Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1132011d-db43-3313-9306-fbb64366f2b0.roa
File:                     1132011d-db43-3313-9306-fbb64366f2b0.roa (raw, json)
Hash identifier:          9Km9JWOrhoXrywXW6KsrpkJizVEa4aW+2gv3D+5n2aM=
Subject key identifier:   F0:CB:62:22:01:6C:BF:43:44:ED:F2:33:EE:A4:95:8E:4A:65:6C:AF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F566134B55F6BA8A58A0E1F80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1132011d-db43-3313-9306-fbb64366f2b0.roa
Signing time:             Tue 29 Sep 2026 16:10:50 +0000
ROA not before:           Tue 29 Sep 2026 16:10:50 +0000
ROA not after:            Mon 28 Dec 2026 17:10:50 +0000
asID:                     218797
IP address blocks:        68.164.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:61:34:b5:5f:6b:a8:a5:8a:0e:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 29 16:10:50 2026 GMT
            Not After : Dec 28 17:10:50 2026 GMT
        Subject: CN=e3ee2641-7135-429e-b0cd-0004a5315b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:cc:da:86:74:e5:77:30:66:11:23:3c:04:
                    4f:08:c1:b8:ad:ad:2f:b3:a7:9f:7e:96:c0:93:61:
                    ad:c2:5b:7f:0b:92:5d:78:53:49:bd:73:ef:db:a1:
                    3f:8a:f8:87:2a:91:4b:49:bc:4f:2a:6c:49:ae:e9:
                    b8:de:44:f8:fa:e5:3b:b1:51:62:86:f2:8b:0d:07:
                    b6:d9:93:1f:8d:1f:74:a5:9f:80:32:f4:10:86:38:
                    bb:a6:59:a7:d7:17:62:2c:d9:e7:55:c8:b2:6e:18:
                    7c:f3:d3:f1:b5:98:e5:7b:49:ed:bd:91:f8:0c:5b:
                    72:4f:e5:76:53:52:a8:60:f4:cf:59:3e:63:7e:af:
                    dc:bc:af:0f:c6:e0:a0:b6:9e:8b:df:3d:ef:52:3e:
                    2d:58:2d:06:d8:bd:f6:2b:f9:9e:15:d3:15:56:c5:
                    1b:d3:15:5e:3b:10:d5:d7:20:6d:48:bb:93:cf:b5:
                    99:5b:79:ac:17:c4:bd:78:ba:89:b2:20:41:70:51:
                    8d:3c:83:33:da:37:59:6f:7f:c4:2a:b0:af:fc:01:
                    9e:d5:ed:fd:fc:3b:0b:cf:bb:43:fd:fb:d2:87:a4:
                    3d:8a:83:2c:13:65:49:9e:e5:ee:4e:cb:56:f9:97:
                    c8:c0:e7:bd:9b:0d:1c:0e:45:56:69:3f:17:cf:e4:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:62:22:01:6C:BF:43:44:ED:F2:33:EE:A4:95:8E:4A:65:6C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1132011d-db43-3313-9306-fbb64366f2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:0c:5d:8a:0c:46:ac:98:fd:e4:8e:93:08:8a:13:db:cd:6d:
         ed:37:61:e1:09:6c:34:97:e8:56:90:ed:86:c1:49:56:6f:2f:
         0a:6b:41:f6:dd:03:50:ce:53:e8:ad:9e:b7:40:d9:f4:d6:30:
         11:aa:3b:f9:a5:91:d2:55:1f:70:98:90:81:f6:28:c6:c3:62:
         9b:be:38:81:8e:03:77:0e:61:98:5b:db:89:05:80:1a:5e:72:
         0a:a1:f7:13:28:05:4e:43:67:06:62:64:ff:88:e5:97:eb:af:
         b6:0e:dd:b3:d8:44:22:47:0f:3c:50:40:5d:d9:bf:a3:ec:9d:
         6f:41:72:da:80:af:ce:6f:57:39:2b:5d:5a:36:90:ec:14:a0:
         3d:46:21:ee:62:82:1a:e2:e1:29:19:f8:90:64:81:9b:b8:59:
         11:92:91:d1:89:bd:8a:7f:60:9c:ef:45:9d:8e:58:1f:1c:56:
         48:dc:e5:5e:98:37:41:3c:5b:90:56:d0:91:f3:dd:ea:1d:2b:
         11:34:34:a3:e2:56:aa:4f:3c:fc:c1:e3:49:44:58:4c:ee:dc:
         23:76:13:34:b3:c3:c3:2f:f3:85:07:c2:ab:52:ef:cf:4d:03:
         d4:d1:0d:b2:aa:7e:6f:59:77:4d:92:d2:07:1d:22:22:46:61:
         ae:ec:85:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WYTS1X2uopYoOH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDkyOTE2MTA1MFoXDTI2MTIyODE3MTA1MFowLzEtMCsGA1UEAxMk
ZTNlZTI2NDEtNzEzNS00MjllLWIwY2QtMDAwNGE1MzE1YjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TrM2oZ05XcwZhEjPARPCMG4ra0vs6effpbA
k2Gtwlt/C5JdeFNJvXPv26E/iviHKpFLSbxPKmxJrum43kT4+uU7sVFihvKLDQe2
2ZMfjR90pZ+AMvQQhji7plmn1xdiLNnnVciybhh889PxtZjle0ntvZH4DFtyT+V2
U1KoYPTPWT5jfq/cvK8PxuCgtp6L3z3vUj4tWC0G2L32K/meFdMVVsUb0xVeOxDV
1yBtSLuTz7WZW3msF8S9eLqJsiBBcFGNPIMz2jdZb3/EKrCv/AGe1e39/DsLz7tD
/fvSh6Q9ioMsE2VJnuXuTstW+ZfIwOe9mw0cDkVWaT8Xz+Q2lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDLYiIBbL9DRO3yM+6klY5KZWyvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTEzMjAxMWQtZGI0My0z
MzEzLTkzMDYtZmJiNjQzNjZmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKSGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgMXYoMRqyY/eSOkwiKE9vNbe03YeEJbDSX6FaQ7YbBSVZvLwprQfbd
A1DOU+itnrdA2fTWMBGqO/mlkdJVH3CYkIH2KMbDYpu+OIGOA3cOYZhb24kFgBpe
cgqh9xMoBU5DZwZiZP+I5Zfrr7YO3bPYRCJHDzxQQF3Zv6PsnW9BctqAr85vVzkr
XVo2kOwUoD1GIe5ighri4SkZ+JBkgZu4WRGSkdGJvYp/YJzvRZ2OWB8cVkjc5V6Y
N0E8W5BW0JHz3eodKxE0NKPiVqpPPPzB40lEWEzu3CN2EzSzw8Mv84UHwqtS789N
A9TRDbKqfm9Zd02S0gcdIiJGYa7shXU=
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:32:23 2026 by rpki-client