    8a:0b:eb:ea:db:a9:8e:9a:34:36:c6:b7:06:aa:fb:
                    bf:8c:a0:fa:5c:d4:52:c5:7c:19:82:92:c6:da:a4:
                    f0:71:12:9c:bc:71:39:a2:51:7e:0f:18:b3:90:b5:
                    f0:95:98:fd:f0:ee:d8:3c:a0:1a:b4:6f:dc:ae:09:
                    fa:3e:ed:7e:96:57:13:4e:b6:d9:b7:b1:15:94:b1:
                    44:41:e1:be:2c:c8:6c:5b:36:65:8d:06:6f:a3:4a:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:67:28:63:9C:AD:BE:96:29:3C:82:BA:5B:99:AD:7D:59:69:8C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/90930869-75da-3709-8b15-025e368d65fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.168.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:b0:10:de:e6:92:61:a9:13:8d:76:6f:ec:2a:57:04:11:
         05:7e:b2:5b:ee:cb:66:e9:d0:3b:1e:59:e9:2d:cf:f1:0e:ea:
         1e:e0:37:77:f1:69:20:53:48:f9:03:5a:4b:c5:6a:b2:c4:92:
         69:a2:be:fa:52:c6:e1:69:60:97:20:3b:4c:9a:a3:d6:78:0c:
         8d:a4:16:71:7d:51:cb:10:27:30:51:db:b6:f8:2b:00:cb:88:
         06:27:65:8e:a3:4f:73:93:0c:56:d6:c6:cd:75:e0:53:e3:93:
         78:06:26:d4:1e:a6:78:e6:73:c3:36:55:80:8d:eb:9f:74:15:
         fc:94:dd:76:c6:61:29:f3:e2:fe:8b:2f:a1:75:71:82:98:aa:
         ec:a0:a2:ce:25:8c:08:b1:e2:d9:d4:fe:76:9a:6b:59:b4:33:
         77:73:4a:71:a7:6d:00:15:f9:94:40:80:ac:ae:ba:e9:25:23:
         b6:5f:f0:b5:4b:4e:b4:cb:38:ab:44:97:8e:41:92:63:63:72:
         da:f0:94:f0:63:8a:d8:06:ad:20:c5:98:d7:ed:83:a5:43:1f:
         33:f0:04:57:78:ad:d3:41:91:06:85:a3:16:2e:b6:d6:72:e6:
         8b:3a:d1:e9:04:72:86:58:93:5b:33:80:e4:37:db:7c:0b:4e:
         8f:34:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:21:52 2026 by rpki-client