Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18f25fec-0bab-3a4d-b258-41278b49d226.roa
File:                     18f25fec-0bab-3a4d-b258-41278b49d226.roa (raw, json)
Hash identifier:          UXKm+RwIVT/MQV3ki8MrKB9XLnq8FP3UNQe6OnjyhDs=
Subject key identifier:   B6:C1:59:C7:44:92:54:E2:94:12:75:59:2A:8C:67:F3:8A:05:C1:B0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E5D17DC20CAC3FE8005955200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18f25fec-0bab-3a4d-b258-41278b49d226.roa
Signing time:             Thu 02 Jul 2026 09:06:46 +0000
ROA not before:           Thu 02 Jul 2026 09:06:46 +0000
ROA not after:            Wed 30 Sep 2026 09:06:46 +0000
asID:                     834
IP address blocks:        68.167.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:17:dc:20:ca:c3:fe:80:05:95:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  2 09:06:46 2026 GMT
            Not After : Sep 30 09:06:46 2026 GMT
        Subject: CN=200a4924-bae8-4cfc-9051-f0fae2eeca25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:7e:4c:99:c0:c7:8b:58:7e:dc:75:29:ca:
                    76:d8:f2:6e:ec:5b:94:2c:76:c0:f9:c0:5b:06:c6:
                    61:24:46:e7:a9:e3:e6:57:41:11:5b:95:ad:7f:8c:
                    25:69:84:5a:6f:e1:fa:bd:9f:81:75:3a:9f:4f:a7:
                    1d:c6:e9:eb:29:51:99:b9:ec:da:53:3e:c3:8f:3f:
                    4a:f1:53:6f:69:5a:a6:e6:6d:28:75:86:54:fa:06:
                    ca:0d:d2:4a:cf:f1:55:12:95:6d:2b:89:a3:32:28:
                    62:63:eb:8a:d1:f4:9e:57:93:02:47:04:e5:d3:e6:
                    1c:0b:f3:a9:31:cf:5a:02:4f:f4:6e:fc:a2:fd:86:
                    bd:e3:a3:da:a4:93:b8:5c:bd:7c:89:4d:56:fd:b6:
                    7d:95:4c:62:0c:81:1a:27:59:06:b9:c7:43:93:8d:
                    b2:4d:43:bc:27:0b:26:4e:a1:bf:ad:02:7d:ee:70:
                    0e:6e:2c:c5:9b:d3:65:c5:91:d3:78:aa:63:27:18:
                    ae:04:fb:88:6e:24:4f:a6:bb:d8:28:c4:85:31:d3:
                    c2:76:3c:ef:ca:b4:d2:5e:d1:06:23:c1:40:e7:e5:
                    1a:7b:2a:1f:59:e8:bd:0f:8e:6c:2e:28:06:25:c4:
                    46:1e:14:d9:c2:a5:76:25:a8:69:84:56:89:3a:64:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:59:C7:44:92:54:E2:94:12:75:59:2A:8C:67:F3:8A:05:C1:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/18f25fec-0bab-3a4d-b258-41278b49d226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:c1:57:39:44:f8:bd:44:89:92:1a:5c:c9:04:32:48:74:
         48:ef:5e:02:93:9f:1c:e3:1c:02:64:a4:f9:b8:77:04:36:71:
         e9:0d:49:49:fc:ea:28:9d:8c:cf:e9:fc:73:10:9d:a6:de:b1:
         bf:de:ff:96:b0:78:93:f1:d6:65:3e:64:9d:f2:30:c1:9d:65:
         0e:68:12:a5:4e:77:76:65:b1:33:3a:cf:16:3d:03:01:7f:75:
         7b:11:36:2d:21:d0:7a:9a:42:c9:44:df:55:bd:4a:a3:8a:c3:
         1f:d6:2f:8a:eb:93:1a:1a:bb:33:0a:a8:3d:3e:7a:ca:29:fb:
         64:41:a8:32:cc:69:3f:60:e4:a9:22:0e:4a:66:dc:91:03:5b:
         31:1f:b2:5e:13:22:fa:b3:d2:45:20:ba:54:5e:b1:ae:b8:33:
         a6:77:dd:97:db:1b:01:f2:c4:14:e9:c1:ef:73:56:2d:7e:3e:
         32:e2:e6:5f:a1:81:74:0d:4a:a7:08:d9:04:62:36:f6:8f:ae:
         77:e1:ec:99:f2:12:3c:45:b4:75:2c:6b:c0:49:4b:a0:b1:46:
         1a:8a:8d:22:50:57:7d:2d:c5:1f:d9:fa:e7:dc:9b:c5:fc:fb:
         99:38:27:56:e8:5a:7d:dc:af:8f:9a:ad:80:78:19:f1:c4:57:
         9e:84:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:48:22 2026 by rpki-client