Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/791366d4-12be-3bb0-a5b0-48f541558a56.roa
File:                     791366d4-12be-3bb0-a5b0-48f541558a56.roa (raw, json)
Hash identifier:          NksQMON62lm9JA2Q9GMzYulGF/aVyk0utRrv1g/5EPE=
Subject key identifier:   43:51:30:7E:EB:F6:ED:34:2A:32:6F:8C:49:E2:76:DC:0F:2C:48:44
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE8FF6642A06A30781B41A780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/791366d4-12be-3bb0-a5b0-48f541558a56.roa
Signing time:             Fri 21 Aug 2026 11:50:39 +0000
ROA not before:           Fri 21 Aug 2026 11:50:39 +0000
ROA not after:            Thu 19 Nov 2026 12:50:39 +0000
asID:                     219427
IP address blocks:        68.166.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e8:ff:66:42:a0:6a:30:78:1b:41:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 11:50:39 2026 GMT
            Not After : Nov 19 12:50:39 2026 GMT
        Subject: CN=dedcddaf-862e-40da-b190-fe42e75aeebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:3e:0d:be:68:1d:30:e8:56:bb:75:4f:77:
                    35:a4:7f:c1:15:c4:56:7a:bf:da:12:a4:a4:1c:50:
                    bc:69:84:6d:23:3e:e7:d9:ed:b1:c5:5f:6e:a1:40:
                    c8:02:02:ab:e2:13:6b:f2:33:03:a4:d0:b1:3b:b8:
                    64:39:2f:43:a0:4d:54:44:ae:cf:06:7a:c5:c4:59:
                    d1:21:4a:b6:d9:0f:8c:f2:5b:40:ec:b3:f8:97:97:
                    c5:02:8b:f6:53:18:21:7a:57:22:84:7e:b7:70:5c:
                    3d:da:7b:e6:d8:65:3a:ed:40:7a:46:fc:b0:b7:25:
                    26:6a:5a:4a:88:b1:c8:31:03:8c:97:f7:76:51:f3:
                    68:34:c8:24:49:0d:26:a1:ed:2c:df:a7:d4:71:0b:
                    78:2f:26:13:bf:62:4c:fe:80:7d:f3:27:07:71:cb:
                    20:1c:89:b5:d4:fa:69:a3:02:e8:eb:42:2b:d8:04:
                    b2:96:ad:fe:72:f4:5b:2e:d6:91:97:43:7e:8c:4b:
                    2e:1b:83:45:ad:23:58:ec:f3:fe:aa:33:f2:d1:b6:
                    a8:38:b3:df:1f:c7:bc:01:8d:61:76:37:5d:08:30:
                    87:8c:f0:f2:1d:88:06:23:9f:f8:9f:61:9c:73:5a:
                    08:39:82:c4:72:41:70:f7:e3:63:0d:91:52:29:de:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:30:7E:EB:F6:ED:34:2A:32:6F:8C:49:E2:76:DC:0F:2C:48:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/791366d4-12be-3bb0-a5b0-48f541558a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.166.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:59:80:4d:ac:bb:71:f7:30:1d:45:1b:8b:fd:01:91:59:1e:
         62:f4:b6:a1:e5:04:1a:56:7a:73:84:53:34:3f:b6:99:d8:70:
         f2:68:0b:b4:0a:2e:54:aa:79:53:e5:0f:dc:cf:f7:21:79:68:
         2f:1e:c3:18:f1:33:8e:35:c5:0d:7c:da:7d:50:33:be:70:2b:
         bb:5b:c6:7e:ca:d9:49:af:f5:c6:9d:ac:56:c6:7e:39:9f:96:
         9d:b4:23:9e:00:a0:ac:6a:a1:de:86:73:48:33:a6:ec:20:00:
         4a:2f:f0:75:a3:c2:35:1f:67:ca:f3:bc:99:22:ee:0a:fd:44:
         b8:a9:78:a0:81:cb:22:9f:41:89:b8:c8:f5:ba:a4:13:a8:27:
         01:56:02:f4:e1:71:99:f7:0e:49:8b:dc:a9:8f:9d:4c:a4:89:
         70:5e:95:c2:12:af:1d:d8:a8:70:51:56:1e:d7:5f:6e:03:c9:
         f0:37:c1:f5:0b:9a:c2:bf:fe:9b:35:c1:d9:89:c9:df:53:ae:
         62:89:8b:79:f1:da:de:4c:62:46:83:86:43:8c:9f:74:7e:30:
         f0:31:30:20:25:97:89:91:86:c0:09:cb:70:d1:c2:1b:84:43:
         47:5e:5c:fd:7a:c9:a6:79:21:31:c3:f5:d5:11:a9:17:11:e8:
         78:3b:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:33:49 2026 by rpki-client