Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
File:                     52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa (raw, json)
Hash identifier:          cq4ul0l1YCgqm7Oo31VHysDRs6ahkVvvv2UfCNb+Khs=
Subject key identifier:   C9:A4:D5:3E:BC:F5:56:B7:4E:81:77:41:1A:67:79:97:33:0C:DF:30
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584E147ED73D7D3AF6773991EF80
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     834
IP address blocks:        68.67.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:d7:3d:7d:3a:f6:77:39:91:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=63fe14ac-195f-41af-b493-a06745fd5155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:a8:43:40:3d:14:fb:77:98:14:a8:0d:a0:
                    19:d7:bd:72:1b:7d:e2:38:ac:b7:01:fa:08:d1:6d:
                    62:6f:2f:ae:1d:7a:7d:aa:2d:0a:e5:a6:d6:5f:20:
                    45:e7:3a:e7:de:24:56:fa:51:83:9a:4f:93:74:07:
                    dc:64:ad:b3:af:01:72:7e:f1:db:33:6c:06:27:8b:
                    e7:9c:cd:2f:35:33:a3:7f:58:ed:75:4b:99:0b:1f:
                    21:b5:ec:5c:db:36:9c:ea:0f:48:b1:62:45:32:40:
                    c4:9f:bf:d3:47:59:78:58:ef:7f:2d:4a:4f:0d:4c:
                    b8:42:f9:67:bc:52:62:d2:f6:da:63:97:90:ed:59:
                    35:cf:42:be:69:b9:72:7f:a8:35:86:91:73:82:1d:
                    d1:01:f4:1f:91:bb:c2:05:6b:74:20:57:74:df:13:
                    ac:cd:eb:96:1c:4a:30:40:8f:26:1f:85:8c:93:a2:
                    21:76:54:36:b1:43:2d:bb:e1:be:9e:ae:a1:21:08:
                    d8:6e:a3:38:0b:5f:0b:2b:c2:bf:9c:fe:00:37:a5:
                    ad:1e:36:a1:af:7b:87:54:fb:2c:dc:4d:1f:75:b1:
                    70:9d:10:63:f4:c1:16:b3:99:91:2e:07:e3:8d:c9:
                    c4:72:23:0e:66:b1:b5:08:ef:8d:7c:75:53:ff:d2:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:D5:3E:BC:F5:56:B7:4E:81:77:41:1A:67:79:97:33:0C:DF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:f0:35:f3:bc:6f:bb:3a:2d:b8:db:ae:14:98:bf:ce:5f:
         3a:90:ea:c2:73:48:fb:cc:d8:65:84:8f:49:7b:2a:e8:0e:25:
         8c:75:0c:64:6b:f2:d4:4a:42:45:a3:4d:b9:18:c3:23:cc:da:
         3a:dc:4e:b1:df:81:8e:87:2d:e2:c6:31:61:61:b2:38:41:de:
         4e:fb:f0:8c:90:72:39:f6:9a:7d:10:6e:62:0a:0d:ac:fd:f8:
         0b:26:a5:14:36:24:38:af:d9:6a:4a:c2:21:d9:cd:32:b5:78:
         27:05:82:8f:10:34:fe:e2:f5:79:02:39:90:e2:72:c3:13:56:
         1f:21:e4:3d:c6:1d:70:96:f9:cb:c6:a4:f4:5c:29:df:72:28:
         05:df:d2:5c:f3:7a:d2:e5:cb:97:1f:e2:84:d5:8a:df:f6:9a:
         6d:34:c7:60:8b:1f:17:73:56:81:4f:c2:d1:f8:33:ef:88:e9:
         62:c9:63:51:69:88:32:91:f3:ac:1c:59:43:4e:c1:09:fe:ef:
         71:41:13:33:83:0b:2f:a4:a3:41:09:d8:a7:83:34:84:a3:9e:
         9c:e3:a1:44:3b:1e:8d:8b:37:61:0e:93:05:67:24:34:78:75:
         15:de:5d:aa:e6:10:4b:62:ef:1e:e6:c1:1c:85:de:b0:b9:91:
         29:09:20:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:16 2026 by rpki-client