Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa
File:                     e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa (raw, json)
Hash identifier:          3cSp2ZYTypXQnwFPl7/PsBxyYL4Jm8F2sMX5zX6qgnY=
Subject key identifier:   0D:E5:C5:F9:EB:A5:24:C3:09:24:1B:2A:6A:6F:0F:03:5D:F8:66:1A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E15E4990C56E835970ED68300
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     152689
IP address blocks:        68.165.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:99:0c:56:e8:35:97:0e:d6:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=495a6438-6204-498b-bd73-64cdac949c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:f7:81:a0:14:a1:5a:28:61:81:e4:ea:48:
                    75:1d:4f:73:58:db:03:4d:02:a7:66:db:1c:6a:c7:
                    8b:28:2c:4b:92:2f:54:c9:ed:8f:ee:a5:7e:10:45:
                    8b:dc:aa:93:99:40:a2:f8:71:d7:f7:40:76:15:87:
                    fb:f6:ca:64:71:74:36:04:f6:be:d7:f7:56:d6:3a:
                    8d:70:d7:e6:b3:6d:39:a5:01:ba:0a:01:36:04:0f:
                    c7:a6:a9:1e:18:ee:40:7c:6a:5d:7e:91:7a:87:6e:
                    a2:f2:d7:b4:15:69:08:05:56:fb:7b:bb:d6:04:23:
                    fc:1f:b5:8a:ff:4b:43:e0:cf:57:b2:d7:90:5d:6d:
                    ac:ed:d1:25:66:1e:0d:f4:24:87:70:64:83:a5:7f:
                    dc:60:ed:87:2f:28:c7:46:56:00:50:a0:8c:71:3d:
                    7b:e1:90:d9:a5:16:f5:94:37:f9:87:1f:a4:c3:2b:
                    95:50:e8:32:d3:33:43:85:4a:4a:f6:f3:f8:b6:b3:
                    09:a2:2e:81:aa:db:c6:d2:3a:b3:ad:90:52:0e:2d:
                    87:4a:5c:9a:da:50:28:38:9b:c9:32:a4:de:15:81:
                    9d:24:fa:9d:9d:64:40:e3:aa:c0:90:b0:db:88:7d:
                    5b:18:b8:e3:8f:00:a2:97:d7:a1:ce:c8:ca:aa:ac:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E5:C5:F9:EB:A5:24:C3:09:24:1B:2A:6A:6F:0F:03:5D:F8:66:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e350631e-5a38-3d5c-94da-fe4b4f6da5a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:5f:a5:30:0d:1d:f2:96:94:5c:52:3f:78:70:93:f1:e8:7c:
         c6:99:f1:e2:e1:5f:57:3c:a2:69:cb:48:12:df:34:ae:09:dc:
         20:0c:33:b7:89:fe:cd:59:0b:e8:74:c9:92:b5:20:95:5f:36:
         95:2e:5d:e6:ab:51:83:5a:e0:6e:75:dd:89:1a:76:4a:22:bc:
         b5:88:61:88:f6:46:aa:28:8f:32:f5:89:1b:22:fc:6f:6a:b1:
         98:73:bf:a5:b9:ef:1c:9e:5a:b0:b1:74:b7:2d:43:de:7c:fa:
         ce:ae:fe:4f:18:9a:8e:73:a2:83:4d:9c:ab:6f:4f:de:85:0b:
         45:a1:15:4c:7c:97:82:4e:6c:ef:a1:df:89:1e:77:d3:1f:97:
         f7:8d:7a:79:66:d2:a7:4e:76:7e:98:fc:6a:a5:b1:0a:59:db:
         20:8b:fc:55:f8:5f:db:01:b0:fa:9b:2e:7c:05:c6:63:5e:0a:
         2f:27:15:08:ce:98:b3:ed:7f:ea:40:c9:6a:ba:20:1a:3d:01:
         93:b5:20:ca:d3:12:14:0e:88:03:ee:27:76:a8:7b:a5:93:80:
         95:9d:63:7d:03:d7:50:02:34:69:6e:9e:b7:3a:3b:e1:b8:d2:
         c8:ee:2c:72:77:ac:55:de:10:e2:f3:96:e5:e4:df:94:0d:e7:
         e7:89:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:07:00 2026 by rpki-client