Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa
File:                     68f9233d-e645-3fca-90c5-a19337299804.roa (raw, json)
Hash identifier:          zWxvQhqS3qPKEhe072RNMxsVhYy9XVb3/E0nBUYplDI=
Subject key identifier:   9D:24:88:6D:A5:81:7D:A9:B8:B8:7E:F2:23:1D:AA:AF:5B:70:35:D2
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584F23C253F83DB5A7B77FE34400
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     20326
IP address blocks:        67.209.52.0/22 maxlen: 32
                          74.118.136.0/21 maxlen: 32
                          141.98.216.0/22 maxlen: 32
                          202.8.8.0/22 maxlen: 32
                          204.16.240.0/21 maxlen: 32
                          208.91.104.0/21 maxlen: 32
                          2607:fdc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:53:f8:3d:b5:a7:b7:7f:e3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=2bedd439-da27-40fb-bd6e-108403eef9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bc:5b:69:55:2f:b5:0f:ec:f4:23:6d:a8:fc:
                    95:1d:c1:27:57:20:1e:29:2e:07:01:d5:51:9c:74:
                    f7:7c:a8:87:fa:ce:0f:c1:52:9c:1c:78:fd:2a:b2:
                    a0:59:94:44:99:32:1f:e1:ad:79:81:44:fe:49:b9:
                    cd:c4:b7:6a:82:99:89:51:b8:10:81:7e:d3:08:08:
                    ee:32:30:da:c4:92:f4:62:9d:d4:e9:d0:a1:29:eb:
                    59:3a:91:39:45:c9:f8:7f:de:f5:ea:53:aa:d5:3c:
                    a7:a9:6f:a9:b1:d8:8d:a2:8e:e5:df:f7:bd:b4:a4:
                    03:00:2d:9e:30:e9:25:26:67:5f:8a:b8:8e:41:58:
                    2d:76:f4:a8:33:b1:41:d2:04:37:7d:05:b7:dd:6d:
                    a3:8a:b9:f9:83:04:42:2a:e0:9d:53:2d:87:2e:7a:
                    fa:3b:dc:64:a3:09:40:fe:33:31:cf:d6:ef:ac:6e:
                    e8:38:25:c9:16:09:64:e9:38:c6:c1:06:fb:a0:8e:
                    18:f6:6d:1b:63:8d:9d:88:59:0a:0b:af:43:20:d9:
                    bb:fa:1d:6e:87:91:86:56:38:eb:fc:3e:50:6c:52:
                    58:11:b1:97:57:51:b1:52:f8:2d:86:6a:c5:ab:67:
                    ac:16:07:2c:c0:bd:f2:97:ae:29:2d:66:17:95:ae:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:24:88:6D:A5:81:7D:A9:B8:B8:7E:F2:23:1D:AA:AF:5B:70:35:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/68f9233d-e645-3fca-90c5-a19337299804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.52.0/22
                  74.118.136.0/21
                  141.98.216.0/22
                  202.8.8.0/22
                  204.16.240.0/21
                  208.91.104.0/21
                IPv6:
                  2607:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:16:20:da:b3:a9:2c:c0:57:45:89:67:78:bd:5f:fe:37:41:
         38:82:b2:14:79:d0:6b:d0:24:d2:07:38:96:03:10:19:73:89:
         31:ed:4b:d4:3a:38:57:ff:91:67:58:20:f0:77:d8:3e:fa:7d:
         4d:d9:ab:98:e7:03:b7:0f:72:ae:8e:8a:9c:86:39:cc:e2:9b:
         35:df:e5:03:a9:7b:5e:8f:a7:3b:fc:98:37:4c:ba:79:db:e9:
         f2:66:8f:fc:2c:a0:33:50:cb:94:d0:cc:a6:48:41:aa:d1:70:
         9e:4d:f6:a3:60:e7:10:94:0a:f0:27:f4:90:d2:03:af:26:4e:
         eb:c4:14:40:e3:6d:fb:eb:bd:ec:53:f4:a2:43:49:6f:d0:a1:
         4a:05:01:87:8e:6b:44:ab:8f:ef:74:af:f7:4d:93:b2:2f:02:
         04:2e:77:cd:71:91:a4:b1:b7:bf:01:aa:20:26:e0:71:eb:fe:
         8c:73:83:3c:90:a7:d8:16:7e:a5:7d:57:e6:f2:72:ad:bb:d5:
         83:b4:9a:88:8d:c1:9e:f4:a1:2a:4a:db:d5:43:5f:1d:69:29:
         17:55:e8:3e:4a:f8:1a:ed:be:83:b0:b4:51:90:41:ff:4a:6e:
         25:4a:e5:c8:33:81:af:03:ed:88:0f:8b:31:2e:a0:7b:e9:09:
         78:dd:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:38:58 2026 by rpki-client