Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa
File:                     08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa (raw, json)
Hash identifier:          a41zPyrtouPXI0xHuAaCLBoFbr4rBa1X/Irxccnah4s=
Subject key identifier:   5F:43:A7:6A:A0:DE:4E:C4:61:5E:41:E6:C7:DF:03:9E:EF:F5:63:05
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA788715E81F9342960E19440
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        68.165.136.0/22 maxlen: 22
                          68.165.212.0/22 maxlen: 22
                          68.165.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:71:5e:81:f9:34:29:60:e1:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c55d80c4-33bd-42a2-981a-ce893bf262d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:7e:de:12:6b:b8:f1:c3:6a:f7:00:ec:5c:
                    c5:d1:d4:43:8d:f9:ef:f4:f0:a1:9c:db:70:ae:93:
                    c3:d2:43:65:05:3e:69:64:6a:bc:84:0b:e2:44:be:
                    c4:9c:11:5b:2b:25:c6:60:72:5a:5e:e8:bb:75:b6:
                    84:49:16:24:11:44:8e:ad:1b:1a:ad:64:d7:e2:c0:
                    d8:a0:4f:d0:04:c3:0e:06:b3:41:06:6e:3c:65:00:
                    26:de:e4:00:b3:e8:e4:75:01:b9:f6:12:c2:76:c7:
                    30:61:17:be:43:fd:be:4f:ba:c7:8c:d4:e3:bb:79:
                    28:eb:7c:a7:85:0f:ed:54:6d:24:b6:2b:c7:51:e5:
                    b9:43:45:ff:0f:6a:b4:45:50:a6:58:24:66:f5:ef:
                    26:68:c0:4e:af:98:99:40:45:7c:d7:0a:9c:d4:a2:
                    37:82:17:20:d4:a8:dc:f4:52:39:87:1a:4b:6c:cb:
                    57:fc:e7:94:f7:0a:94:6f:8b:5b:58:34:83:3a:fa:
                    5a:68:97:eb:22:f5:b9:bc:ec:d7:26:98:07:e1:9d:
                    46:11:91:3d:4c:60:67:e6:48:8d:06:76:4f:87:73:
                    8c:78:75:4c:2c:87:05:8c:24:88:25:f9:8f:54:33:
                    28:f9:bb:8e:dc:7b:81:05:ce:0b:f4:47:9f:32:1a:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:43:A7:6A:A0:DE:4E:C4:61:5E:41:E6:C7:DF:03:9E:EF:F5:63:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/08b6a567-8337-3e4f-8463-60f1a5d7f8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.136.0/22
                  68.165.212.0/22
                  68.165.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:8e:0a:17:74:0d:63:11:3f:50:f6:d8:23:2e:4f:a9:62:
         84:79:09:94:c8:7b:97:67:36:16:37:96:aa:ff:ab:0c:b2:85:
         db:03:67:41:e2:3f:40:60:ab:35:9d:86:3b:2a:ad:b8:97:ae:
         39:a3:d6:47:53:25:87:d3:b0:bd:6a:ce:75:2e:4f:dd:9d:c0:
         d3:c4:8a:9b:22:93:44:06:df:36:52:84:ac:f1:78:c5:bb:29:
         d5:25:68:36:7d:e5:8c:fc:cb:9f:16:7f:96:ae:6b:cc:39:6d:
         74:75:68:30:1b:1c:d1:f9:a8:96:71:ed:2e:c8:6e:ae:cb:cc:
         f1:aa:b4:72:64:be:58:cc:6b:e8:76:66:d1:2a:85:db:03:da:
         be:5f:b5:0f:14:3a:2d:06:19:3f:e7:9d:10:50:68:3d:08:fc:
         8f:13:c9:7b:18:ec:f0:c7:34:d8:52:75:7f:e2:35:e5:2e:cb:
         dc:c9:44:0c:c1:a6:2d:5c:7b:f9:06:e5:51:ce:a2:5c:f1:6d:
         3c:d6:39:77:d6:d8:ff:55:0b:b8:6a:7b:99:cc:0f:51:0f:65:
         eb:1e:be:a7:4b:9b:44:40:de:37:b2:d5:c9:f0:3b:a8:7b:88:
         16:b2:0e:35:ce:d4:11:c4:ab:58:a5:fa:c5:0c:de:97:6a:96:
         5d:b3:b0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:45:49 2026 by rpki-client