Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2e28380-282d-3d1d-a752-dec741570493.roa
File:                     c2e28380-282d-3d1d-a752-dec741570493.roa (raw, json)
Hash identifier:          vOoUYvQo/H/UpwYsltKwWRGE3Zz5ZfuYpt3uh4FeRLU=
Subject key identifier:   73:B7:DE:41:EB:A5:40:2F:BF:60:9A:CA:FE:0C:7C:13:50:8A:07:5E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EE7EFDD1407192074F5D95900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2e28380-282d-3d1d-a752-dec741570493.roa
Signing time:             Fri 21 Aug 2026 02:43:32 +0000
ROA not before:           Fri 21 Aug 2026 02:43:32 +0000
ROA not after:            Thu 19 Nov 2026 03:43:32 +0000
asID:                     402265
IP address blocks:        68.166.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:ef:dd:14:07:19:20:74:f5:d9:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 21 02:43:32 2026 GMT
            Not After : Nov 19 03:43:32 2026 GMT
        Subject: CN=242490e7-8154-4cf0-b2b6-66a524480e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:35:c7:0c:27:b2:40:21:71:1e:a2:fe:9e:
                    8d:4f:12:73:60:71:06:30:09:99:7f:9d:62:a8:90:
                    7e:ca:28:f9:d7:e2:8b:34:50:50:93:00:6d:39:d3:
                    6d:12:ba:14:d1:b0:30:83:6c:b5:7b:9e:bc:c4:85:
                    fb:a8:b8:a1:7d:1c:e5:8f:e3:7a:8b:ba:da:3f:a8:
                    63:f7:c5:76:5a:a7:c4:fb:55:af:b2:69:42:43:40:
                    3c:e4:6d:63:4e:05:60:c5:dc:ce:db:6f:87:e8:1f:
                    9f:69:34:b5:6a:ff:14:29:ab:ec:f1:52:30:63:94:
                    f0:21:88:a3:8e:59:84:6c:2b:f6:a7:fd:b6:30:3f:
                    10:d7:c9:52:32:bb:f3:b8:44:db:a1:f1:52:61:67:
                    e6:07:8c:57:d8:3e:72:89:2f:e7:96:d3:46:73:38:
                    a6:68:37:aa:2d:d0:ff:b0:f4:92:eb:7f:ba:ce:de:
                    61:2e:49:cb:0b:9e:fd:21:00:df:0e:37:12:d4:2c:
                    73:5d:7c:b1:1f:7b:c6:32:13:62:ef:59:9d:dd:4f:
                    ee:e1:e9:7e:a1:51:3f:a7:9c:78:a0:40:b0:ae:d5:
                    d4:00:1f:6f:4b:d4:c7:9c:a2:79:25:e0:e7:96:b0:
                    49:6b:76:e8:86:7f:4c:77:8d:97:82:b4:ae:93:88:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:DE:41:EB:A5:40:2F:BF:60:9A:CA:FE:0C:7C:13:50:8A:07:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c2e28380-282d-3d1d-a752-dec741570493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.166.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:e6:d9:e6:00:e5:e9:55:39:19:fe:e3:82:a1:07:09:2b:
         81:73:f3:3a:70:1a:23:5c:7f:41:50:79:e2:e6:5c:f4:88:ca:
         72:eb:b0:45:1d:e3:61:fe:df:35:bb:a6:5a:71:aa:da:4f:7a:
         bb:d1:0d:e3:3a:8d:47:f1:be:48:d8:c6:34:d7:a5:be:fb:e0:
         c2:bd:35:82:a6:c9:8d:af:b0:5b:cc:2b:88:47:e2:c4:98:b7:
         64:c5:1c:aa:28:6c:e1:39:ae:d6:a7:65:3f:4a:1d:9a:97:76:
         90:3e:d9:ad:ba:3b:34:36:35:43:03:26:7f:28:fd:63:61:8f:
         b7:2c:6f:9e:38:a1:5c:ac:ed:cb:78:61:87:51:f1:fc:3e:56:
         0f:e7:ae:36:9a:80:55:43:bd:87:e1:57:66:0d:c7:eb:50:53:
         a7:ff:f5:96:a5:78:db:61:6d:2b:44:59:a3:07:75:f1:6e:1e:
         6d:97:07:0e:f3:ab:7f:4d:75:38:8c:95:5e:1f:79:4e:ea:66:
         47:12:03:b9:3c:93:96:a4:d3:50:c0:bb:f8:02:da:fa:fa:27:
         ef:4d:f9:01:68:2c:39:c9:cd:8c:46:c9:08:33:0c:ad:06:06:
         d5:16:b4:c1:a3:fb:78:5f:f4:b6:eb:fd:05:98:52:1a:87:f2:
         93:61:16:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7n790UBxkgdPXZWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDgyMTAyNDMzMloXDTI2MTExOTAzNDMzMlowLzEtMCsGA1UEAxMk
MjQyNDkwZTctODE1NC00Y2YwLWIyYjYtNjZhNTI0NDgwZTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjso1xwwnskAhcR6i/p6NTxJzYHEGMAmZf51i
qJB+yij51+KLNFBQkwBtOdNtEroU0bAwg2y1e568xIX7qLihfRzlj+N6i7raP6hj
98V2WqfE+1WvsmlCQ0A85G1jTgVgxdzO22+H6B+faTS1av8UKavs8VIwY5TwIYij
jlmEbCv2p/22MD8Q18lSMrvzuETbofFSYWfmB4xX2D5yiS/nltNGczimaDeqLdD/
sPSS63+6zt5hLknLC579IQDfDjcS1CxzXXyxH3vGMhNi71md3U/u4el+oVE/p5x4
oECwrtXUAB9vS9THnKJ5JeDnlrBJa3bohn9Md42XgrSuk4hu7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHO33kHrpUAvv2Cayv4MfBNQigdeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzJlMjgzODAtMjgyZC0z
ZDFkLWE3NTItZGVjNzQxNTcwNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKb1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbV5tnmAOXpVTkZ/uOCoQcJK4Fz8zpwGiNcf0FQeeLmXPSIynLrsEUd
42H+3zW7plpxqtpPervRDeM6jUfxvkjYxjTXpb774MK9NYKmyY2vsFvMK4hH4sSY
t2TFHKoobOE5rtanZT9KHZqXdpA+2a26OzQ2NUMDJn8o/WNhj7csb544oVys7ct4
YYdR8fw+Vg/nrjaagFVDvYfhV2YNx+tQU6f/9ZaleNthbStEWaMHdfFuHm2XBw7z
q39NdTiMlV4feU7qZkcSA7k8k5ak01DAu/gC2vr6J+9N+QFoLDnJzYxGyQgzDK0G
BtUWtMGj+3hf9Lbr/QWYUhqH8pNhFlk=
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:25 2026 by rpki-client