Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e595d64-5f24-3398-800e-ce3d56e7e75a.roa
File:                     7e595d64-5f24-3398-800e-ce3d56e7e75a.roa (raw, json)
Hash identifier:          6dycpWigEG7D5ocTOk08JyWOa/HLReSoysGaNh/KVK8=
Subject key identifier:   5E:A9:85:29:51:04:C1:FC:E6:EC:A4:E4:9C:68:8D:E8:C9:A3:2C:13
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EABB6E66FA83AD91DA6AFB000
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e595d64-5f24-3398-800e-ce3d56e7e75a.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     834
IP address blocks:        68.165.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:e6:6f:a8:3a:d9:1d:a6:af:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=c59c24d4-5bc2-4fe2-866a-65c2e4798966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:49:be:53:1f:ce:a2:e0:b3:19:e9:6f:fd:
                    f9:60:0d:3b:52:e5:d8:53:10:0a:80:90:27:11:c1:
                    46:0e:0c:02:7b:0a:89:8f:0c:f1:3a:33:5a:87:a6:
                    c7:9f:6b:b2:0e:e0:58:be:37:c9:8b:d8:d6:ee:10:
                    42:ca:ee:ce:b1:47:e6:ac:54:b1:68:01:c7:54:87:
                    8a:80:14:a1:54:86:f4:17:a2:97:b1:b2:c7:d8:3e:
                    2e:67:c1:27:f7:63:68:2e:6c:70:64:58:22:60:9b:
                    7b:b1:81:32:5e:e5:b3:77:ce:ce:72:1d:0b:bc:89:
                    87:1c:de:0b:e0:e9:18:dd:46:75:49:1a:92:9a:2c:
                    e6:9d:a9:2f:79:23:5e:b3:d6:69:c7:34:85:51:8b:
                    b4:1e:af:67:db:df:8f:e0:6c:64:4c:bc:e3:dd:39:
                    7c:b2:bf:27:31:ca:68:44:24:9b:1c:83:ac:f1:62:
                    b8:19:00:cd:d2:9e:0a:a3:f1:47:2a:b2:ed:5c:fe:
                    11:82:6b:53:de:e1:1a:8d:36:8e:db:b0:39:4d:1d:
                    1d:44:34:77:82:3c:70:9e:24:b7:ba:82:07:9c:da:
                    1a:51:eb:d1:ce:d6:06:bb:97:f7:aa:1c:64:87:45:
                    6a:c0:50:c1:13:5f:29:d1:11:6b:cc:b2:41:2c:ab:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A9:85:29:51:04:C1:FC:E6:EC:A4:E4:9C:68:8D:E8:C9:A3:2C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7e595d64-5f24-3398-800e-ce3d56e7e75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:fd:17:c5:db:71:d9:09:d1:fd:a1:e6:3b:23:be:9d:6d:
         74:7b:a5:fb:1a:bd:f6:da:50:82:f8:68:fa:24:11:8e:bf:1c:
         25:cf:e2:c0:7c:4c:47:bc:a9:c6:8f:ff:56:a6:08:ee:24:41:
         66:c9:84:74:eb:b3:42:06:16:7a:79:3b:fe:75:06:56:cd:03:
         76:c7:6e:d3:62:c6:e5:f3:b1:1d:6c:62:ca:4a:0e:a5:0a:50:
         2c:85:f9:f3:a2:ce:df:2f:52:e5:8a:31:64:b1:53:5d:fc:d5:
         74:cf:d2:d8:91:33:18:82:31:8d:2f:a1:8b:2f:02:76:eb:7d:
         9f:51:a0:a0:31:03:59:94:db:cd:63:9e:c3:17:4a:1e:1e:9b:
         ad:2c:d3:39:14:8b:a6:74:ac:56:f6:6f:42:dd:00:dd:53:ab:
         74:c0:e4:93:80:60:15:55:58:da:4f:37:31:54:88:18:a9:e3:
         ea:2b:d0:35:ef:6d:e2:40:4b:ad:e2:e4:e2:84:b6:7f:5f:c6:
         55:b4:4d:94:18:fe:fe:51:0f:2a:71:4f:b0:f2:43:d2:7c:dd:
         43:4d:53:78:09:42:e0:3d:b5:13:6c:3d:05:a5:64:bf:e5:78:
         89:07:55:09:5f:88:f0:23:0c:fd:7a:22:90:ef:24:43:b3:47:
         a1:6f:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:04 2026 by rpki-client