Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa
File:                     254218cb-ce1f-38f3-ae09-4e801333a2e2.roa (raw, json)
Hash identifier:          hb4VUHVHJ76x3uTlMl69mmPtAimci0puXlYEos71Eds=
Subject key identifier:   22:B4:A0:C0:23:1D:3E:61:A2:2D:C7:E6:08:D1:B3:46:C8:A1:B9:77
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E104EE2511FC3D940BC525F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7922
IP address blocks:        68.167.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e2:51:1f:c3:d9:40:bc:52:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=f78c4bdc-c62b-4078-beb0-0fa93eb50b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:4f:13:25:34:77:d6:49:57:7e:27:a4:c2:
                    a8:1a:a4:a0:20:af:de:62:1e:d0:17:08:3f:89:4e:
                    15:b6:37:85:e6:5b:15:3f:d2:57:b8:e1:b3:5d:60:
                    47:c8:dd:bb:98:0f:a2:1c:ad:e3:01:99:7c:94:71:
                    49:c2:8f:98:1a:2f:e8:de:06:1c:24:a3:a7:f6:92:
                    a3:c1:f5:6a:96:74:26:21:8d:33:12:73:36:23:01:
                    a5:8b:93:8d:93:45:bb:07:ce:b4:44:88:94:f7:74:
                    fa:1c:7d:29:76:d3:7c:e0:35:9b:5b:1e:34:22:2f:
                    93:de:de:dc:69:8e:2b:10:ff:18:ee:4e:f2:be:df:
                    45:e8:fc:55:aa:28:b0:3f:65:42:47:fe:0e:fd:ae:
                    b8:b2:e3:df:cc:20:2b:44:fb:28:31:e8:b1:84:c1:
                    c6:63:57:b7:ec:ed:e0:b5:34:fc:e0:1e:36:1b:a6:
                    1b:5f:b4:a3:8c:a2:3c:8c:15:a0:f9:22:9a:f8:f7:
                    1b:13:d6:ff:fa:ec:6e:21:0b:46:77:99:47:5a:bc:
                    a7:4b:52:4c:b2:6f:55:1d:9c:5d:a1:fb:64:cd:6b:
                    17:ec:c3:a5:cc:fc:76:1c:b9:ba:fd:5c:7f:09:9a:
                    c0:28:5f:53:5d:7f:12:21:7b:d5:78:47:b5:85:94:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:A0:C0:23:1D:3E:61:A2:2D:C7:E6:08:D1:B3:46:C8:A1:B9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/254218cb-ce1f-38f3-ae09-4e801333a2e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:ce:d3:b0:68:30:b1:6f:98:fe:e5:ee:3c:86:0a:b1:d0:
         0e:f5:c3:ee:8c:71:4a:6e:f5:41:37:9c:11:9d:6d:81:14:5c:
         a9:1f:8c:cf:61:36:d2:ff:58:38:9e:79:01:45:6f:c6:e9:5c:
         f3:f8:09:ff:24:9c:c1:db:c5:86:20:18:2a:bb:18:71:bf:5d:
         f9:e9:d8:39:22:d2:a0:b4:42:c6:a5:82:d6:9c:9f:ff:d5:aa:
         15:e0:cb:0d:71:a6:42:d6:a6:08:0f:6f:55:e7:72:a7:50:86:
         72:1b:e8:9e:c8:55:f3:79:18:eb:7a:e5:bc:28:32:08:ab:74:
         66:71:5a:05:e0:db:f2:52:00:bb:27:4b:fb:28:3b:27:9d:37:
         d4:77:c8:ea:fc:ad:fa:cb:dd:c5:87:27:b0:23:07:d4:67:ba:
         37:fc:ab:3d:31:26:ef:d4:72:72:83:17:9e:f0:1a:c9:b1:1d:
         3a:7d:70:f0:31:f7:64:20:e2:83:77:c9:68:01:3c:09:d9:f2:
         a6:4a:18:b9:ee:4b:4d:08:21:88:6b:72:77:59:cd:ab:50:af:
         31:75:56:6f:65:35:bf:86:c5:d3:29:19:a1:07:37:dd:35:d0:
         b5:af:08:c4:c0:51:db:05:0d:2a:f0:08:31:86:60:67:6d:60:
         b2:cf:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:12 2026 by rpki-client