Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b19431e-6105-373a-834c-39a20ce55bd6.roa
File:                     6b19431e-6105-373a-834c-39a20ce55bd6.roa (raw, json)
Hash identifier:          1IB0onYddpiHP8ChMgMoEIo8JnaV/Xx/5A2sn2epl0c=
Subject key identifier:   98:72:4D:2D:F1:33:70:B5:24:41:EA:BB:FD:14:FA:CC:FE:E3:5F:CF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F8F817A4851DB4CE8A5FA9720
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b19431e-6105-373a-834c-39a20ce55bd6.roa
Signing time:             Tue 20 Oct 2026 03:16:56 +0000
ROA not before:           Tue 20 Oct 2026 03:16:56 +0000
ROA not after:            Mon 18 Jan 2027 04:16:56 +0000
asID:                     219047
IP address blocks:        68.164.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:81:7a:48:51:db:4c:e8:a5:fa:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 20 03:16:56 2026 GMT
            Not After : Jan 18 04:16:56 2027 GMT
        Subject: CN=0b4b8036-b7af-4d01-a606-23062fc1452c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:f8:62:4b:7b:7e:54:75:fd:30:e7:06:81:
                    79:d5:a4:e0:09:85:97:b6:98:f9:ef:60:0c:04:26:
                    64:e2:6b:e0:92:5a:4b:b7:b1:3c:98:0b:6b:b7:c8:
                    97:25:90:a1:5f:7a:26:eb:9e:2b:35:ab:79:14:1b:
                    5f:2d:ad:6e:3c:b2:b1:4c:83:a8:99:5e:c5:f0:32:
                    b6:91:cb:85:f4:d6:80:2e:92:a2:28:a1:90:01:84:
                    c4:0e:24:22:4e:71:21:ca:0f:79:82:3a:1c:19:50:
                    1b:40:94:0c:f7:9e:f9:32:26:93:0d:3a:03:fc:70:
                    b5:e4:09:b9:d8:c4:bc:6f:9d:08:7b:1b:c6:a3:96:
                    a8:12:fe:d5:00:83:01:36:2d:f2:dc:85:26:21:7f:
                    bb:7e:61:48:c1:91:d1:5f:22:23:64:5a:b3:20:15:
                    65:d5:e4:e7:12:94:e4:89:79:b8:d1:e0:10:4e:39:
                    f6:4e:7e:4b:23:1c:ee:93:c5:ba:24:fc:25:ef:df:
                    9c:9c:34:b5:ac:c7:e3:43:e4:37:99:b1:20:95:aa:
                    a8:8a:bd:06:36:fa:b4:a4:53:29:71:04:99:e0:5f:
                    b1:06:be:fe:d3:ef:7e:fa:8f:ce:2f:fd:9c:13:05:
                    57:99:ec:11:1f:07:db:6f:a8:4c:ee:4a:ce:e7:56:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:4D:2D:F1:33:70:B5:24:41:EA:BB:FD:14:FA:CC:FE:E3:5F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6b19431e-6105-373a-834c-39a20ce55bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:0f:54:66:6e:e6:fe:af:9d:8c:58:63:23:d6:9d:73:2e:
         42:ae:c5:dd:a3:1c:81:ff:a9:6e:eb:e7:dd:fe:64:ca:9d:ee:
         f0:8a:19:e0:dd:00:0c:56:31:b2:94:d6:e2:38:ac:94:5c:0f:
         d5:c1:66:ef:5e:31:67:06:0a:bd:2b:22:c1:39:ba:91:77:69:
         1c:cf:b6:eb:82:ef:3d:eb:e9:c3:c3:7e:b7:c0:c8:28:f5:20:
         57:1c:c3:16:be:5c:4c:ae:7c:43:d1:c8:40:b7:29:72:5d:e8:
         3b:03:63:d5:c4:2d:42:b6:ba:d2:65:19:b1:6b:2c:21:b9:45:
         51:6f:dd:fa:85:e9:e5:da:40:68:8e:1b:07:4e:ba:fe:68:a5:
         2c:86:0b:48:11:b0:8e:de:25:8d:0d:fd:8a:37:d0:c0:57:96:
         48:d2:07:55:5e:f4:e2:86:29:6a:91:2c:f0:83:80:a1:60:7e:
         ac:02:01:23:95:0b:de:d0:f3:77:36:77:bb:2e:b1:cf:ec:1a:
         fe:5a:f6:7f:d0:80:c0:1d:c8:86:b1:fd:ef:e4:d2:ca:4e:1f:
         ec:ab:6e:96:5d:4a:50:74:a6:05:e0:d6:46:58:a3:ce:7f:bb:
         da:59:cc:1d:cd:6e:3e:9a:bc:31:e4:07:c3:49:95:61:f3:ce:
         ac:aa:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:57:48 2026 by rpki-client