Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa
File:                     cb1dba05-4578-34bd-8538-27f1ec0c698f.roa (raw, json)
Hash identifier:          9zYF8R4mJycrx4EPR6vT2gUOK7G8ze5bMjkdoKpZEro=
Subject key identifier:   6B:EB:99:21:56:71:38:0E:4A:03:89:B1:3D:E7:4E:04:1E:F8:4E:E8
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EA79A5E647D8274616BF285C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        67.217.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:5e:64:7d:82:74:61:6b:f2:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7cc1c625-d748-4fe7-a922-780ca4ae41a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:82:ec:b7:d2:44:2b:90:83:d3:d5:e1:61:
                    8c:57:eb:aa:fe:05:8f:c2:af:4b:4e:5c:79:ac:53:
                    1f:54:be:a3:31:e2:08:4a:57:05:e4:43:6c:db:46:
                    16:00:54:8c:aa:f3:fd:a5:8d:16:60:76:0d:02:12:
                    5f:63:c1:ea:75:61:85:9c:07:87:8f:d4:0d:63:7c:
                    bb:92:e9:ec:e8:27:41:ae:91:ec:d0:9c:c0:fa:98:
                    44:5b:9e:4c:d9:97:7c:55:b9:80:38:31:ab:37:fa:
                    13:f0:dc:22:db:dc:a6:49:9d:96:c1:a6:9f:c1:1f:
                    f1:86:d1:a0:f9:d7:f8:dd:fa:a2:d1:ab:d0:b1:32:
                    55:d1:66:df:70:3e:20:b5:b0:0f:9c:9a:3c:bc:ce:
                    c9:26:fd:39:44:58:04:e4:8a:c9:a1:1f:59:50:3c:
                    72:af:d1:42:05:75:40:41:85:0d:ce:6e:ff:6b:5a:
                    f6:5a:f9:a4:3c:a2:66:7c:a2:b4:d4:d7:d1:04:ce:
                    81:e6:98:13:7f:73:d6:98:7b:58:e1:c2:c1:d3:f6:
                    8d:30:cd:01:cc:c7:d8:53:1b:4b:70:3f:28:c2:cd:
                    75:86:f5:f4:05:7a:7e:0a:b0:53:2b:87:5f:78:78:
                    14:62:de:cf:60:1e:8f:5c:70:79:67:bc:38:62:97:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:99:21:56:71:38:0E:4A:03:89:B1:3D:E7:4E:04:1E:F8:4E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cb1dba05-4578-34bd-8538-27f1ec0c698f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:32:af:88:f3:e7:86:fa:47:d9:b5:f3:19:16:73:ad:e1:
         d1:6b:34:ca:b8:39:8c:3e:3f:ff:a5:27:15:56:0a:2b:b2:b6:
         58:25:ff:20:47:62:4e:53:96:32:95:98:3b:2f:76:92:0a:f7:
         05:fe:0a:9d:04:07:26:0a:16:57:32:1a:e0:74:a6:e8:5a:44:
         4d:a9:f4:7a:23:98:d8:22:9e:fd:ea:f3:2b:cb:c9:e8:e8:c0:
         ab:d6:97:7d:2c:3e:a8:57:82:24:70:14:da:60:e7:90:c8:40:
         a0:a3:35:f6:56:e6:25:84:e4:80:d4:2a:fc:82:3b:6b:8c:51:
         29:12:96:41:44:98:09:99:a9:e8:1f:1e:91:a7:5b:06:90:44:
         dc:1f:2c:b6:ae:4a:af:32:ad:0b:6a:a8:3f:5f:76:ce:20:ff:
         ea:ea:f4:ab:4c:a9:cb:a7:7b:1a:ea:fa:0f:de:1f:da:ba:3c:
         cd:83:24:03:54:9e:b2:8f:dd:ff:be:a8:e0:79:c0:5a:40:08:
         a8:79:6b:65:bd:b5:5a:4d:29:fe:0d:a1:b4:85:6b:0d:a7:d1:
         42:56:e4:83:2e:67:ae:40:04:27:6f:ec:a6:f7:5c:91:17:72:
         ce:07:6b:f3:5d:44:53:93:cb:b2:ab:6c:e9:9f:8b:95:91:e2:
         58:69:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:40 2026 by rpki-client