Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/da861254-d5c6-3f2a-a219-3b1c84b0a8b8.roa
File:                     da861254-d5c6-3f2a-a219-3b1c84b0a8b8.roa (raw, json)
Hash identifier:          lH3qzafeaWVz/t9F6hujtLO0Klgp/J7M1KjNJf1MScA=
Subject key identifier:   DE:2F:6F:DA:3A:8E:5B:E9:CC:FD:1D:83:33:C8:3C:D4:A7:CE:8C:80
Certificate issuer:       /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial:       010D0C9F4328584F6C9B615E18AD4AD4D877D440
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/da861254-d5c6-3f2a-a219-3b1c84b0a8b8.roa
Signing time:             Wed 07 Oct 2026 15:15:49 +0000
ROA not before:           Wed 07 Oct 2026 15:15:49 +0000
ROA not after:            Tue 05 Jan 2027 16:15:49 +0000
asID:                     16399
IP address blocks:        168.93.64.0/18 maxlen: 18
                          168.93.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:9b:61:5e:18:ad:4a:d4:d8:77:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
        Validity
            Not Before: Oct  7 15:15:49 2026 GMT
            Not After : Jan  5 16:15:49 2027 GMT
        Subject: CN=4419e9b7-9982-41c8-83e3-9eb0c77b6c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:e7:d0:c4:5b:ca:14:a1:5c:d3:04:7a:aa:
                    8a:03:c8:60:9c:04:e2:43:00:04:3c:6d:59:b3:ee:
                    6b:90:ab:b1:ec:0a:4e:a7:d2:4e:7b:b9:66:7c:8f:
                    2a:23:7e:73:82:c4:5f:53:55:c3:2d:15:88:49:bd:
                    31:f7:72:94:03:6b:01:8d:09:2e:84:dc:df:48:7f:
                    13:26:c4:4f:c3:8c:de:c2:52:6c:0c:7a:c0:14:65:
                    b2:95:23:27:ba:42:bd:d5:47:ae:7a:99:56:be:e2:
                    f4:2b:86:40:22:33:f9:cd:20:cb:fa:27:a2:5b:3f:
                    da:d0:25:16:66:21:59:61:5b:ba:0c:a1:80:e9:5e:
                    31:58:a1:57:38:bd:03:03:83:f7:4a:73:dd:c4:4f:
                    f8:df:76:84:30:bb:ff:1c:6a:dd:22:fd:6e:43:8a:
                    86:af:07:da:c0:48:ba:44:9d:0f:9c:96:92:2c:2a:
                    7f:b7:51:02:04:95:43:e9:14:e5:28:4f:77:9d:ef:
                    27:de:bc:74:d0:b6:da:0a:1e:a6:83:67:60:87:ab:
                    d1:e3:43:2b:97:f4:90:ec:76:68:9e:6f:db:58:4c:
                    da:83:a7:d8:1c:f4:08:96:ca:78:7f:60:08:72:8a:
                    0d:e8:66:af:e7:ec:8a:d2:f7:a5:9f:c9:52:a2:a0:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:6F:DA:3A:8E:5B:E9:CC:FD:1D:83:33:C8:3C:D4:A7:CE:8C:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/da861254-d5c6-3f2a-a219-3b1c84b0a8b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl

            X509v3 Authority Key Identifier:
                keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.64.0-168.93.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:ae:ec:6f:aa:d0:cd:6f:bb:82:e6:9c:9d:60:f3:87:0c:
         f0:5f:73:6b:0a:e6:69:9f:03:04:9a:d9:46:96:88:bf:03:14:
         17:a3:0c:ca:9d:3a:c4:b6:03:ad:ea:c3:d5:86:7e:1f:77:4e:
         0c:62:bd:93:2d:ca:12:b7:b9:e2:02:29:1c:64:0e:97:60:3a:
         e3:6e:95:91:ed:99:8d:b2:55:92:34:83:af:8c:e8:41:5f:dd:
         be:ce:b8:10:92:d2:88:25:18:75:5d:d7:c2:c6:fa:c3:af:da:
         05:31:12:a0:78:af:ea:9b:47:70:db:6c:cf:e6:90:a6:3c:b7:
         03:e7:d0:2f:4a:90:00:a1:b4:3c:0c:1b:0d:66:53:6e:1f:9a:
         97:89:3b:ef:d2:0e:f3:09:ea:ae:f3:14:ff:2c:3e:70:a6:a1:
         b1:42:d5:96:9c:44:82:a4:23:90:dd:7a:fc:7f:93:61:c7:60:
         f4:a3:a7:7a:3f:b7:85:07:2a:34:88:51:43:e8:8f:a1:db:fe:
         83:42:db:81:c4:b8:a1:e9:53:7f:49:9c:7d:b9:2a:82:4b:8a:
         95:69:d1:41:e7:3c:56:7e:2d:39:64:f6:37:90:c6:0b:ef:9b:
         79:5d:4e:3c:54:b1:6d:54:e0:26:70:93:92:f2:48:a1:22:d3:
         3a:93:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:08:13 2026 by rpki-client