Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2051635d-5ba8-340e-be25-d100ab3d2962.roa
File:                     2051635d-5ba8-340e-be25-d100ab3d2962.roa (raw, json)
Hash identifier:          49iOz229qcVt+Vt/v6BvRjkm88eMyxnkiR9pcShDVmk=
Subject key identifier:   1A:4F:60:FC:F8:E3:B5:78:AB:EA:58:1A:1E:EE:F7:46:00:5C:B5:CE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE2F5F208EBBC929BB6EB5600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2051635d-5ba8-340e-be25-d100ab3d2962.roa
Signing time:             Wed 19 Aug 2026 07:56:45 +0000
ROA not before:           Wed 19 Aug 2026 07:56:45 +0000
ROA not after:            Tue 17 Nov 2026 08:56:45 +0000
asID:                     401362
IP address blocks:        68.166.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:f5:f2:08:eb:bc:92:9b:b6:eb:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 19 07:56:45 2026 GMT
            Not After : Nov 17 08:56:45 2026 GMT
        Subject: CN=6749a71f-164c-476e-9d15-78939aab18b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:58:12:81:32:2b:70:82:bf:02:a9:20:bf:
                    48:56:e5:cf:1e:f9:78:1c:73:99:cf:44:56:82:fd:
                    0a:48:fb:d4:67:83:63:d9:cb:ba:42:e8:4b:6e:f8:
                    a9:f9:8d:5e:da:ea:15:22:06:3f:77:dc:51:e8:3f:
                    0b:df:9d:d8:3c:83:0d:42:8c:dc:1b:3d:9a:de:b4:
                    44:90:ca:e6:95:71:41:1c:8e:a5:7f:8f:cd:24:33:
                    3c:e6:08:7f:15:2b:1e:68:c7:95:3e:33:21:69:2c:
                    a6:5b:77:e5:ab:08:0e:35:85:e7:c5:8c:7a:1d:3f:
                    6d:66:c8:8e:ff:db:34:28:c7:e1:96:3f:81:19:58:
                    7c:4d:d2:68:78:58:a3:08:29:da:a0:b3:0e:f5:37:
                    e6:5e:a7:f6:4a:5a:72:1a:99:dd:2d:08:30:b0:8c:
                    42:84:ce:be:90:ac:47:0f:44:f5:57:bb:91:01:8b:
                    69:22:72:29:f3:a9:67:a2:a8:16:d0:32:70:ac:e0:
                    a9:38:28:74:4c:1c:e2:0b:a5:0d:1e:b0:84:29:55:
                    c3:1d:97:d7:22:ef:9e:13:45:73:9f:25:7c:a7:f1:
                    ec:53:f1:e8:ef:1a:4f:10:9b:33:d8:6e:0b:5c:91:
                    b4:2a:eb:24:b3:f5:0c:9b:63:1c:2b:fb:08:15:ae:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:60:FC:F8:E3:B5:78:AB:EA:58:1A:1E:EE:F7:46:00:5C:B5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2051635d-5ba8-340e-be25-d100ab3d2962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.166.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:88:0a:bf:04:47:e3:6e:8a:9c:b1:e8:55:b9:1e:3e:ea:
         1f:86:06:68:25:87:9f:2a:36:67:b1:e5:82:27:be:ba:90:72:
         de:9a:2d:68:41:4f:e6:b4:f0:76:ec:97:a0:a0:21:8a:4b:3f:
         3d:1e:57:1e:e5:ad:9a:a3:11:0c:89:6d:e8:22:8c:0a:0d:36:
         fa:9a:56:bc:9a:f0:c6:12:0f:d5:37:64:d8:41:32:39:2c:80:
         58:c5:d8:f4:92:34:c3:65:85:32:40:c4:17:e5:75:dd:49:56:
         25:5a:1e:ef:c1:30:6e:94:02:61:36:3e:b0:64:b9:94:d9:05:
         f8:e1:75:75:96:0a:d0:9a:9c:6e:80:b9:e3:fe:78:11:7d:4f:
         b5:33:d7:6e:9d:ec:70:cf:bc:89:44:c0:82:25:91:69:e1:00:
         21:e4:63:31:76:a0:dc:89:14:a0:26:4c:e9:d5:88:7e:28:b2:
         5c:60:37:56:58:8b:76:03:2d:f4:ae:99:75:99:a4:48:d5:e5:
         24:8b:d3:af:55:ed:2f:09:80:e3:de:27:38:84:02:de:4f:d4:
         93:7a:76:11:f5:7f:ff:82:61:02:7a:8d:03:ff:a8:85:4b:79:
         87:1d:d3:1c:e0:bc:1a:83:91:59:51:a2:2c:1a:da:a4:20:87:
         5d:79:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:50 2026 by rpki-client