Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa
File:                     8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa (raw, json)
Hash identifier:          J56Rs32T+JEkxDX+PvFhYEAXDfT70LXn9HvgcQdP5NA=
Subject key identifier:   72:5A:C1:E9:30:AB:55:D0:CC:69:77:52:26:A9:10:35:79:7C:98:A0
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE7BCCB8B47503F0D1C002340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        68.167.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:cb:8b:47:50:3f:0d:1c:00:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=b967dca8-10b8-4ebd-8d6c-ac6caeab5366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:cc:81:0f:59:37:69:1b:93:c8:46:46:4d:
                    cd:26:d9:f4:33:02:2e:3a:64:3f:cb:81:88:3d:2d:
                    6c:b7:d8:3f:51:b5:ed:02:42:ca:30:04:ab:ce:32:
                    ae:86:2c:8d:1c:dc:93:18:45:3b:83:87:25:c6:92:
                    8b:c0:99:8d:de:af:1f:27:e9:52:8d:bf:f8:18:55:
                    19:9b:a5:2f:87:a0:af:0f:53:60:bf:34:ea:54:fa:
                    04:a2:07:f4:c4:cb:17:aa:09:a8:d9:c4:c6:50:62:
                    64:c3:ae:07:47:6a:c1:61:a7:2d:df:14:f1:67:23:
                    1e:47:87:5f:af:f5:62:09:7f:f9:8d:d4:40:29:e8:
                    25:0a:a3:d9:78:ce:87:0b:fa:5f:fa:93:ff:61:d2:
                    fb:79:4b:00:cf:1a:f9:64:24:1b:74:03:77:6e:6d:
                    9b:fb:9b:49:60:a6:86:19:47:f2:36:95:bf:2e:b4:
                    82:95:da:2e:06:20:ae:4b:5d:78:79:80:3e:19:05:
                    34:6c:b5:e7:b3:8e:40:ff:6d:80:10:3c:47:4e:55:
                    33:c4:c2:74:03:6c:6b:01:86:ee:2c:27:1f:6c:b0:
                    75:f1:67:6f:35:c8:51:c6:fc:7d:a0:bf:b3:e9:a8:
                    a6:a1:4d:02:cd:9f:18:12:16:33:fc:5e:43:4c:dc:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5A:C1:E9:30:AB:55:D0:CC:69:77:52:26:A9:10:35:79:7C:98:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8f38345d-1aa0-3e47-91bf-79591c9aeff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:d1:e5:5e:2e:94:58:9b:0b:41:97:f5:52:f3:aa:56:49:37:
         46:53:1d:c1:6a:9e:15:31:23:28:d4:e9:cd:5a:cc:04:1b:f4:
         a5:85:91:1d:56:c2:a6:b7:97:6c:d8:4f:03:57:b6:31:1e:bf:
         e7:88:f9:74:dc:b3:1e:3e:a4:23:0d:28:2b:f5:0a:dc:15:ae:
         57:d6:bd:ed:1c:a2:17:b6:70:fe:68:00:69:f9:ee:ec:17:b9:
         ff:e2:00:8e:6d:2e:cb:f7:4e:09:38:3c:46:f8:17:a2:fc:98:
         b5:2d:80:bd:37:47:35:df:8c:46:88:09:5a:48:3e:8f:31:3e:
         d4:0c:b5:d4:c4:c9:4e:db:e1:f0:71:aa:04:70:44:13:d4:9e:
         64:8e:ce:87:1b:d1:5e:f6:58:4b:be:6e:39:ab:94:99:06:fa:
         4a:23:a0:b9:70:49:3d:e8:84:2f:73:e8:bb:57:29:63:1d:3b:
         6a:32:54:55:64:9f:c3:3f:67:33:d6:f5:89:b8:9e:f3:44:4b:
         b2:8c:e9:51:0f:ed:a5:cd:63:93:b2:74:ae:3c:4a:cd:f8:b0:
         32:7c:85:61:57:53:e9:5b:a3:ce:c7:21:f8:a8:7f:12:09:14:
         10:51:f2:70:aa:6f:30:cf:74:bb:55:70:36:89:ee:94:c6:d8:
         74:33:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:47:29 2026 by rpki-client