Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/370d6fee-3b57-37a9-83dd-04d9ee7c6557.roa
File:                     370d6fee-3b57-37a9-83dd-04d9ee7c6557.roa (raw, json)
Hash identifier:          hLjGADOcdwYUVRkMrQWeFrsVnJuDaM5ZIWKI4ZFR6g8=
Subject key identifier:   95:4D:81:CB:02:50:EB:AB:02:F0:BE:6C:84:66:99:07:7A:84:11:74
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F3FAD259923DD315C8CDF9F00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/370d6fee-3b57-37a9-83dd-04d9ee7c6557.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        68.167.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:25:99:23:dd:31:5c:8c:df:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=f3ab85de-7f83-44de-abfc-ddc6d1454c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:68:3c:a8:a7:1a:b2:d9:de:43:46:85:fd:
                    77:c1:dd:22:f7:ce:7c:c2:e9:8f:8c:35:85:f3:30:
                    4d:19:d4:e1:76:9b:e5:4b:bf:cc:bb:ef:3e:81:3d:
                    ab:a6:88:2e:2f:25:4c:5d:ed:4b:d5:b6:4f:9d:d4:
                    2d:02:a9:e6:48:1a:6c:1a:2a:61:78:52:a6:ee:14:
                    79:41:a9:f1:cb:86:13:7f:fb:6a:b4:f5:22:ab:3e:
                    ab:a9:d6:57:ec:89:9e:15:a0:ca:01:a5:74:c9:2b:
                    ee:82:0b:0b:12:a0:2d:20:3a:7c:d0:f2:a0:32:06:
                    3d:05:5d:68:50:09:fc:f4:6f:ff:ee:fd:4b:7d:c4:
                    1b:59:9d:e5:7f:4d:59:a5:14:f0:e9:75:4b:6c:0f:
                    e8:b3:bc:62:ec:fa:7a:3f:8f:21:e0:95:c8:22:29:
                    75:a8:8a:4a:b6:b1:44:d9:d8:65:25:19:3a:79:a9:
                    50:ba:97:1b:71:7a:87:1e:a3:61:96:f7:4d:05:49:
                    23:7c:f6:c1:60:89:b4:6c:16:01:25:22:7c:1d:8e:
                    7d:3f:9b:cf:62:93:29:3f:49:59:b7:ef:97:6c:c2:
                    23:01:dc:c7:14:58:8f:90:83:3a:e2:8e:36:59:da:
                    12:75:e1:a4:e0:ad:96:f5:62:5b:bf:0d:6b:30:31:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:81:CB:02:50:EB:AB:02:F0:BE:6C:84:66:99:07:7A:84:11:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/370d6fee-3b57-37a9-83dd-04d9ee7c6557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:4c:cf:0b:2b:a1:1d:25:4a:81:20:d3:99:4d:28:12:14:
         6f:f6:0a:56:a6:cd:e9:df:67:6c:93:04:7b:77:de:97:8a:b6:
         bc:e3:b9:b5:33:32:fe:b8:fc:8e:43:b7:c9:28:93:95:31:99:
         68:2a:f7:03:27:99:8a:fd:34:88:a5:5e:75:55:c9:51:ff:67:
         7d:e0:40:c5:7d:fe:ab:6c:b4:f7:cd:be:eb:0d:0b:70:07:6d:
         a4:af:49:fa:ab:b6:12:2d:ba:77:2a:a7:bd:c4:32:d7:78:37:
         d0:26:8f:9e:ff:9e:fd:27:82:91:e7:a8:de:08:1b:22:19:2a:
         a8:40:05:06:fd:db:66:22:83:5a:74:9d:9b:ff:21:2c:74:06:
         a5:29:e7:e9:0c:97:12:83:72:38:4a:5e:c1:dc:e1:06:b5:62:
         f2:f3:6f:98:be:02:16:60:20:81:48:1a:4d:56:37:84:3c:87:
         20:e4:cb:b0:ad:21:78:51:cf:be:a7:14:2e:04:b2:bc:33:02:
         24:15:38:6e:ff:3c:94:dd:3d:8d:9c:13:ab:66:24:6f:28:a8:
         5f:87:a1:3e:60:a5:d8:13:f6:10:8b:7c:cf:8e:19:a8:2b:68:
         97:b8:3f:1c:82:3a:ef:93:33:7f:d3:b2:b9:a0:81:77:a4:31:
         f3:11:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:34:56 2026 by rpki-client