Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/976ab72c-ad84-3607-915d-b58cf9068475.roa
File:                     976ab72c-ad84-3607-915d-b58cf9068475.roa (raw, json)
Hash identifier:          jPjDg1gZiDub1bMHiz/WcLW4mk6keFs0S81/I3AjWXk=
Subject key identifier:   59:7A:BE:9A:E6:09:48:49:D5:77:F9:BF:93:9E:17:3A:65:87:9E:8E
Certificate issuer:       /CN=cae112c4-38cb-44c3-a8df-43152814a899
Certificate serial:       010D0C9F4328584F6828161DE60166BF9C46E8F8
Authority key identifier: 8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/976ab72c-ad84-3607-915d-b58cf9068475.roa
Signing time:             Tue 06 Oct 2026 01:00:13 +0000
ROA not before:           Tue 06 Oct 2026 01:00:13 +0000
ROA not after:            Mon 04 Jan 2027 02:00:13 +0000
asID:                     63019
IP address blocks:        185.213.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:68:28:16:1d:e6:01:66:bf:9c:46:e8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae112c4-38cb-44c3-a8df-43152814a899
        Validity
            Not Before: Oct  6 01:00:13 2026 GMT
            Not After : Jan  4 02:00:13 2027 GMT
        Subject: CN=18535626-6f1b-4995-8d05-3c70fd7db63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:57:37:a4:dc:7a:86:b8:e0:d1:c8:6c:17:
                    72:33:69:b0:a5:2f:92:a4:3f:d9:53:ca:75:13:fa:
                    b5:b2:e6:7e:ef:84:39:eb:14:56:f5:fd:f9:c4:37:
                    5f:66:3f:09:0b:59:0e:b8:42:bf:28:e4:3c:2f:34:
                    fa:7a:71:73:0d:8a:e0:91:01:c7:7e:fa:ff:6b:fe:
                    de:cf:17:aa:33:37:ba:39:01:2a:f4:4c:57:24:86:
                    d1:81:e1:cc:77:45:94:9f:46:39:c3:1c:f8:e7:9a:
                    ee:86:7e:11:41:fa:b5:a6:5d:69:db:70:83:2e:5c:
                    8a:7d:a0:e7:06:3d:aa:1e:63:33:e9:85:25:ae:97:
                    bd:90:83:ed:36:41:67:df:01:0c:4d:6b:6e:41:0f:
                    ad:21:c1:94:73:cd:74:ab:90:d3:30:65:6b:35:4d:
                    cd:26:c4:98:7b:0a:73:06:d0:a3:77:d1:c6:14:b4:
                    34:c5:71:71:73:fc:4f:bd:ed:e3:04:3d:3a:59:7b:
                    38:2d:6b:f7:88:0f:6c:6d:db:ec:ba:82:44:ce:47:
                    66:76:bd:96:28:a1:3c:d6:e2:6f:8e:8f:8f:a8:c1:
                    73:e2:e4:41:85:e4:93:36:a3:c0:83:eb:21:60:c9:
                    06:3b:6a:d2:48:11:a9:0f:a1:6e:7b:a2:47:8c:69:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7A:BE:9A:E6:09:48:49:D5:77:F9:BF:93:9E:17:3A:65:87:9E:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/976ab72c-ad84-3607-915d-b58cf9068475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.crl

            X509v3 Authority Key Identifier:
                keyid:8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:97:d7:2b:21:ff:67:66:65:ae:a6:e0:ad:f8:ac:2b:ae:
         12:d2:da:ef:80:28:f4:bc:7f:ba:2b:c8:10:f2:0d:13:1a:2c:
         77:21:2e:9d:1b:99:a2:a4:31:3e:e3:16:48:5c:65:ab:fe:a2:
         1a:3b:31:b6:60:e5:94:e3:fb:62:3e:89:03:c0:d3:b3:88:c4:
         ec:a7:e5:7d:09:b2:56:2f:48:3b:06:11:ea:8f:d1:b2:b6:cd:
         89:63:9d:29:79:fa:04:33:b8:f3:b1:0f:40:db:9c:8b:18:2c:
         ad:2b:7e:6f:03:9f:6d:26:5a:1c:f6:eb:66:95:bf:17:e2:7c:
         7e:1e:ae:d6:eb:e6:22:e0:02:9e:57:ee:d8:b3:94:8b:fe:c9:
         c4:34:c4:95:2e:bc:b6:f4:4d:77:f0:4d:33:27:54:43:c1:2d:
         ad:4f:c7:c1:01:0f:55:28:f3:c8:95:9d:a4:8f:bc:4a:5e:44:
         ad:45:2b:64:3e:d5:e1:58:c1:6b:4f:c5:41:c0:aa:5d:f1:b1:
         42:24:d8:7e:81:f4:9a:ce:8c:2d:a1:4b:01:49:4a:6e:33:5d:
         f3:16:33:ed:16:4d:84:39:73:5c:61:04:0e:34:ef:13:38:c0:
         a1:6b:b2:9a:b2:7c:10:44:4c:79:8c:af:9f:e2:19:6f:b6:d8:
         d2:cf:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:41:32 2026 by rpki-client