Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f5e346d-005f-35b5-a1a2-8c30699593c2.roa
File:                     4f5e346d-005f-35b5-a1a2-8c30699593c2.roa (raw, json)
Hash identifier:          StmiUZ4VZ0PyueKaEFoaSGhg7KtyQfE91S+fxQmBAp8=
Subject key identifier:   42:43:E8:3C:3B:5F:C3:01:86:BB:B7:B3:11:9B:81:C1:3C:A5:35:C1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F04ACB6ECC659FDAFE91AE900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f5e346d-005f-35b5-a1a2-8c30699593c2.roa
Signing time:             Mon 31 Aug 2026 09:46:41 +0000
ROA not before:           Mon 31 Aug 2026 09:46:41 +0000
ROA not after:            Sun 29 Nov 2026 10:46:41 +0000
asID:                     401362
IP address blocks:        68.166.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:04:ac:b6:ec:c6:59:fd:af:e9:1a:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 31 09:46:41 2026 GMT
            Not After : Nov 29 10:46:41 2026 GMT
        Subject: CN=ceb33c15-6b61-4ecb-92e4-8f56518c87ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:7f:2b:20:15:f5:35:a7:d8:a6:6a:5a:c2:
                    3b:e4:a2:ff:85:1e:bd:68:04:d9:3b:11:b5:5e:e7:
                    e0:2a:86:04:2e:f7:e7:a8:fe:e4:d5:a2:d9:2f:18:
                    86:67:36:20:84:a6:12:96:69:00:dc:47:cd:08:16:
                    2d:79:ee:59:66:3f:dc:6b:ce:3f:9b:26:7b:d0:3f:
                    fa:30:94:76:fe:26:85:1d:6b:4b:70:e0:4f:fe:65:
                    81:1b:aa:12:87:90:12:20:73:8d:a9:15:c6:eb:2d:
                    48:7b:87:be:1f:72:c3:6a:1f:a6:50:dd:ec:f7:ae:
                    50:f9:6a:2a:c1:db:2d:2f:2a:bf:45:09:d7:17:5e:
                    90:d6:37:41:fe:a1:7a:bb:83:34:ef:22:c7:08:3b:
                    12:fc:57:40:b5:5a:e6:63:6a:a5:7d:75:71:8b:e0:
                    82:e3:71:2c:10:8f:15:a1:a4:b2:b0:2a:e5:c1:6f:
                    ce:f5:52:69:eb:37:ef:cd:bb:73:99:cc:70:d2:12:
                    04:67:25:a1:c2:09:cd:23:36:90:79:06:e7:bb:3d:
                    ad:a6:a5:e0:6a:08:68:1c:aa:21:fb:ed:b0:c0:da:
                    68:6b:7a:6e:b9:d2:ee:29:1c:ee:5e:cd:41:60:e0:
                    a2:00:8d:0c:3a:9f:27:38:f0:53:99:e0:e6:bf:6b:
                    f9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:43:E8:3C:3B:5F:C3:01:86:BB:B7:B3:11:9B:81:C1:3C:A5:35:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4f5e346d-005f-35b5-a1a2-8c30699593c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.166.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:fb:80:62:5d:75:cf:b1:30:fc:ba:18:88:6c:c2:1c:5e:
         f4:c9:6b:a9:47:7c:1d:3d:b4:8e:bc:8f:a9:07:d1:96:bc:05:
         4d:ab:8d:4a:18:4d:c1:bf:5f:d4:f5:79:61:89:6b:0f:d1:25:
         48:a8:0b:ed:c9:ec:22:e0:4b:33:78:73:81:12:ba:cd:26:d6:
         a5:9f:2a:39:78:b2:3c:6a:13:f1:42:19:a6:bc:ae:ea:f7:b4:
         21:77:bc:d6:ed:20:e1:90:cb:5b:83:77:12:29:58:9f:3a:e4:
         d2:6a:e3:ce:0d:c7:00:0b:ba:7a:2a:62:67:d4:4e:82:9b:e2:
         99:02:87:ef:3c:c2:03:39:6a:c0:d3:03:b2:81:68:d3:80:06:
         09:d4:c1:6e:61:c3:ee:51:ce:f6:73:5e:af:17:e7:9c:f4:43:
         06:41:ef:87:8a:c4:05:cc:9f:15:c0:7a:ce:09:2d:91:ae:b2:
         d8:8f:42:ad:db:6e:c5:24:01:f8:21:70:28:69:8a:1a:1e:63:
         bc:8b:11:f2:dd:96:2c:c9:b9:52:6d:36:9b:6b:81:00:70:b7:
         6f:ec:6c:09:79:a9:7d:e4:6e:cb:ed:26:de:2b:7d:2f:51:dd:
         9d:44:ff:f4:90:78:c8:6a:d5:4b:04:f9:1d:ab:7c:ea:1c:77:
         62:bc:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:00:32 2026 by rpki-client