Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1baa9724-2120-3977-add8-7e2bd807a0e2.roa
File:                     1baa9724-2120-3977-add8-7e2bd807a0e2.roa (raw, json)
Hash identifier:          jk89smCzq4drqYjHV3MuTiXBHUQEiYp/wdQOkd1z0jA=
Subject key identifier:   E7:94:48:BD:4C:86:C2:BF:5F:04:ED:D9:28:36:09:7D:1B:FE:9D:23
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ED550AC0AB8A8BE13E5CBC100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1baa9724-2120-3977-add8-7e2bd807a0e2.roa
Signing time:             Fri 14 Aug 2026 10:38:14 +0000
ROA not before:           Fri 14 Aug 2026 10:38:14 +0000
ROA not after:            Thu 12 Nov 2026 11:38:14 +0000
asID:                     6079
IP address blocks:        65.86.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:50:ac:0a:b8:a8:be:13:e5:cb:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 14 10:38:14 2026 GMT
            Not After : Nov 12 11:38:14 2026 GMT
        Subject: CN=615c1123-fdaa-4f30-8c40-c767f06ed11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:0d:82:d3:af:05:ca:05:85:b3:ea:70:9d:
                    d8:e2:ed:a4:5d:2a:bd:16:26:7f:4c:36:0e:c3:96:
                    99:aa:1e:eb:08:24:da:b6:f8:56:f3:d7:b5:c0:ab:
                    7f:3d:34:ad:07:08:5c:bf:c3:86:f5:5f:09:a3:e5:
                    e4:8e:3f:1b:92:ab:62:0b:b2:10:c5:cf:da:2b:82:
                    d3:7f:d8:61:af:4b:e6:1f:1d:34:58:ce:89:80:c6:
                    53:a3:ba:23:b0:73:c1:a6:15:55:11:61:24:90:eb:
                    5f:a6:5e:b4:1a:86:d3:97:be:f1:77:27:03:d9:32:
                    03:a6:11:7b:7b:8e:ef:c2:21:7e:a5:e3:19:ae:0a:
                    79:1c:cc:0b:20:e5:0a:4a:35:0d:d7:ff:d2:05:20:
                    09:74:56:41:17:08:f4:46:fa:62:a3:3b:f2:80:3d:
                    c5:cd:b8:0d:56:51:19:31:1e:e9:f8:ef:f1:56:f8:
                    24:3b:c8:46:58:7c:2c:4d:7d:96:f2:80:13:bf:bc:
                    f0:00:cc:64:fe:65:96:0d:e9:31:8a:d3:a8:04:7f:
                    52:df:d5:52:8f:68:6a:8d:28:6e:1e:65:b2:d9:39:
                    65:18:32:03:85:d1:e7:04:a9:7d:86:95:6e:27:2b:
                    14:9e:cd:8a:2b:14:0b:0f:38:38:f0:f8:13:0d:b1:
                    da:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:94:48:BD:4C:86:C2:BF:5F:04:ED:D9:28:36:09:7D:1B:FE:9D:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1baa9724-2120-3977-add8-7e2bd807a0e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:83:27:75:c0:79:d2:d6:cc:e0:16:f0:b3:4b:7b:fc:01:1d:
         04:da:15:1a:60:ab:d8:81:47:21:48:d0:60:1d:83:37:11:92:
         e6:4f:e7:24:bb:cf:5e:bf:c3:d4:b0:43:bf:01:ea:37:65:82:
         36:ef:a6:1b:95:a7:13:0d:61:40:46:21:40:1d:41:75:bd:3b:
         5c:58:02:94:73:64:98:91:20:3a:37:f4:c6:85:22:39:b4:f4:
         5c:78:02:7f:6e:68:ec:7f:62:9e:fb:44:3d:26:f3:3a:f9:3e:
         0d:cd:0a:10:dc:0e:0f:1f:ae:5c:a8:5d:b1:ed:31:9b:2b:f3:
         f9:e2:0b:be:de:5a:5e:74:50:49:d0:2a:61:1d:55:57:f3:c2:
         2b:6c:a0:53:63:6a:6f:a7:dd:3b:25:00:7e:77:1e:f7:c5:cd:
         f4:77:0c:c8:a7:3d:01:55:d4:ec:3f:b0:24:de:04:b6:92:08:
         5f:7f:e9:55:1e:63:36:2d:e2:0f:c5:7f:f6:c0:78:34:c0:1b:
         9e:f2:db:ba:cd:b6:d7:d8:d9:9c:63:d2:8e:23:c8:74:d7:aa:
         24:87:f3:61:7d:03:12:f1:c6:b4:f4:c1:e2:04:38:28:af:f1:
         26:c6:4a:b8:1e:ef:d0:83:cc:68:27:e5:93:da:24:a1:fd:c1:
         c8:3a:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:07 2026 by rpki-client