Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e26a7a29-f826-34af-aee4-7b732cae0a1a.roa
File:                     e26a7a29-f826-34af-aee4-7b732cae0a1a.roa (raw, json)
Hash identifier:          OH7FPwV69xEiL0O1TR0x/SOEPUdT9KUS50+STtI2qvo=
Subject key identifier:   85:45:09:61:9B:6D:71:92:78:2B:46:3D:BB:55:90:70:31:DB:D3:75
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D5B4F8D5E49BC07B9C28F4700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e26a7a29-f826-34af-aee4-7b732cae0a1a.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     397423
IP address blocks:        68.167.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:8d:5e:49:bc:07:b9:c2:8f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=6d6d803b-576d-4f60-bdba-da18877e4694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:4b:22:e5:2f:f5:ff:3d:e5:3f:78:17:75:
                    ea:46:9b:fa:15:00:3c:79:06:8b:99:b4:f9:7c:51:
                    88:c4:20:c4:bd:cf:7d:1d:8f:7b:23:aa:83:3f:39:
                    f1:8c:45:1e:7a:94:d0:8e:69:15:37:2a:14:4f:a5:
                    0e:73:78:3d:f8:f1:a7:4d:c4:ef:0b:00:2e:e4:d6:
                    ae:9f:b1:bf:af:c2:f2:f0:4f:51:37:97:18:19:a7:
                    ad:3c:41:de:99:ab:d7:81:ff:1e:58:1f:43:f3:1f:
                    f6:7b:cd:28:24:cb:f4:c2:22:3f:d5:51:7b:5e:37:
                    11:cd:79:44:e5:17:48:b6:3e:c7:7d:2a:29:b6:7d:
                    7e:07:ed:0c:74:93:95:ec:7e:df:0c:51:c6:40:ee:
                    9e:8d:23:11:47:3e:09:03:75:16:b7:f7:b5:18:a6:
                    96:8d:c9:a0:cd:98:56:17:84:2d:58:01:36:47:a1:
                    12:54:4f:e3:d0:07:0c:c9:b9:dd:e5:8a:2b:33:a2:
                    2f:44:f5:c8:91:7c:99:c0:e7:3d:e6:7e:09:b9:68:
                    77:7b:ba:c6:09:ae:87:a4:be:5f:d6:47:00:2a:4c:
                    a5:30:51:1c:75:e9:fa:ab:c2:2a:4a:fd:92:0b:02:
                    93:2a:b2:71:2c:e6:bb:4c:bf:fb:07:af:f6:e3:a1:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:09:61:9B:6D:71:92:78:2B:46:3D:BB:55:90:70:31:DB:D3:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e26a7a29-f826-34af-aee4-7b732cae0a1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:8a:58:d4:00:01:ae:c9:71:3c:26:23:cf:5c:a0:1b:e6:
         51:07:ae:83:20:27:48:1f:17:30:62:4e:bc:f6:d2:a8:3e:f1:
         b3:7c:53:18:ff:11:80:14:75:fd:01:4f:09:c9:0d:c2:78:72:
         3e:44:37:48:69:db:7b:c0:ad:4a:20:81:8f:70:bc:10:cc:0e:
         d4:ee:6a:65:e8:87:f2:cf:08:09:6b:b5:44:83:a6:a5:90:73:
         85:0f:ed:6a:46:30:da:33:06:e3:81:00:ca:04:75:d4:c7:6a:
         50:c0:c6:98:1d:96:07:fe:b0:a2:b6:a1:07:79:fa:e2:b0:c6:
         6a:fc:49:df:ca:ff:88:8b:7e:e1:8a:83:e1:22:98:c4:5c:cf:
         59:e2:60:77:ac:f0:17:d2:98:66:b0:49:08:83:1a:83:a0:da:
         a5:50:e0:2d:ec:fb:51:8d:a9:07:2b:d4:7e:39:8b:19:00:3f:
         67:60:62:f8:b6:6d:02:22:d4:84:f1:b1:da:e4:a9:a2:49:09:
         02:93:cb:2d:31:5e:c1:46:d9:d9:eb:e7:1f:fb:1b:99:2d:e6:
         01:a2:ad:09:e1:09:20:c4:1d:8a:b8:43:7d:71:39:d8:dc:60:
         ce:2d:07:eb:78:c0:90:8d:c5:74:21:49:48:aa:10:64:d1:31:
         b0:2a:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:13 2026 by rpki-client