Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527fb279-a744-3d3a-844e-eddbab6fe3c1.roa
File:                     527fb279-a744-3d3a-844e-eddbab6fe3c1.roa (raw, json)
Hash identifier:          n7kDSOR77or4iUrd62KrYMyUzvj6yGWBeNcFvTKq6qY=
Subject key identifier:   5C:9E:28:A4:40:C7:0A:68:72:CA:67:C4:57:DB:61:F1:10:A5:71:12
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EEEB75741D007B49A34523980
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527fb279-a744-3d3a-844e-eddbab6fe3c1.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     834
IP address blocks:        68.167.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:57:41:d0:07:b4:9a:34:52:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=aff7a40a-7735-4a80-947a-11f1a4821364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:f0:a8:39:4f:18:6b:51:90:9d:31:91:3f:
                    51:1e:bf:26:bb:c7:ec:cb:69:ce:5b:a3:e1:8a:43:
                    58:41:c0:b2:6a:de:f7:7a:f3:63:fb:d2:59:cf:d2:
                    49:ed:ac:2a:3d:b8:1d:a9:2a:1a:9b:52:89:e4:2a:
                    7a:4d:0b:8e:0f:73:fa:fc:65:da:33:5c:ab:e7:14:
                    53:f3:86:95:aa:cd:93:5f:9b:1d:24:f1:2b:77:f5:
                    69:56:eb:c7:fb:26:98:5f:d4:cb:c1:5e:39:0c:ca:
                    d5:ba:c8:b9:93:36:c6:43:d4:fe:44:95:33:17:aa:
                    66:f3:c0:73:1c:da:da:b9:be:3a:af:6d:d1:f9:71:
                    2b:4f:c4:e7:9b:15:aa:34:94:33:5d:00:1f:12:c0:
                    5d:a2:c4:1c:05:2f:2f:57:4a:0a:70:89:e6:2e:a1:
                    59:4d:04:7b:22:b7:07:1c:e9:8e:1a:56:6f:58:bd:
                    0c:a2:18:12:bc:8a:98:1a:85:3d:9f:7b:7c:2c:8e:
                    8c:72:1b:24:24:df:9a:27:e2:0e:be:33:90:bd:a8:
                    e3:8f:0e:3d:3e:cc:26:da:85:3a:92:09:84:2f:ff:
                    f6:e6:76:ac:c2:16:f6:71:09:30:8c:54:e1:2e:a5:
                    1b:34:89:8f:5c:3d:c6:69:d6:7c:5e:22:a9:a8:6c:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9E:28:A4:40:C7:0A:68:72:CA:67:C4:57:DB:61:F1:10:A5:71:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/527fb279-a744-3d3a-844e-eddbab6fe3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:7c:5f:1c:1d:6a:0f:8c:fa:90:51:3e:81:b4:9c:f0:46:a7:
         15:5a:26:01:20:31:1a:59:b0:89:39:ca:91:29:b7:af:7c:04:
         3b:2a:f2:db:20:e0:1d:5d:68:4e:c0:9d:e3:53:5c:22:ac:04:
         61:a4:86:30:1a:62:be:61:97:02:c7:53:4b:b0:ad:65:05:a9:
         c3:5f:5c:f1:82:0c:9e:6b:e4:df:c4:f4:74:2e:9d:80:f3:5e:
         4c:77:d5:f7:ba:56:6e:51:c5:cd:9a:c5:3f:74:d3:d1:79:08:
         fb:9b:cc:a2:41:e6:e4:f7:da:71:fe:6a:2e:7e:3d:b8:08:0e:
         ad:42:9c:b7:0c:c3:ac:f9:5e:02:db:a6:4d:16:c4:0d:24:55:
         51:af:ac:29:e4:96:67:98:0a:d7:88:fe:6c:13:17:b5:4f:9c:
         7b:bf:96:82:58:0d:7b:d0:d0:f9:b5:28:9b:a0:2f:74:6c:4f:
         27:07:d7:d8:7c:c9:aa:99:77:e6:2a:8c:96:99:49:d5:18:49:
         8c:62:a1:be:f3:e5:ef:22:55:3e:cf:51:a7:3f:99:e8:81:54:
         62:65:32:69:3d:67:af:b2:af:a3:63:95:ca:a8:05:d8:53:95:
         72:d4:92:f0:e5:f6:ba:3e:d2:e6:39:9b:89:f8:7a:0b:a2:2f:
         ca:f8:cc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 15:14:25 2026 by rpki-client