Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33899ca3-4617-38b0-b540-98950e532cd0.roa
File:                     33899ca3-4617-38b0-b540-98950e532cd0.roa (raw, json)
Hash identifier:          gs6AWnKyVkF+9W52EXyRGL8tQfvOQrEf3l/O6eiLjiw=
Subject key identifier:   B2:22:F1:2C:B6:4B:24:C1:C5:8D:E2:63:18:90:74:61:88:32:31:BC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D746FFF2BD31EDA8CCD0DE000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33899ca3-4617-38b0-b540-98950e532cd0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     701
IP address blocks:        68.162.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ff:2b:d3:1e:da:8c:cd:0d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=70981782-8318-44c4-9536-4ee255f0944c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:14:a9:7b:aa:1d:9b:d8:17:08:0b:16:a2:
                    cf:f8:82:ed:dc:1b:fb:84:b6:68:c3:a8:ee:b2:51:
                    7e:12:5f:34:82:49:0d:d4:a0:50:d0:7b:81:35:cf:
                    04:ca:7b:98:4c:30:e5:78:67:cc:82:27:5e:72:e8:
                    40:1d:a9:51:f1:f3:8d:69:e9:38:c1:1e:b3:19:4b:
                    1a:c4:60:21:4f:08:fd:33:a9:50:70:4c:d3:f0:09:
                    39:d2:01:38:f0:17:d7:24:a3:ed:0a:73:34:7b:99:
                    f5:3d:22:83:5e:b7:60:46:aa:31:95:95:85:70:a0:
                    eb:b0:1f:ca:fd:f5:1e:8a:02:6a:b8:a8:1d:df:01:
                    ac:7b:16:50:14:f8:77:82:18:9c:85:29:a0:df:c6:
                    51:ac:d5:13:16:fe:e1:30:c3:7b:68:ce:cb:fc:aa:
                    93:55:f2:3c:3d:b1:30:bc:9a:60:5b:cb:f0:ac:5a:
                    d5:83:45:3a:0a:2d:12:e6:7e:75:01:64:34:e1:91:
                    28:79:e8:a5:94:dc:69:25:3e:2c:c2:48:8e:a2:e6:
                    19:5f:65:3c:70:eb:67:cb:2c:82:1d:7c:89:d4:91:
                    1c:a6:ca:07:fe:7c:06:00:ce:16:cc:e0:f0:63:3f:
                    6a:4b:cb:d9:ae:9a:5b:7a:e6:52:54:5b:c7:00:6d:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:22:F1:2C:B6:4B:24:C1:C5:8D:E2:63:18:90:74:61:88:32:31:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33899ca3-4617-38b0-b540-98950e532cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.162.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1d:6f:7b:87:3d:8c:34:75:61:fd:b2:19:10:82:77:23:23:
         43:81:a1:f8:4a:e4:57:fd:32:60:5a:25:3e:21:2a:41:66:62:
         2d:8e:a5:c6:61:9f:d9:04:e9:58:f7:cd:3a:e8:98:ab:f4:79:
         45:e1:7f:9c:09:5a:b1:56:46:0b:a0:28:83:2c:0d:45:25:1d:
         89:ab:2a:e0:98:b3:35:2b:fa:43:40:9d:b1:8a:03:af:c2:27:
         75:15:cc:7d:7e:bc:89:29:6e:e5:d8:5f:f5:f4:e8:46:bc:3d:
         67:f6:6c:fe:c9:f4:28:b7:22:52:cf:4d:2f:a6:38:68:6b:91:
         55:30:8b:90:fd:f6:ec:1e:33:de:6b:6e:4e:3a:fd:0c:1e:19:
         94:79:b8:fd:b9:86:c7:c9:3f:c8:5c:f7:4b:71:d5:0d:66:8f:
         98:2a:11:f7:68:26:28:fa:a3:83:ef:cb:e5:3a:c4:15:1a:70:
         05:be:f0:0b:3d:ae:52:bd:8b:92:bd:a0:5a:fc:5d:44:5a:ad:
         e0:e0:58:bd:c8:ab:2a:ea:4f:5f:3d:eb:52:62:f5:f0:aa:ee:
         f3:6e:6b:54:b6:0f:22:14:55:18:81:e5:26:88:b8:a4:9d:73:
         4c:e2:5b:bb:e1:fe:e2:51:24:9a:4b:89:59:b6:70:0c:35:b5:
         a6:c9:96:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:37 2026 by rpki-client