Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ceb24619-077c-3d5b-912c-8cfd04d47a65.roa
File:                     ceb24619-077c-3d5b-912c-8cfd04d47a65.roa (raw, json)
Hash identifier:          5Xj5KTDBY3B8PJ0ykzXNX9srS29JkA9ahIGnIXjoSIE=
Subject key identifier:   C8:B0:04:39:A5:37:16:48:91:44:D8:99:46:61:74:2E:C2:6E:32:7E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F5BBA006096BB473128A2E120
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ceb24619-077c-3d5b-912c-8cfd04d47a65.roa
Signing time:             Thu 01 Oct 2026 14:08:47 +0000
ROA not before:           Thu 01 Oct 2026 14:08:47 +0000
ROA not after:            Wed 30 Dec 2026 15:08:47 +0000
asID:                     6079
IP address blocks:        68.164.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:ba:00:60:96:bb:47:31:28:a2:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  1 14:08:47 2026 GMT
            Not After : Dec 30 15:08:47 2026 GMT
        Subject: CN=5abd33e9-1afd-42ed-979c-89433554528e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:89:9f:12:8d:88:5f:dd:39:85:d1:85:a0:8c:
                    20:cf:b5:5e:cc:b4:f6:c2:06:5d:ac:24:97:fe:af:
                    f0:93:52:df:66:80:b2:a6:dd:e7:cb:a7:29:b0:9b:
                    5c:6f:03:8c:fd:85:99:d0:ac:36:fa:c2:8d:ba:1a:
                    e2:1d:5e:ff:c4:67:4e:cf:a3:9a:2a:97:80:ec:29:
                    73:d5:a7:f5:7a:85:86:dd:af:96:37:cd:70:ee:61:
                    0c:eb:7d:4b:cd:10:d4:fa:c5:f2:a2:ae:17:6a:5e:
                    0a:10:59:7f:53:1f:0b:c8:c0:f2:59:96:71:29:21:
                    d0:3b:51:74:c3:31:f9:35:6d:27:d9:59:1d:56:04:
                    f0:5f:8e:2f:51:64:f6:eb:ea:85:95:93:96:67:65:
                    12:77:d6:b8:53:49:36:bb:9c:46:98:1e:5c:61:82:
                    14:2f:fa:57:3f:00:83:3a:74:75:5c:fd:6b:a3:83:
                    07:9d:2e:dd:e1:e2:7c:d8:d7:fd:b6:d0:25:1d:34:
                    ba:bf:80:58:8e:e7:83:46:09:bd:0c:be:c6:d1:51:
                    2a:42:40:13:f3:e4:40:26:7e:e7:12:f5:64:ed:e4:
                    41:65:14:57:4e:fe:36:ea:eb:03:f0:63:29:00:29:
                    25:8c:41:c7:00:48:09:02:f7:e8:78:8b:99:93:37:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B0:04:39:A5:37:16:48:91:44:D8:99:46:61:74:2E:C2:6E:32:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ceb24619-077c-3d5b-912c-8cfd04d47a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:81:50:b7:55:07:2b:f5:b9:d2:dc:d0:cb:9d:63:bd:dc:6d:
         d8:58:5e:0b:74:06:fd:6f:1c:e8:9c:41:1d:97:84:2a:44:7f:
         32:15:89:e7:fb:7f:09:49:ba:81:ff:f2:97:2f:1a:3b:43:1a:
         a5:14:dd:c9:38:73:ec:08:3e:66:82:3c:7d:de:70:d8:d8:37:
         85:d3:43:d9:49:37:c5:f7:3e:13:32:32:da:45:6a:e0:ab:11:
         9a:b5:92:7a:87:3b:5d:ca:a2:ae:1a:69:78:75:e5:de:af:76:
         52:7b:4e:d9:e0:5a:6b:31:52:1a:0d:b3:01:7a:f8:88:02:9e:
         39:07:38:b8:fe:5d:96:4a:5c:a7:0a:2e:79:63:aa:4f:7b:ac:
         f7:19:9d:a9:54:54:66:25:cb:6b:bc:02:a6:7b:73:30:2d:20:
         14:fd:14:6a:ab:1c:6a:b2:71:27:20:36:fc:0c:27:65:43:e6:
         3b:20:37:8e:1b:70:90:5e:52:d3:fc:4e:42:e6:df:e8:c0:57:
         be:c0:90:05:af:17:12:50:d1:99:05:ac:14:59:3e:ac:63:4d:
         45:7d:78:e9:b4:4e:21:e4:f7:76:c8:c3:3b:a8:d4:4d:a0:89:
         ff:c5:75:3a:36:83:bd:0b:d9:bb:5d:73:ef:36:bc:85:a0:ce:
         cb:14:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:43:12 2026 by rpki-client