Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6897cee8-354f-3b20-aa5b-d7fd32cb30a5.roa
File:                     6897cee8-354f-3b20-aa5b-d7fd32cb30a5.roa (raw, json)
Hash identifier:          LDYehdhw5lHit7t3K+EhdhMcwe2kY2pUDnbXdWxQUF0=
Subject key identifier:   2B:89:9E:D7:73:D5:70:A7:17:3A:BC:3C:87:B6:13:2D:AA:B7:2D:82
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D300A526B7EE5BC6F24B3FBC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6897cee8-354f-3b20-aa5b-d7fd32cb30a5.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        68.167.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:52:6b:7e:e5:bc:6f:24:b3:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=70fdd85c-4846-424f-a341-184c66743db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:ae:be:28:e5:57:23:6c:f1:49:a8:df:3d:
                    b1:42:23:d6:c0:1f:cf:14:55:62:c7:e0:73:08:f7:
                    a9:11:ac:3c:95:48:a6:51:11:cb:ea:a4:b1:2a:44:
                    55:50:39:f8:59:87:c4:5d:55:96:20:f9:97:20:bf:
                    93:c9:4b:61:01:a5:b3:8d:dc:df:2e:8d:09:87:1b:
                    1f:1b:c5:37:fa:9d:ff:d4:c1:0b:78:f0:23:5b:66:
                    27:ef:13:37:6e:79:62:75:1c:e2:53:e2:91:94:80:
                    ab:87:56:41:fe:5b:0f:aa:83:57:6a:58:cd:99:9f:
                    e8:75:3c:ea:5c:4e:68:47:06:e1:11:23:69:7d:7d:
                    77:57:9a:05:ad:92:df:1b:4a:12:81:0c:af:03:f2:
                    3a:8f:0b:ed:c0:3d:86:59:0b:ed:06:04:78:f4:4e:
                    95:bd:d6:bf:60:e6:7d:cf:ba:93:b9:e3:cf:5a:36:
                    ac:12:77:96:00:8d:9f:f2:ec:b3:01:ac:97:4d:74:
                    37:3a:25:7b:25:47:d8:92:f5:ea:90:cb:5e:2c:2c:
                    43:2e:9f:fd:c5:e4:be:2a:c1:fe:69:21:f0:71:8d:
                    ef:06:47:9e:dc:5f:4c:44:0a:f5:91:b1:10:8b:5f:
                    98:4c:79:c7:09:fb:22:64:36:66:76:11:01:c8:ce:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:9E:D7:73:D5:70:A7:17:3A:BC:3C:87:B6:13:2D:AA:B7:2D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6897cee8-354f-3b20-aa5b-d7fd32cb30a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:da:f0:34:11:3d:73:54:cf:80:76:6b:f6:ab:17:9f:20:34:
         c7:a6:5b:43:3a:47:66:a6:5f:c6:7f:c6:d7:b6:3d:1a:2a:1a:
         46:84:29:0f:71:3c:44:9f:3f:da:ad:fd:fc:0a:57:d9:69:b6:
         b8:e6:86:23:fb:fa:c7:0b:29:f9:53:62:36:2f:60:1f:19:3a:
         88:76:6d:74:95:4f:60:21:cf:c9:30:33:01:51:41:b1:b6:21:
         b8:f5:3e:88:14:3b:e4:15:76:fd:8c:58:42:ce:05:c6:ba:b3:
         2f:5b:18:95:da:1f:18:4d:8c:ba:2c:43:6c:13:1a:b7:3f:1a:
         a5:09:c1:09:aa:61:d8:aa:fb:30:c1:ac:79:fa:8b:a9:02:f5:
         ab:c6:6b:8c:6e:b1:aa:90:db:98:73:f3:ea:09:40:a8:b9:18:
         07:36:cb:1b:10:2b:29:cb:5c:55:9a:b9:7d:5a:2a:0b:0b:08:
         5a:29:91:3e:9a:4c:a1:ff:38:07:88:5d:48:e7:3c:db:0a:f5:
         7c:27:32:a8:01:54:8b:c7:c5:ff:1b:46:c4:69:39:6d:55:07:
         70:25:11:8d:81:6a:06:35:3f:c1:30:a1:75:4c:a1:4d:45:8e:
         92:6a:61:40:74:b5:f4:8b:8b:01:f1:57:d6:2a:97:5d:ac:96:
         60:b9:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:11 2026 by rpki-client