Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5589ab13-e17b-388a-8cba-b5ca8c853bdb.roa
File:                     5589ab13-e17b-388a-8cba-b5ca8c853bdb.roa (raw, json)
Hash identifier:          4JbOmUee6OwnxMdF9xTdyxM6I0pUbuSbbTipfaH6AXA=
Subject key identifier:   19:22:EC:AD:B5:F8:8A:A8:E3:A1:6E:09:64:FC:CB:C2:12:01:6E:2A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E561A1464CF6B0668B20FF900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5589ab13-e17b-388a-8cba-b5ca8c853bdb.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     834
IP address blocks:        68.164.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:14:64:cf:6b:06:68:b2:0f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=ac4d74ed-05cf-42cd-abf2-bc355d92180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:de:f1:67:16:e0:12:a9:7d:38:12:da:83:
                    4c:3a:52:fe:94:d9:d6:ab:a4:90:b1:d9:fb:22:9e:
                    4c:8c:34:e1:0c:01:5e:24:20:60:65:b9:64:16:56:
                    f1:29:9a:1e:7d:3a:87:fe:ec:d4:5f:8b:3b:66:70:
                    98:4b:c4:e9:21:ef:2a:19:8c:0b:32:a1:a9:33:69:
                    32:b9:df:8e:ff:fc:43:70:88:6b:3f:61:f6:ed:07:
                    f8:1c:2d:4c:6f:6e:98:f3:4e:60:a0:c6:14:09:4d:
                    1a:fb:91:73:dc:30:9c:95:fd:a2:13:35:73:47:d4:
                    53:87:8a:fc:64:8e:fd:da:69:cd:3c:5c:de:32:67:
                    25:a9:10:c6:38:7e:86:61:f9:0a:02:cd:90:7f:3f:
                    f3:5c:a1:37:7b:03:69:68:40:4c:c9:5c:84:8d:3b:
                    74:19:8c:37:a8:fe:19:64:fa:68:28:71:b6:d8:50:
                    08:21:22:14:83:54:4a:e0:0c:0e:14:d4:80:6f:e6:
                    dc:11:34:99:b4:dc:f3:35:75:cd:cf:a7:0a:99:9e:
                    4d:84:d7:6f:69:94:2f:5a:b8:23:3a:f7:e4:7b:9f:
                    02:68:0d:f8:95:51:09:e1:c2:20:38:b8:17:5e:95:
                    39:05:3f:0e:52:1c:60:a1:4d:86:91:c1:cc:af:e1:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:22:EC:AD:B5:F8:8A:A8:E3:A1:6E:09:64:FC:CB:C2:12:01:6E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5589ab13-e17b-388a-8cba-b5ca8c853bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:14:7c:d6:ea:d7:37:2f:3a:0a:a2:8f:29:8c:76:f5:a2:9e:
         35:77:8e:11:30:02:24:d3:8d:db:58:e6:50:97:75:26:4e:b0:
         25:4b:75:43:36:ad:87:ce:72:14:72:8f:37:49:20:62:c1:30:
         19:71:e2:cd:30:8d:f0:29:c8:e7:42:ef:9f:42:91:ed:8f:5e:
         ee:db:fd:db:aa:55:10:90:d3:c1:8d:9c:9b:e3:da:42:2f:03:
         96:a1:42:22:5b:ea:5b:f2:ce:ab:63:22:18:4b:02:a8:8d:5a:
         40:ba:90:e5:91:0f:19:03:f6:21:f5:1b:7c:c6:63:a2:6c:b9:
         c5:9f:ff:7d:aa:3a:d3:86:f3:b2:a1:82:39:4d:3b:05:cd:f2:
         9b:9e:e9:6d:b7:5e:7f:7c:a7:25:8e:8d:fe:38:77:f7:1b:fe:
         5d:73:2a:fc:ef:9b:55:5a:a1:43:22:47:f6:ae:a3:50:65:58:
         48:5f:90:e4:08:e4:1e:66:97:80:37:a2:79:05:c6:67:e9:0a:
         53:b7:8f:19:49:f4:e5:ec:1c:85:65:c5:f4:9e:ba:6c:ed:1e:
         c5:91:5a:16:7e:cf:50:f8:44:42:71:f6:92:74:6b:58:b6:63:
         19:11:09:b9:dd:fb:85:86:04:e8:72:16:db:7e:99:93:e7:91:
         6d:db:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:49:37 2026 by rpki-client