Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/26b44aac-7fa4-3ec5-b2a2-f5cee6c2b8a3.roa
File:                     26b44aac-7fa4-3ec5-b2a2-f5cee6c2b8a3.roa (raw, json)
Hash identifier:          8XGd98VKrYxUV56ID+ODkj0fcVpnvTOBa7qAOuHgMQQ=
Subject key identifier:   68:F6:A5:B3:D3:A1:35:26:4C:07:7C:F0:57:2E:A9:09:70:EC:F0:9F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5E60C2D9C0252AC2BB7F7630
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/26b44aac-7fa4-3ec5-b2a2-f5cee6c2b8a3.roa
Signing time:             Fri 02 Oct 2026 12:56:24 +0000
ROA not before:           Fri 02 Oct 2026 12:56:24 +0000
ROA not after:            Thu 31 Dec 2026 13:56:24 +0000
asID:                     402671
IP address blocks:        68.164.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:60:c2:d9:c0:25:2a:c2:bb:7f:76:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  2 12:56:24 2026 GMT
            Not After : Dec 31 13:56:24 2026 GMT
        Subject: CN=05293c44-5065-4199-b911-d85aa3c9faf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:b9:8d:9c:9e:c7:c8:d8:ae:e2:09:49:93:
                    e3:53:6b:5f:86:75:ce:49:87:42:12:9c:f3:df:68:
                    34:17:5e:87:64:af:0e:37:0a:f6:16:f8:0e:8c:34:
                    b6:07:68:54:67:b5:78:e7:09:29:5b:3e:e6:ca:e4:
                    d8:44:99:24:b4:e3:2d:9c:64:f8:de:df:98:0f:8d:
                    01:30:a8:6a:09:88:7e:99:b4:5f:60:31:a1:ef:9c:
                    b3:ce:d1:4d:6c:3b:36:86:be:d7:04:93:e7:59:71:
                    70:24:c2:75:3b:fe:1b:6a:6e:18:44:91:ba:77:9c:
                    d0:2b:cd:e5:13:e0:e1:76:3f:db:ec:2b:75:0d:19:
                    db:9a:4c:0b:20:3e:34:69:35:54:4f:d2:f2:a6:7a:
                    e5:28:72:68:65:73:fc:ce:38:61:1f:07:6b:54:a2:
                    45:21:3f:9e:2c:2c:d7:d0:e0:ab:db:41:8c:02:3d:
                    ea:a4:6d:5c:cc:9b:7f:0e:66:d0:27:be:ea:b0:56:
                    f1:53:6d:64:e8:1c:e3:18:f2:3d:5f:68:29:42:28:
                    05:7c:68:63:d2:a8:3e:2b:1f:f1:98:cd:4d:b7:d1:
                    0c:29:4b:94:08:d0:b9:f3:3d:f6:bb:c5:7d:b1:3d:
                    1a:83:21:9d:a4:a9:04:12:32:0b:24:f2:44:61:ec:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F6:A5:B3:D3:A1:35:26:4C:07:7C:F0:57:2E:A9:09:70:EC:F0:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/26b44aac-7fa4-3ec5-b2a2-f5cee6c2b8a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:61:f4:07:01:2d:9b:7e:61:be:e7:70:d9:9c:16:30:eb:84:
         4c:7f:98:0b:3c:ae:9b:d8:5b:b8:9b:9e:be:8d:ad:9a:1e:48:
         9a:0d:01:f4:cb:ae:b4:d6:a1:7b:c7:c8:11:a3:58:63:4a:89:
         55:83:6e:56:e3:4d:7d:60:76:e9:0b:85:75:37:b2:b9:05:ab:
         3e:ab:f0:a3:ab:85:06:7f:89:35:88:2c:48:c8:dc:ce:1d:99:
         ad:d0:13:fa:77:6a:5c:5b:55:7c:42:1d:8b:a0:95:82:10:5c:
         b9:a5:d9:33:48:69:8a:9c:f2:a1:1c:6d:b2:e9:f9:01:91:18:
         77:70:53:64:70:c9:8e:c2:63:ff:36:5b:dd:63:13:6e:4f:f7:
         86:bc:b7:e6:7e:f3:f4:f5:f8:19:9f:64:41:68:b1:a7:a9:88:
         a1:be:e6:ee:b0:f4:92:57:c3:9b:64:95:98:28:14:39:0f:8a:
         14:57:fa:18:7c:38:8c:e2:c0:fe:fe:02:01:bb:42:29:c2:53:
         e3:1c:55:f2:d6:75:74:42:98:74:e0:0a:8e:17:47:ea:44:a5:
         20:77:ce:a6:1a:f1:57:bc:1a:c5:db:6a:ab:c1:46:2e:f2:dd:
         1e:79:c8:fa:7d:f4:2c:b6:18:95:fd:b5:93:ae:b5:a8:74:b5:
         b2:08:fd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:15:39 2026 by rpki-client