Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33c42892-fa25-3849-83ae-267a51f0ded0.roa
File:                     33c42892-fa25-3849-83ae-267a51f0ded0.roa (raw, json)
Hash identifier:          vnNH7n5eI3L12Th+inQ0ywczfVqGEOnMgp9eaZqDFkM=
Subject key identifier:   0B:71:C2:0F:87:84:88:BA:AF:FE:BB:AC:0F:F5:D9:65:6F:36:59:73
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE921F66BD949546DC709BA60
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33c42892-fa25-3849-83ae-267a51f0ded0.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     834
IP address blocks:        68.165.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f6:6b:d9:49:54:6d:c7:09:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=08769f1f-a441-46f3-bda7-48a9c6e135e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:2f:3d:88:f7:d6:17:42:7b:58:1b:f4:89:
                    ca:fc:f4:4f:17:88:25:86:11:a6:1e:f6:09:87:c8:
                    a8:d6:9f:eb:91:8f:1d:0f:c9:2a:b7:29:57:87:51:
                    2c:ae:52:e9:24:e5:da:5c:35:81:c3:db:76:70:84:
                    94:e0:df:c3:91:1f:96:4e:56:ef:fd:c1:54:fc:5d:
                    c4:50:38:92:94:e1:de:dd:a5:64:80:61:c8:f5:a5:
                    77:a5:92:e3:66:b8:7f:90:cc:be:0f:ae:8c:44:38:
                    34:e8:0a:e7:82:e7:06:40:64:cf:6a:be:bc:84:ed:
                    ed:df:9d:a4:e5:1e:69:95:8b:b4:32:29:6f:a6:11:
                    c5:f3:89:ef:9b:07:2e:d4:b9:b9:df:36:c3:8b:18:
                    92:b8:97:c6:92:73:cc:15:13:e3:69:42:5f:54:c9:
                    f6:d5:84:9f:0d:af:96:24:b8:ec:e3:80:a8:f0:b9:
                    06:41:3e:3a:e8:c2:8c:46:a6:81:a9:d9:98:fd:db:
                    98:8c:df:2d:84:4b:1e:39:80:02:73:fc:9a:e1:1f:
                    09:a1:b2:2c:20:b4:93:a4:7e:b1:df:57:20:40:2d:
                    c6:f5:a8:99:c3:46:db:21:7a:db:c2:32:79:7d:81:
                    46:ef:0e:d3:f9:cf:95:17:62:b6:b8:e3:f1:99:e7:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:71:C2:0F:87:84:88:BA:AF:FE:BB:AC:0F:F5:D9:65:6F:36:59:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/33c42892-fa25-3849-83ae-267a51f0ded0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:b1:18:25:5b:f6:cb:86:0e:20:6d:d0:49:95:72:83:0d:
         4c:38:bc:7b:36:ef:ac:df:e2:3b:30:12:83:15:c7:a1:20:04:
         b7:a0:17:a6:0b:7c:74:60:4f:7e:a9:63:ee:76:e0:e1:19:73:
         ef:52:58:d7:d8:41:40:19:33:50:f4:eb:c4:52:1c:33:d1:fc:
         d9:6b:1f:7e:77:33:31:43:a1:bd:b9:a5:96:0f:0b:6b:0a:5f:
         50:6b:d3:15:2e:e7:f8:98:24:e1:df:80:b6:c0:89:12:fb:cd:
         5d:cd:6a:26:65:ad:09:29:97:f3:b4:0f:e6:41:5d:dd:80:ea:
         57:be:59:34:fc:3c:30:a9:cf:1f:71:d1:c4:21:e2:21:43:b0:
         33:33:dc:c2:78:67:ae:86:98:a1:f0:4e:66:7e:f0:62:25:46:
         c5:12:7a:76:49:6e:83:bb:e0:e4:48:36:51:89:f9:58:69:70:
         ff:a8:1a:24:c3:bd:d4:d9:e1:b4:7c:77:5a:10:d6:a1:5b:98:
         fe:d7:a2:ba:ff:08:a5:32:a4:9b:d3:e4:c2:b6:5a:bb:45:56:
         ab:20:80:94:41:f7:31:fa:ef:89:74:17:c4:68:a8:96:f1:17:
         c5:31:0e:27:78:7e:95:94:9d:eb:d0:2d:94:e1:c7:3c:07:b7:
         23:2d:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:53:44 2026 by rpki-client