Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e9e1045-1152-34e5-820c-91d47f4136cd.roa
File:                     2e9e1045-1152-34e5-820c-91d47f4136cd.roa (raw, json)
Hash identifier:          poUSXywgAApmdkumUXNs+g2xhwhXa6cQNGCD2RppbZo=
Subject key identifier:   B8:3B:A6:18:28:9A:7D:1F:36:C3:EB:F6:CD:90:0F:04:7B:81:78:F2
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D386A63897244B58ED655EA40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e9e1045-1152-34e5-820c-91d47f4136cd.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     54252
IP address blocks:        68.167.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:63:89:72:44:b5:8e:d6:55:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=691cc891-a888-4e37-b861-161c4f3ef03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:9f:05:b7:8b:c4:99:43:23:db:41:4d:b0:
                    43:06:5f:41:ce:9c:c0:bf:9a:eb:6f:47:73:af:c8:
                    d2:4e:94:47:e3:9c:b3:a5:70:e1:62:00:ff:97:67:
                    a6:c8:4f:59:21:c2:4d:75:d8:c1:02:6b:77:de:b8:
                    6e:35:4c:79:e5:60:70:75:5d:c6:1a:d6:6c:11:a0:
                    fd:1d:a1:99:cb:be:62:57:c0:c0:38:ff:b6:ad:56:
                    d3:b4:99:83:97:a0:67:c4:29:f8:2c:0e:55:62:93:
                    eb:96:16:38:b4:c0:c3:1a:73:64:db:41:f7:65:a5:
                    3c:c8:e7:d5:49:30:37:8c:a7:e6:cb:51:46:55:1e:
                    f5:31:5b:4f:06:16:cb:2b:57:c2:21:e7:82:4a:8a:
                    5e:82:ea:e9:cf:4b:10:6b:81:89:ac:18:54:29:ce:
                    91:67:f9:2c:5f:c7:90:1f:2d:ba:92:32:d7:8a:fe:
                    87:8a:71:bd:cb:bd:72:46:07:c2:8c:79:a1:31:5c:
                    8d:e6:d9:69:c5:44:55:44:a6:47:73:43:a8:99:aa:
                    fd:a9:83:8c:3d:f0:be:87:0a:a4:a7:dd:d2:bb:77:
                    9e:ef:50:99:5d:26:8a:0f:03:75:7a:27:8e:ce:be:
                    ca:f9:07:99:b3:02:d6:bd:d2:b9:c2:95:88:02:23:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:A6:18:28:9A:7D:1F:36:C3:EB:F6:CD:90:0F:04:7B:81:78:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2e9e1045-1152-34e5-820c-91d47f4136cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:8e:ea:1f:f9:21:7b:8f:b0:2b:2b:17:4f:18:c9:ff:4f:
         af:dc:10:9b:0c:a0:fc:4a:10:d0:35:d1:77:f0:94:0e:6d:44:
         e6:0c:60:7d:cf:a1:88:45:2a:2f:d7:e6:40:8c:f1:ab:da:9e:
         29:2e:af:04:ad:eb:6a:fb:21:38:4d:ab:53:b7:92:cc:f2:3e:
         86:99:93:d4:d0:7c:1d:f5:0b:9e:c2:b8:43:2e:4b:b6:75:78:
         e5:8e:77:de:3b:67:c9:fe:0c:ed:a8:8c:ba:df:fa:21:1e:38:
         18:08:2b:67:36:c6:89:35:f2:6a:0f:76:05:16:c9:2f:59:87:
         dd:b1:4f:45:cc:d7:af:13:2c:70:2a:bc:21:29:69:97:f3:13:
         b0:fc:40:38:4a:4b:31:21:74:fb:f6:57:26:44:a8:e3:29:e3:
         72:c3:24:b5:b2:53:f0:ee:82:a1:29:8a:a3:b1:55:28:41:5a:
         73:a9:a1:f6:c9:53:1f:c8:53:7d:13:b2:14:6b:0f:f5:3e:3f:
         5e:d3:51:41:5f:22:a9:c7:f9:72:47:04:1b:0b:ab:97:fc:8c:
         d7:91:ae:d5:61:ba:81:f0:f9:19:53:c7:d9:6d:a5:cf:68:56:
         92:9f:ba:7b:0e:0d:bc:6c:59:13:c6:a4:d3:5b:d1:fb:03:12:
         bc:5d:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:54 2026 by rpki-client