Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa
File:                     98414261-a9c5-331c-907b-334e7923dd0d.roa (raw, json)
Hash identifier:          NHLM5wVupaJi/kddUohfumSFVr3wTc/UFR9CuR4Biac=
Subject key identifier:   2D:DB:E9:3A:21:3C:7F:94:EC:DB:07:66:DB:41:36:FA:04:88:23:3F
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584D746FBAD9FDD79A996ADC1540
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        68.67.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:ba:d9:fd:d7:9a:99:6a:dc:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=be429700-57dc-4086-bbea-3c93eac326d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fe:52:ee:a0:c9:07:ff:37:ab:1f:20:44:9b:
                    5c:b2:9a:06:1c:d9:6a:ed:92:b0:0c:09:36:9f:da:
                    26:d1:c4:45:34:eb:9f:08:11:e6:77:3f:ba:6e:10:
                    1d:8a:d8:de:da:55:63:37:04:f0:fe:2e:9a:16:af:
                    f4:26:39:a1:23:c5:9a:7e:2e:4a:03:a7:ed:d1:2a:
                    0b:f2:7d:39:4e:83:3f:d9:13:e5:49:73:84:ed:6d:
                    4a:5a:03:c4:00:95:9a:71:20:1d:1d:d6:76:33:2d:
                    bb:92:84:b8:44:41:f1:b9:d7:c3:3f:f5:75:74:2b:
                    6c:bb:99:35:84:9e:cd:0f:f8:01:b5:ca:6e:38:b8:
                    e5:fb:30:82:5f:eb:c1:06:f2:a0:33:5c:05:59:3f:
                    98:2d:82:96:70:a0:b4:2c:97:fa:a2:6b:28:50:70:
                    57:2e:0d:cc:7d:ba:68:cf:7d:a3:54:f2:0a:84:81:
                    da:05:49:7d:70:5e:55:93:15:44:66:99:78:ff:8e:
                    5b:ac:bc:2e:a0:bf:c6:a4:ef:b5:ac:19:cd:33:93:
                    08:89:d5:34:43:5c:bd:b1:ea:02:d7:fe:7b:7d:8c:
                    94:f0:6f:81:1f:f5:22:f7:a6:18:0f:ba:ee:f8:a2:
                    48:14:f4:04:51:b5:ab:f0:44:63:90:33:0f:39:33:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:E9:3A:21:3C:7F:94:EC:DB:07:66:DB:41:36:FA:04:88:23:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:be:80:bb:72:2c:86:a1:f4:d3:bb:a8:24:e0:e6:23:2b:
         39:b4:6b:b4:39:3e:fb:53:ca:d5:68:d4:e3:0e:d6:46:cb:36:
         46:ff:fc:59:3e:8d:56:e7:50:5f:16:59:09:95:87:a9:cf:7b:
         a2:bd:bf:d0:60:95:cd:d6:d0:6d:5c:f2:bf:3c:03:9e:14:27:
         50:de:90:20:96:4a:96:78:47:aa:96:1e:c7:f4:c0:de:50:f8:
         48:5d:09:78:da:90:aa:fd:0a:c4:21:d1:20:02:54:07:9e:2c:
         04:49:05:c5:a7:d0:f2:d7:33:9d:ba:4b:33:3f:15:bd:c6:11:
         f1:0c:89:dd:40:93:b3:74:b6:9a:fb:cd:59:ad:43:0e:c1:ba:
         7f:70:5c:9d:6d:d3:f1:57:77:e2:bf:d1:b4:09:e5:06:e3:3d:
         33:80:52:84:34:1c:e5:03:65:10:96:74:8e:83:3c:11:c9:3b:
         86:e1:ed:61:bb:9f:e8:5c:61:b1:63:0b:57:5a:41:85:94:86:
         b4:3d:dc:fc:f5:20:6e:b1:dc:a8:cb:c4:42:d2:ca:da:bc:f2:
         27:06:69:70:41:df:7b:d7:db:ec:6d:67:38:37:73:ab:b3:a5:
         40:a0:38:96:2d:5c:9a:2a:b5:6f:8a:2b:26:bf:7b:6e:31:07:
         6b:0d:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:05 2026 by rpki-client