Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f93f5364-d9ec-35c8-8809-a09f39a0c71a.roa
File:                     f93f5364-d9ec-35c8-8809-a09f39a0c71a.roa (raw, json)
Hash identifier:          KL2kkX3lAHjtu5SByXVgnw9te35QX8i/viwUSiIP3F8=
Subject key identifier:   AB:66:76:78:5E:BC:00:0D:47:AB:DB:B1:2A:AA:22:0F:A3:2A:16:A1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F990308433068A1C8E1847400
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f93f5364-d9ec-35c8-8809-a09f39a0c71a.roa
Signing time:             Fri 23 Oct 2026 13:00:12 +0000
ROA not before:           Fri 23 Oct 2026 13:00:12 +0000
ROA not after:            Thu 21 Jan 2027 14:00:12 +0000
asID:                     1299
IP address blocks:        68.164.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:03:08:43:30:68:a1:c8:e1:84:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 23 13:00:12 2026 GMT
            Not After : Jan 21 14:00:12 2027 GMT
        Subject: CN=37c5cbcc-baf7-45ff-bf43-85595c905a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9c:3f:dc:70:6b:21:fe:da:f3:87:2c:90:ef:
                    55:b3:96:a7:aa:f1:24:e4:03:2b:2a:b7:8d:c7:92:
                    e0:29:6c:d0:8e:d3:ec:49:2e:9c:19:02:2a:6f:a4:
                    90:bd:e3:e3:98:26:f1:55:0e:2e:60:44:bc:4d:57:
                    61:98:d9:17:6b:f7:d6:4e:40:e8:f3:0e:c7:d2:6f:
                    5e:89:58:16:6c:5d:d3:4f:6b:b0:4a:f5:1b:b3:44:
                    0c:77:f3:20:f6:cf:47:f8:70:f4:37:af:7f:82:01:
                    77:ac:df:e9:78:d8:ea:34:5e:3f:4f:cb:77:df:b8:
                    25:95:6c:b1:2d:63:e5:bf:63:8b:dd:46:8c:f5:d3:
                    c5:70:1a:9d:d7:95:4c:18:07:71:c2:04:e8:ac:33:
                    43:30:50:37:8c:37:4e:aa:0d:84:87:f0:49:40:eb:
                    71:de:aa:96:73:d4:a4:e7:bd:46:01:5a:11:b5:e4:
                    8a:cb:dc:ec:90:05:1c:95:ce:1d:06:5e:c7:93:ca:
                    87:1e:62:f9:b7:a3:a8:08:af:78:ca:6b:1c:25:c3:
                    14:b6:4a:1f:ae:ad:5b:1b:4a:1d:c5:33:d6:cb:ba:
                    0d:94:68:97:bc:cd:2e:ec:5b:31:86:8b:98:a9:78:
                    04:8a:4f:29:ca:0f:07:ce:a7:86:99:04:79:95:ad:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:66:76:78:5E:BC:00:0D:47:AB:DB:B1:2A:AA:22:0F:A3:2A:16:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f93f5364-d9ec-35c8-8809-a09f39a0c71a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.164.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:e4:c9:3c:25:67:52:f5:51:98:d0:9b:e9:8f:e4:2e:83:
         8e:9b:bb:24:64:7f:47:f3:b5:e1:9b:13:68:83:04:7a:c4:d9:
         d9:ef:41:e9:b3:ff:a2:17:91:5e:bd:1d:f8:34:df:aa:0a:65:
         53:e8:e0:0c:d3:ef:fb:61:b5:e3:c6:cf:fb:ab:f1:f7:ba:8d:
         48:d5:6e:32:81:15:17:ed:45:26:57:8d:0a:93:fc:df:93:82:
         aa:80:e2:34:ba:cc:60:80:46:45:27:8a:6c:29:37:76:32:c3:
         3e:fc:22:c9:5f:5d:23:86:66:e1:95:47:4e:b1:f3:9b:ee:f1:
         33:b5:87:46:98:7e:08:89:1d:1b:f8:a9:41:c1:59:22:d7:a2:
         72:6c:0b:80:ed:e8:13:35:a5:15:d3:38:99:0f:80:b9:c9:6e:
         58:c6:8b:4c:38:72:f9:4c:45:5b:eb:1d:d1:24:5b:bd:51:f8:
         8c:2c:6e:54:10:e6:3c:0f:9c:a2:bc:6f:6b:3c:58:69:22:03:
         ce:51:e7:f8:50:1c:1a:b2:f1:5b:7a:06:bf:6f:2d:96:6f:99:
         14:e6:70:cf:56:6c:7f:83:81:4d:3c:f5:e4:ff:7b:49:b0:c4:
         9f:c9:87:e8:56:f2:17:63:18:83:52:3d:d5:74:26:23:b8:76:
         fb:12:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:17:42 2026 by rpki-client