Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13a69a79-2d55-3db7-b3f0-e6972c909718.roa
File:                     13a69a79-2d55-3db7-b3f0-e6972c909718.roa (raw, json)
Hash identifier:          0RLA64BqDT3Kk+W10PrHhvP0q1/X56CbTiDq1bSTXyg=
Subject key identifier:   36:A8:9F:F8:88:18:AA:BB:93:07:BE:75:7B:9E:85:59:C0:3F:65:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD476030AD8E6835392EE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13a69a79-2d55-3db7-b3f0-e6972c909718.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        68.238.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:47:60:30:ad:8e:68:35:39:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=62f58fc2-628b-48d1-96d5-8fc4d6975a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:82:bc:3c:18:bb:96:ca:23:8d:3a:ec:aa:
                    a7:7c:ab:b9:3e:77:bf:01:6e:da:20:9b:a7:38:5b:
                    3b:79:1d:2b:60:81:7d:0c:ca:41:02:96:9c:eb:0e:
                    01:c7:c1:e9:5c:4a:da:2b:46:17:30:15:55:65:8c:
                    cd:b8:a7:b0:46:c0:4f:9b:5b:0a:91:72:5f:e5:e0:
                    13:00:c3:32:1c:b1:cc:da:22:fb:2f:08:5c:b4:09:
                    61:05:9f:5a:0f:54:81:cd:f7:30:12:f4:aa:1f:ed:
                    ba:fd:63:52:d9:0c:42:8a:d8:fa:f0:d8:22:9f:ae:
                    17:c9:49:3f:ed:18:b5:d1:18:5a:5e:09:3b:dc:26:
                    76:33:14:c6:d5:81:da:40:5e:62:b5:fa:63:54:16:
                    cb:ed:00:7b:86:77:cf:a6:cc:8c:22:49:ea:e1:2c:
                    13:80:d2:92:e4:69:74:4b:92:67:2c:ac:3a:d7:d1:
                    51:2d:d1:17:8f:3c:6c:f7:20:a0:ee:f8:df:45:82:
                    3e:7e:fd:df:29:d6:91:d7:bc:d2:d3:b9:10:0e:b4:
                    0e:79:7b:91:c2:57:0b:7f:0c:2a:77:a9:08:46:46:
                    0e:23:3e:da:f1:22:ad:92:9d:08:62:d0:33:5a:c6:
                    c8:af:33:07:d7:e1:cf:fc:ea:9e:d1:11:9c:b9:40:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A8:9F:F8:88:18:AA:BB:93:07:BE:75:7B:9E:85:59:C0:3F:65:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/13a69a79-2d55-3db7-b3f0-e6972c909718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.238.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:55:6e:0a:07:90:65:a4:36:80:fa:21:77:d4:41:81:03:be:
         9e:da:08:52:53:c7:20:6b:27:d8:7e:cb:df:e3:8c:4e:95:df:
         28:da:62:0f:15:c5:cf:15:a1:62:73:b4:00:a8:2a:e0:a0:eb:
         c9:b7:0a:a9:0f:8d:f9:75:dd:ff:e8:97:4b:16:75:99:f6:75:
         05:58:6c:df:45:9e:01:0d:e8:ab:0c:ed:b8:2c:5b:70:41:60:
         d4:36:d8:21:bc:82:0e:4d:1e:c1:a8:4d:be:fe:89:ba:17:65:
         68:84:30:fc:a6:2a:fb:46:9c:9c:c7:71:72:3f:ca:ba:39:6e:
         de:0d:f7:4c:d5:51:ef:00:ab:5e:da:61:2d:21:c7:ac:ec:42:
         21:3a:7f:1c:ee:f5:e9:3f:f1:52:de:54:46:fb:af:17:df:57:
         92:47:67:5b:ed:bf:53:55:2e:77:44:a9:a8:2f:dc:ae:33:bb:
         6b:32:18:f2:5c:d8:ec:fb:b4:73:c0:70:e9:b4:96:23:cf:3f:
         48:ad:71:a0:68:a8:3c:95:07:2c:50:d1:05:c2:ad:cc:93:69:
         76:33:f4:e5:24:62:3f:76:0d:cb:a5:5c:5d:dd:65:18:09:ac:
         c3:c8:ef:d0:6b:22:52:82:3e:17:9a:08:6c:fd:b7:c4:62:7c:
         a4:3a:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:28:19 2026 by rpki-client