Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa
File:                     a6b88847-a0c7-3626-975e-b5416d5337c7.roa (raw, json)
Hash identifier:          fpQcFK2haxOIYfJGhkhUvHTex/3c06g2QBPlN/pHFfI=
Subject key identifier:   F9:56:54:21:53:DD:E8:2F:0A:DC:03:39:AA:F6:55:A2:43:2E:62:A0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EA7953B2F7DF213AAC248F100
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8075
IP address blocks:        40.47.0.0/16 maxlen: 16
                          40.146.0.0/16 maxlen: 16
                          40.148.0.0/16 maxlen: 16
                          40.155.0.0/16 maxlen: 16
                          40.159.0.0/16 maxlen: 16
                          40.212.0.0/16 maxlen: 16
                          40.253.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:3b:2f:7d:f2:13:aa:c2:48:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=15ebcc81-74f6-4407-9860-fdc372db965a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a1:eb:81:20:f2:aa:53:ef:0a:5b:97:15:65:
                    c3:23:79:d3:42:5b:56:60:57:6d:1f:5f:74:08:67:
                    ae:69:28:65:4f:9a:f9:49:45:66:e9:e0:9b:3b:c5:
                    74:56:70:9d:73:b0:47:eb:5c:03:05:5c:53:8a:9e:
                    8d:42:c1:e0:a1:6e:3b:72:0a:bc:12:0e:9f:f9:eb:
                    19:f0:49:ac:fd:49:0e:b5:bc:27:60:72:b8:6b:a1:
                    cc:ce:59:d9:6c:ab:c0:2d:a9:0e:23:1b:01:c8:3a:
                    f9:e4:69:ed:74:6b:d8:46:c0:24:7c:f9:64:dc:31:
                    46:ed:7e:b2:4e:26:17:c0:21:8c:85:94:f6:13:ec:
                    36:a6:df:85:07:9b:d0:a4:c1:63:d2:4c:c1:11:f7:
                    04:1d:16:1c:c1:3a:d6:ce:66:e3:77:38:d4:e1:a5:
                    de:d8:95:67:15:cc:29:2d:4e:68:71:e9:9d:11:6b:
                    6b:8e:42:d8:9f:12:67:72:7a:f0:34:c5:88:92:13:
                    88:83:e6:df:3f:85:e6:44:ea:24:30:a7:63:17:bd:
                    a3:90:68:a2:a7:0c:6a:86:8f:5d:d5:f9:32:ce:18:
                    27:0b:84:99:4a:c6:5e:a5:63:78:4b:34:b9:46:d7:
                    1c:c1:a6:58:64:45:fd:44:04:74:22:8d:5e:3d:42:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:56:54:21:53:DD:E8:2F:0A:DC:03:39:AA:F6:55:A2:43:2E:62:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/a6b88847-a0c7-3626-975e-b5416d5337c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.47.0.0/16
                  40.146.0.0/16
                  40.148.0.0/16
                  40.155.0.0/16
                  40.159.0.0/16
                  40.212.0.0/16
                  40.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:00:6f:cf:f1:93:86:2a:70:78:ea:ab:4e:01:81:5e:97:
         94:c8:17:71:dc:db:96:b7:c2:3a:d2:ab:2a:a7:26:55:fb:66:
         15:67:99:86:49:d3:7a:1f:23:75:39:8e:ef:d4:f2:f2:cf:62:
         92:ae:da:ee:10:c3:3a:0a:65:2b:7b:2c:7a:55:2b:3c:66:4a:
         17:64:91:ce:10:f9:be:a1:b9:c7:b1:bf:fc:34:b6:ea:dc:22:
         da:84:a7:f6:48:f7:c2:c4:32:31:a6:f4:99:9c:90:86:1e:b9:
         a4:c0:a0:4a:ee:a6:27:e9:91:ef:15:80:ba:e7:23:05:ac:5a:
         d2:21:10:bc:ed:c5:dc:7d:ad:53:65:82:1f:c0:db:db:55:66:
         1f:69:c5:48:72:a9:f8:48:1a:65:dd:53:ae:a0:a0:01:13:bc:
         27:14:e6:e3:0c:6f:c4:6f:a5:1d:85:90:df:32:21:d2:e1:36:
         c3:1c:98:44:ab:f5:20:8d:be:13:85:d6:1e:0d:5d:20:de:9c:
         bb:13:f8:0e:00:24:44:25:71:93:2f:d3:bb:ec:05:ed:ba:e7:
         a8:73:a6:17:a1:ea:bc:bf:51:42:86:43:3d:75:95:6f:a5:09:
         f1:09:c4:f3:8f:e9:8e:b4:33:a7:a9:5c:6c:cf:d9:21:6c:84:
         27:d6:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:03:51 2026 by rpki-client