Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa
File:                     6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa (raw, json)
Hash identifier:          I7a3EP7BcVWHDNF6WHujLK7ziaxv+I2FelKf7PbZfUc=
Subject key identifier:   DD:21:EC:0C:8F:53:39:93:69:67:B2:DD:71:78:60:F7:E4:A6:67:D3
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584D65150686569313C46F008900
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        192.184.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:06:86:56:93:13:c4:6f:00:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=f8d5fa2d-19b7-432a-bbcf-cd309da8ebcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1b:d9:38:d6:50:b6:6d:78:54:70:57:0d:7d:
                    61:2d:da:be:56:11:74:b6:0a:8b:80:d4:cf:ee:e0:
                    33:8e:5b:9f:be:fa:37:7a:e9:b4:4c:87:76:4e:88:
                    07:6c:d8:c6:a8:cf:e8:0c:36:c5:7f:11:62:d5:9e:
                    6b:66:cc:1f:9f:e0:87:fd:43:77:76:a8:ed:09:b9:
                    02:70:0f:02:f1:8a:1a:e2:d3:3c:13:66:4d:38:96:
                    c2:90:fc:cf:83:ae:16:cd:76:de:22:b9:42:0a:28:
                    ac:c3:6a:57:a7:80:dc:00:e2:c4:53:65:1c:48:39:
                    96:40:99:fc:93:01:31:b8:98:37:9b:bc:bf:58:ee:
                    07:b7:64:89:52:26:5d:9a:ae:b2:87:bd:44:0c:d9:
                    9b:a0:12:4f:ce:38:a4:7a:7b:37:e4:9d:45:08:b6:
                    09:60:38:85:bd:29:92:a7:89:72:83:29:ff:39:e7:
                    9f:3e:f4:4e:b1:32:eb:b2:b7:f0:8e:04:41:31:6f:
                    7b:33:8d:c0:18:82:61:da:37:36:1d:12:1b:72:03:
                    47:51:ca:17:ca:b0:1b:16:5e:9a:8e:e9:e2:fe:7c:
                    2b:09:ea:00:7c:e8:e5:6c:92:0f:d5:c5:f0:68:01:
                    15:18:55:ac:e3:92:4c:c7:8a:a2:ae:46:fd:b9:42:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:EC:0C:8F:53:39:93:69:67:B2:DD:71:78:60:F7:E4:A6:67:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/6b65c60e-c200-3d1a-a0ad-703f5efe65fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:86:a1:fd:57:47:09:5c:af:d4:3a:c0:c6:f1:48:45:59:
         3d:00:07:76:1f:52:16:15:bf:cf:11:f6:8b:fa:fb:42:6c:d9:
         85:27:fd:f9:7f:6e:4e:0d:8c:a7:9e:21:6e:bd:29:54:ce:c4:
         c7:59:62:64:8a:d9:47:84:50:82:9d:ad:85:90:92:30:c6:20:
         97:0e:88:f9:77:3e:90:27:e4:49:42:be:e3:b5:67:e4:d6:28:
         3d:d1:77:7e:3e:df:55:6d:76:5b:68:70:35:c5:8a:7f:7c:b8:
         7f:e5:ce:39:68:72:be:0f:aa:4e:ba:9a:38:7b:83:5b:57:24:
         96:61:98:ba:47:a9:82:8d:c4:72:bf:e2:b4:ec:50:c8:17:c3:
         1a:bd:2a:53:03:f2:10:80:9d:4f:94:66:ba:7a:5a:60:30:ea:
         7f:65:b9:d4:d7:a1:08:69:d3:94:72:42:c7:33:c7:6c:13:db:
         04:0f:dd:01:5c:81:31:a2:dd:3d:4d:a4:eb:a5:13:10:58:ec:
         ff:84:00:fb:7b:0c:2c:44:6d:86:7a:19:5e:48:fa:f8:bc:b2:
         5e:54:10:56:57:13:14:36:db:f7:8b:19:a9:63:83:81:b3:aa:
         5a:dc:82:df:de:25:3e:8e:c2:18:c9:be:5d:e5:08:9a:fd:a1:
         cc:f0:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:44 2026 by rpki-client