Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2dd12ab8-ff01-300f-ac9a-00f936ab3ecf.roa
File:                     2dd12ab8-ff01-300f-ac9a-00f936ab3ecf.roa (raw, json)
Hash identifier:          W8ggHQew5VniV2HrVQydOG6aiTF/GqlheULt+CX4z3s=
Subject key identifier:   CB:57:89:1A:D6:7B:6B:27:05:2D:82:22:ED:18:54:BD:F2:D6:57:F8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE921F3FB5A2411931FFB63A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2dd12ab8-ff01-300f-ac9a-00f936ab3ecf.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     834
IP address blocks:        68.165.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f3:fb:5a:24:11:93:1f:fb:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=0223f0fb-1b8d-47fa-bc82-5f5f3d0f10b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:99:a1:4e:64:58:d0:f2:67:1e:7e:12:30:35:
                    64:fc:bb:0f:2a:2a:49:bc:04:7d:d6:9c:09:c7:2d:
                    59:1b:c1:02:3b:92:40:76:7c:41:d3:bd:a3:eb:87:
                    0c:46:f7:b7:96:bd:04:e9:2d:0f:8f:1a:8a:41:07:
                    77:6a:34:59:2e:db:aa:14:92:12:3c:30:19:15:6c:
                    7b:47:08:c1:ef:ba:dd:9e:de:1f:3e:d1:31:d1:a8:
                    21:23:83:f6:de:83:01:31:b6:cd:6d:db:61:7e:68:
                    03:79:7f:e9:87:25:c5:5b:0d:2a:b5:9a:5b:83:94:
                    ad:e3:ee:b7:6c:31:3e:ab:69:17:8c:31:ee:e4:3d:
                    9d:dc:0d:40:d4:d6:9e:57:e5:c2:81:0c:67:5b:4d:
                    a0:ab:4b:67:2d:f4:84:d4:75:d7:09:55:6f:01:bf:
                    8f:28:45:02:ad:85:25:2d:ec:2a:a8:f5:eb:de:7f:
                    e3:4c:32:79:6f:13:d1:12:e9:23:6b:ef:0f:e4:85:
                    bf:1d:2a:78:7a:39:77:90:5d:57:4d:00:b0:ec:a1:
                    61:6d:17:e5:ff:eb:37:35:dd:ff:ed:3a:9a:9e:57:
                    c5:67:5a:30:e9:b1:04:d0:b9:b0:d1:bb:17:91:52:
                    b5:bb:76:c4:23:c2:11:7e:c4:06:cf:96:9c:45:67:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:57:89:1A:D6:7B:6B:27:05:2D:82:22:ED:18:54:BD:F2:D6:57:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2dd12ab8-ff01-300f-ac9a-00f936ab3ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a9:4e:d9:cf:be:a0:ca:a7:19:31:f7:59:39:4c:0b:a3:f3:
         9c:06:bf:d2:fa:9d:0d:ba:c7:31:2b:78:20:58:02:d6:5e:9b:
         14:7c:1b:00:cf:c7:08:65:ea:cb:0c:ac:bb:9c:25:ae:03:0a:
         f3:b9:72:05:66:6c:59:43:bf:fe:7a:64:10:0c:17:04:6f:33:
         93:c9:09:f3:7f:77:52:b2:0a:4e:8a:91:dc:73:50:be:f0:68:
         4c:33:d7:ea:8f:c4:a8:16:b0:38:34:32:43:8e:c7:0b:b2:2d:
         26:22:87:e3:e4:39:50:d7:07:70:f1:87:8d:45:3b:01:35:5e:
         0c:b4:69:17:5e:c6:3c:92:9b:ea:cc:f0:9e:4b:38:cf:8a:4b:
         35:8b:1c:5a:dd:c7:1d:d1:7d:5f:a2:af:60:78:e3:61:4e:40:
         69:2d:21:86:ed:6a:37:69:8e:e5:40:e2:94:d6:d4:94:4c:db:
         4d:81:69:77:08:24:b2:c0:4d:8f:7c:d5:5d:e8:5d:c9:a7:6b:
         69:82:2f:f8:a7:ee:fc:3f:c3:b8:b1:60:fa:6f:bd:65:72:40:
         a5:eb:5b:cf:24:40:e2:da:56:27:e9:ae:82:a9:ab:c8:5d:b4:
         12:ef:39:b1:09:37:45:a1:6b:fa:6a:cb:1e:a8:6f:21:fc:00:
         77:9b:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:45:30 2026 by rpki-client