Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa
File:                     1cec2629-402e-3ceb-8ccc-f217d66c3876.roa (raw, json)
Hash identifier:          oKFirzZYn4SOSFBCNbd3UlpDGrvhN/G8k5cf8akp4ig=
Subject key identifier:   6D:89:9A:8F:A8:AD:3E:DA:67:F7:BB:D5:CB:01:EF:83:8D:36:35:1B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6C6F739E7EEFB8322C7DBCC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     39521
IP address blocks:        68.165.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:73:9e:7e:ef:b8:32:2c:7d:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=15887632-e691-4ece-8de8-a778e6a30c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7b:ab:00:ce:c8:e3:1a:18:4f:d6:c9:d0:41:
                    ca:e9:95:19:6d:25:92:47:ba:e1:11:47:08:61:ca:
                    cc:9d:2f:22:22:64:c3:d1:8c:0a:1d:88:46:a0:e6:
                    81:41:79:51:3b:39:16:2e:79:7c:1f:32:14:ee:ab:
                    98:03:59:64:c1:0a:9e:14:54:d7:4a:41:0e:56:55:
                    8c:9a:d9:25:d1:68:3d:d7:7e:b1:6f:04:ab:88:ad:
                    80:1c:12:8e:7d:76:f8:8e:fa:e1:ec:44:cb:63:66:
                    c7:f8:ea:90:76:3f:16:2b:d9:e5:99:a6:00:b4:c3:
                    f8:1d:26:13:8f:b4:2f:39:42:62:07:d3:2c:9e:f5:
                    d8:db:f7:40:89:4c:ec:0a:a9:7b:d5:8f:c9:b7:9c:
                    22:80:8d:b6:94:3c:44:ee:49:e0:29:f8:a7:b9:88:
                    da:6c:4d:21:15:72:78:b3:fb:b1:c4:06:7c:63:67:
                    3c:64:8e:eb:7a:0b:3c:20:a5:8a:a1:0c:d9:4d:13:
                    44:8a:f8:67:f3:24:d8:44:5e:6b:d4:f7:ba:71:a7:
                    82:e6:77:2d:da:91:72:4b:12:3a:4c:46:e1:fe:87:
                    3e:d6:ba:59:39:7f:91:37:96:d2:20:06:2f:0b:2b:
                    28:77:a8:53:f9:25:55:66:c2:b4:ac:0b:eb:c5:31:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:89:9A:8F:A8:AD:3E:DA:67:F7:BB:D5:CB:01:EF:83:8D:36:35:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1cec2629-402e-3ceb-8ccc-f217d66c3876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:c5:d0:60:aa:f1:65:74:1e:25:6d:e9:7a:a2:4c:ed:a0:7e:
         c3:85:56:c1:fc:af:1c:24:ac:20:ee:92:30:3e:62:ab:f5:d0:
         c4:03:af:30:61:42:5c:14:1e:4a:03:03:47:3f:72:f3:5e:0b:
         2e:b4:93:96:c5:70:fc:a9:f3:9c:70:cc:45:c1:68:5d:fd:ee:
         5b:12:b2:65:00:72:12:3f:d3:f8:84:00:d2:1b:63:ef:7f:e2:
         c4:9b:c9:e4:fa:81:0e:f2:46:0a:a8:d3:95:04:fa:5c:96:85:
         82:c7:93:66:b7:3e:0e:8d:cb:a3:77:98:90:06:f7:e7:75:46:
         d7:0e:b5:f3:68:47:5b:6c:a9:af:99:5d:52:ed:da:64:a5:0b:
         0f:49:ae:64:bf:6b:28:13:af:8a:49:eb:00:bf:da:1d:55:b3:
         c4:94:a5:36:7d:9a:a5:65:f2:2c:26:f7:a6:87:fa:d3:9e:0f:
         58:7c:09:18:71:c8:40:d6:f8:59:f3:b1:28:8f:24:9f:49:a4:
         f9:ff:19:cd:82:02:49:57:63:2c:49:31:f8:d4:8d:59:9d:77:
         b4:7d:ad:d7:81:b9:f5:31:1c:ed:3e:f5:6c:55:79:d8:9e:87:
         99:58:61:e7:80:3f:37:16:b8:9f:5a:04:4b:f6:55:6b:cd:e9:
         62:41:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:31 2026 by rpki-client