Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/862d779b-5f08-30a6-918c-b350a2a753da.roa
File:                     862d779b-5f08-30a6-918c-b350a2a753da.roa (raw, json)
Hash identifier:          c/q8e2ja54aUjEem9bscSl8nKtCYG536z40dydbK98E=
Subject key identifier:   D0:40:56:D9:FE:01:16:62:73:96:B6:A5:0F:D8:E5:51:A4:E4:F6:F9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EF7B9C941D5C737E0F17E2B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/862d779b-5f08-30a6-918c-b350a2a753da.roa
Signing time:             Wed 26 Aug 2026 18:27:31 +0000
ROA not before:           Wed 26 Aug 2026 18:27:31 +0000
ROA not after:            Tue 24 Nov 2026 19:27:31 +0000
asID:                     7029
IP address blocks:        68.165.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:b9:c9:41:d5:c7:37:e0:f1:7e:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 26 18:27:31 2026 GMT
            Not After : Nov 24 19:27:31 2026 GMT
        Subject: CN=62b08c00-7f5e-4db8-9aa2-c7132c57373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:3c:02:a7:51:c5:18:0e:33:5e:9f:8c:cf:
                    37:34:f8:63:a7:37:6d:b9:4c:de:0e:0c:b7:1a:8a:
                    8e:9d:92:3d:79:7a:02:49:51:ce:11:b4:dd:bd:c6:
                    1f:69:df:6a:87:64:ee:94:78:16:f0:ab:16:25:7e:
                    39:02:25:5b:f4:32:a2:65:c3:05:e7:08:bd:36:66:
                    ac:52:0e:a6:2f:e1:c2:9c:9e:31:9f:5d:9e:55:33:
                    87:c3:9f:a0:03:48:d0:e8:3d:bf:29:56:21:ec:21:
                    b3:ad:f0:be:2d:07:da:d7:61:d5:be:55:b1:96:23:
                    8a:27:54:10:8d:31:6f:ae:1e:82:d9:c9:f5:f6:bc:
                    32:93:d2:f1:e3:22:df:46:09:2c:b2:44:91:32:84:
                    99:78:33:b7:75:06:e2:1d:a5:87:68:18:26:38:95:
                    bf:f0:62:37:28:01:7c:fa:39:dd:e1:f0:c5:43:ca:
                    ce:2c:ac:90:c5:36:db:1e:a3:38:2f:e2:3d:f5:bc:
                    ab:83:7f:6c:9c:46:37:4e:24:11:4a:8b:3a:ff:ea:
                    94:ca:cd:5d:25:33:9a:5e:52:e8:36:e4:6c:2c:8c:
                    52:7f:44:b4:40:1f:92:78:17:71:c5:8b:2d:79:87:
                    a5:51:e4:39:fb:a9:41:c7:ce:59:45:c6:48:31:7e:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:40:56:D9:FE:01:16:62:73:96:B6:A5:0F:D8:E5:51:A4:E4:F6:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/862d779b-5f08-30a6-918c-b350a2a753da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:ae:85:d3:22:d3:5e:be:56:dd:de:a8:6b:28:cc:11:e1:
         26:1d:a8:75:72:ad:54:ef:46:49:ef:e6:d2:bf:af:32:01:70:
         b2:d3:71:ce:65:d4:62:03:c7:25:dd:ae:ba:2e:8c:0b:19:10:
         b3:9a:4f:e1:27:94:67:5a:d2:cf:ed:c7:15:3f:de:77:47:5a:
         5a:7c:7a:69:22:93:7e:59:23:d9:79:fb:a7:5b:eb:f1:65:52:
         3a:fb:47:81:88:92:b0:63:79:54:74:53:2a:9c:fb:3f:94:9e:
         c3:7f:25:33:4e:74:d7:9a:6c:23:e5:ae:12:ef:e1:67:40:70:
         38:68:4f:e9:86:5f:79:4e:49:4e:15:7f:00:a4:dc:ee:29:c6:
         2c:d3:bf:4b:af:4b:b8:a7:5c:76:51:e7:7d:5c:2f:28:82:36:
         a3:a2:5d:11:0d:33:b0:49:a8:b0:29:ae:66:51:88:d7:b4:4a:
         00:9b:5c:59:c6:78:0d:5f:42:59:be:e0:cf:95:fd:5a:03:94:
         fe:dc:76:0d:0f:28:8a:0d:f2:89:5e:62:97:35:f9:ae:c1:de:
         7c:5a:a0:e8:b4:e8:32:f3:14:54:51:19:65:76:2d:a7:04:85:
         b8:01:26:11:d8:ba:c4:2e:fd:9e:21:7b:62:1e:07:11:c5:88:
         3c:0b:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:48:36 2026 by rpki-client