Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22d30db3-2876-31b0-8a0a-5fbc4b96626d.roa
File:                     22d30db3-2876-31b0-8a0a-5fbc4b96626d.roa (raw, json)
Hash identifier:          v3VQbQepBsDHkzp2DggAK1I6t/rexo2gGPoUDFqv9t8=
Subject key identifier:   26:80:9F:32:7C:D6:3E:97:4B:92:41:86:33:8B:CE:23:86:6B:94:BC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F70882A61F7CA3A99B848AB80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22d30db3-2876-31b0-8a0a-5fbc4b96626d.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     834
IP address blocks:        68.167.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:2a:61:f7:ca:3a:99:b8:48:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=466c232f-9961-4fe4-be0e-13b9e949ee45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cd:5d:a7:26:6d:ba:02:1f:49:87:a0:62:de:
                    a6:08:a4:b4:61:0e:80:62:9f:bf:fc:6b:59:05:75:
                    85:64:2d:30:2c:81:10:39:d2:46:1d:3a:4d:c6:17:
                    8a:ba:83:37:9e:43:de:f8:89:25:dc:18:bd:fa:35:
                    0e:7f:bb:7c:32:f0:27:2e:bc:c0:b0:ed:17:0c:99:
                    fb:f4:53:35:52:83:7d:e6:09:07:cb:80:34:ee:68:
                    f4:5f:64:d4:35:61:f4:46:1b:3e:cb:b4:93:2b:f6:
                    d2:4d:c3:ac:09:1b:73:36:a4:e5:c9:48:72:08:d3:
                    8b:e2:7c:e1:9c:9d:c2:77:85:74:74:bf:e2:20:43:
                    3f:91:0a:49:14:c0:f3:31:4b:63:d7:76:ff:90:26:
                    fd:53:b2:4a:ac:f2:cb:63:c6:2f:00:37:de:b0:39:
                    f7:db:dd:bb:ab:e8:12:e5:8c:6f:44:36:50:e7:df:
                    f2:2f:aa:cc:13:ec:49:96:ce:22:fd:fa:28:ba:8b:
                    3f:c6:b9:cf:bd:50:1c:14:e3:94:05:0a:9c:c8:3b:
                    4c:85:37:a7:d3:df:c9:22:2d:91:bc:21:b7:85:10:
                    87:a9:22:cc:88:2d:5f:c0:98:a7:19:51:c7:aa:35:
                    6f:54:6a:d9:0c:d8:83:f8:d3:a5:3e:54:95:90:95:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:9F:32:7C:D6:3E:97:4B:92:41:86:33:8B:CE:23:86:6B:94:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/22d30db3-2876-31b0-8a0a-5fbc4b96626d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:59:ab:9a:db:be:7c:b8:ef:22:31:da:ab:d5:c6:62:8b:d3:
         35:04:d8:ef:e3:20:09:6d:c5:98:ea:b9:8e:83:5e:f5:11:02:
         bc:e9:31:b9:7a:cd:f4:99:2b:3d:ea:cb:d5:74:64:c2:fa:c4:
         b0:f9:ad:4a:e5:73:ff:68:b4:1b:16:91:06:83:5b:56:ba:a6:
         e4:52:68:11:46:95:73:da:52:a3:96:0e:c3:c4:21:03:5e:10:
         ae:3a:65:33:6d:66:77:98:22:ce:52:52:ba:29:40:d8:0f:21:
         8e:64:a4:1d:eb:de:a4:78:34:03:11:10:e5:c4:7a:a1:bd:bd:
         20:4a:42:19:fb:82:9d:fd:01:fd:ea:b7:92:68:d0:23:4c:97:
         63:18:c4:4d:f5:73:21:40:10:07:42:73:fc:67:d0:fa:63:76:
         bd:70:80:90:bf:9f:66:00:51:16:92:10:b8:63:16:a6:3e:6c:
         ae:5a:a3:f0:31:da:4e:e5:c4:a0:7b:78:19:02:13:61:7c:da:
         da:81:8a:57:47:eb:f0:64:56:88:25:e8:b0:08:4e:8e:96:7b:
         cc:a6:bf:ec:2b:1e:e5:b6:ba:af:7b:f4:33:03:60:f9:c9:3d:
         28:6f:21:db:3c:0e:15:a8:ce:36:18:07:f3:62:8c:16:9d:53:
         f8:3e:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:07:38 2026 by rpki-client