Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
File:                     dd732f92-179e-33d5-9832-59f3b948cc7c.roa (raw, json)
Hash identifier:          FoSfRKluewKCXRjdp6KQQBVa34ZJcQI4MkQnu4pcsks=
Subject key identifier:   55:47:C7:72:8E:F1:89:19:F9:56:9E:06:36:3B:3D:BD:8B:08:B5:13
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EA17A7E1C5ACC8092209643C0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     31898
IP address blocks:        67.20.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:7e:1c:5a:cc:80:92:20:96:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=a7fd4e32-894b-4e20-b42d-a4c6fc983b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:e1:cd:03:76:e8:79:a5:51:cf:2a:79:0a:
                    14:31:27:2f:86:78:64:78:bb:0b:98:7c:a8:8a:c4:
                    a6:6c:71:9f:23:d0:b9:48:26:0a:54:9d:18:ee:17:
                    9f:0f:3c:a9:e3:9b:c9:d7:cb:63:6a:3e:51:53:95:
                    74:44:be:c8:9f:37:44:35:13:8e:4c:a7:07:93:f9:
                    dd:f1:b6:76:de:89:a7:c4:eb:3a:af:26:a1:1d:eb:
                    98:2e:fb:32:10:79:46:7d:f9:a8:bc:3a:91:5f:f2:
                    11:24:1e:a1:cf:5c:bb:28:a2:a3:c8:75:b9:98:f1:
                    c7:9f:ca:86:da:78:e3:e6:96:9f:46:09:cd:12:67:
                    79:e9:1c:16:8f:a7:90:87:43:ec:b1:ae:03:f8:cd:
                    da:09:8a:30:27:18:e1:6f:fb:3d:5d:c0:04:b6:8e:
                    da:de:02:1b:e6:0d:6a:00:90:e6:1e:89:43:bb:ff:
                    be:24:a9:5d:89:3d:a9:a8:3b:08:2f:ee:e3:3a:d6:
                    f5:ba:f3:a7:b1:7e:e4:0c:0a:73:86:ab:27:f8:35:
                    19:cb:f6:d7:76:2b:8f:6a:7f:b6:38:3c:9c:72:8c:
                    93:93:97:ab:8a:8f:0f:13:a0:8d:de:8b:e8:a5:66:
                    e0:9f:80:8b:c8:cc:98:73:06:f9:75:6a:07:9a:ab:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:47:C7:72:8E:F1:89:19:F9:56:9E:06:36:3B:3D:BD:8B:08:B5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.20.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c0:76:7f:73:3f:f9:f7:8f:43:46:05:f3:0b:60:4e:a1:65:
         a1:a1:0c:89:c9:a0:34:c2:2c:94:30:73:bd:10:f5:15:ee:32:
         91:90:82:37:5c:e4:4e:4b:bf:8b:be:4d:fc:8f:48:c3:05:7d:
         f5:11:6b:e4:cb:3f:ac:26:ec:21:51:23:77:36:d1:ea:70:be:
         56:70:b3:35:5b:09:f4:33:03:c0:84:65:95:f8:f3:3b:69:53:
         0c:1b:52:fa:b4:a9:cf:cc:ca:30:9c:c5:d6:61:af:f7:43:9b:
         ee:f1:84:63:02:48:41:c4:6f:7d:e5:21:6b:0e:c9:8d:d7:58:
         4f:51:80:cf:70:5c:d4:85:e6:ad:b5:dd:be:f0:cb:41:ae:d8:
         cc:8e:c9:4f:90:69:5e:b3:eb:9b:eb:d6:4d:00:54:89:98:22:
         99:bf:1c:68:5a:a7:c3:58:22:fc:b8:4d:b7:52:d6:7d:30:44:
         c2:06:69:bc:03:ba:0a:fe:77:18:5e:a7:ef:3f:05:f1:42:0b:
         86:5f:ba:4a:1a:5f:0d:20:e3:5d:6a:91:80:92:e9:10:a9:c2:
         9a:73:d2:09:1b:21:e3:ab:c6:fd:4f:29:d2:d3:54:18:3b:76:
         9d:de:0b:08:f9:0f:0f:c6:22:ce:a1:d5:38:82:48:28:a4:ab:
         fe:fd:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:10:49 2026 by rpki-client