Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3b87e5a-8a05-3a47-b1fa-ccd9bfb838c7.roa
File:                     e3b87e5a-8a05-3a47-b1fa-ccd9bfb838c7.roa (raw, json)
Hash identifier:          qUzCx3qynyd+gWYyC8o7Nd6a6VNuD9XzehH6dGqIprI=
Subject key identifier:   1C:81:70:8A:22:03:1F:CE:4B:AF:F7:A9:76:83:89:A6:97:6A:69:C6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E66503A72CE14C05A6DB30B40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3b87e5a-8a05-3a47-b1fa-ccd9bfb838c7.roa
Signing time:             Sun 05 Jul 2026 16:22:37 +0000
ROA not before:           Sun 05 Jul 2026 16:22:37 +0000
ROA not after:            Sat 03 Oct 2026 16:22:37 +0000
asID:                     152672
IP address blocks:        68.166.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:50:3a:72:ce:14:c0:5a:6d:b3:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  5 16:22:37 2026 GMT
            Not After : Oct  3 16:22:37 2026 GMT
        Subject: CN=3cda621f-b08c-4fb7-bb1f-c5f3b24c2738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:6a:49:94:a2:c1:cf:69:d3:d6:2e:99:cf:
                    2f:6d:f4:b9:a0:92:69:f1:0b:c9:8f:87:b7:c6:6b:
                    4f:13:02:7c:30:38:63:30:36:b8:64:6d:fa:d5:5b:
                    fb:ca:b5:4a:ea:45:b4:c6:16:4b:39:d3:44:88:54:
                    15:48:aa:72:e8:f2:25:3c:52:dd:99:0a:b6:3f:18:
                    18:60:1a:f3:9a:9e:03:c6:5e:a4:7b:30:71:77:91:
                    52:c3:bd:b0:82:5d:d1:cb:8e:a0:b9:3b:13:61:9c:
                    0f:35:3a:3e:bd:f6:c6:29:3e:a7:bc:4c:1e:fd:04:
                    1c:15:c4:41:d5:c3:57:08:12:33:b2:da:49:bd:72:
                    74:2d:60:d4:eb:3a:41:f8:fe:10:af:60:7c:09:44:
                    9f:a9:bf:28:6e:8a:60:bd:01:66:ac:13:cd:7e:bc:
                    95:e2:43:26:f8:9f:70:7c:c8:a8:d5:ec:cd:84:dc:
                    6d:1c:12:c9:d0:93:10:9e:77:0b:b7:02:c9:e6:70:
                    2d:9b:07:46:b1:19:ce:8a:66:89:08:14:f6:87:22:
                    f8:cb:5f:00:89:2a:de:39:f2:81:79:86:04:18:18:
                    8b:0b:3f:35:5f:5f:ca:25:cd:1b:36:c4:30:4f:d7:
                    3e:7d:6d:9b:e4:eb:db:84:65:ae:5c:3f:8b:9c:a1:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:81:70:8A:22:03:1F:CE:4B:AF:F7:A9:76:83:89:A6:97:6A:69:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e3b87e5a-8a05-3a47-b1fa-ccd9bfb838c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.166.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:17:ad:68:ea:37:b8:09:1a:1d:c2:5f:03:cd:08:60:54:
         49:fe:37:29:5c:5b:e3:46:36:25:c3:bd:63:1e:3c:2a:2d:f3:
         85:88:8c:12:0f:2c:58:f3:09:3a:6a:cd:b8:ae:fb:eb:c8:0d:
         24:8a:7f:af:50:97:0d:82:9d:46:51:b6:68:ae:79:d3:43:e9:
         d0:f1:43:1c:2d:ce:23:bc:89:2a:44:9e:0e:5b:8c:64:98:17:
         62:a4:51:49:8f:6d:df:c0:00:ba:85:c1:38:68:19:87:e5:e7:
         d4:1e:5f:d2:e2:19:99:44:5b:a9:d4:db:c1:7b:74:81:4c:3b:
         f3:68:c9:d1:3a:ff:3c:3e:ef:a4:0a:85:81:6c:92:21:9d:c8:
         6a:64:88:21:68:f2:d4:6b:46:96:74:c9:33:5b:54:13:5e:5e:
         70:b4:5d:a9:5d:48:95:ee:22:5c:99:94:43:fd:aa:0e:8f:ec:
         a4:8f:e4:7f:6f:49:a8:f5:f1:76:9b:02:2d:f3:b7:dc:21:8c:
         0a:0d:5e:50:77:bc:4e:51:16:95:c2:e1:2a:45:e9:25:fa:2f:
         85:e0:21:08:f3:6c:93:fe:98:a7:0d:2a:a4:e0:8e:01:0f:30:
         37:88:99:4e:89:2a:af:29:fa:f7:bd:f0:0e:2c:43:0f:9d:f8:
         0a:b6:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:41 2026 by rpki-client