Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa
File:                     0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa (raw, json)
Hash identifier:          UEiC5tCOFjUBpTpXFiM+LAu1rF9kkywmgU67zEjW24U=
Subject key identifier:   12:5E:E2:6C:37:38:0E:81:FB:1E:A6:21:7F:03:1E:CB:A8:C0:9E:61
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584EB8471B78458FF9FDB0DE3480
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     63062
IP address blocks:        67.44.0.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:1b:78:45:8f:f9:fd:b0:de:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=a9f48025-d1f8-436b-858a-da127bef812b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:20:f9:67:2c:a2:ee:64:de:f1:e0:e8:c4:
                    d3:9b:07:b9:e7:c7:23:fe:aa:fd:35:7f:86:4c:30:
                    02:02:82:3e:01:78:24:54:0c:9a:ba:fc:62:08:01:
                    41:5d:2d:41:f3:ee:9d:b5:6b:d4:ab:9a:ba:e4:2c:
                    f6:67:fa:32:6e:57:d2:dd:b9:e3:e6:2f:14:96:56:
                    35:a1:09:f0:b6:d8:7a:c3:31:5a:11:95:0f:db:be:
                    14:e3:96:dc:df:37:0c:3a:72:34:72:e5:0a:c7:75:
                    c7:40:4d:ca:c1:5e:b6:57:24:d5:1f:87:d3:ce:b2:
                    8a:fa:d3:55:70:47:38:52:92:85:91:71:0f:2d:88:
                    56:55:44:90:78:29:88:b2:d7:bd:62:03:e1:fb:d9:
                    71:18:f9:d6:00:b4:8a:59:1e:de:48:79:03:c3:7b:
                    76:84:82:8d:ab:a7:b3:e5:d8:e6:c5:d8:69:f3:f8:
                    9c:ce:cf:41:5a:e1:47:a5:d9:ea:df:4f:5a:98:a0:
                    7b:b0:e3:ff:88:b4:1c:b3:bd:e1:6d:04:cd:a3:a6:
                    96:c6:94:71:79:06:8d:f5:fd:cc:7b:24:d5:19:1c:
                    80:a9:67:b2:1b:c3:01:74:8a:79:af:ba:9a:65:9e:
                    e7:2e:21:d3:5a:ba:99:e8:3b:fe:9a:dd:bb:24:bc:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5E:E2:6C:37:38:0E:81:FB:1E:A6:21:7F:03:1E:CB:A8:C0:9E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1d:f1:19:c9:a0:e3:37:d2:02:9d:e2:f0:15:be:04:4e:3c:
         b3:43:ad:98:8d:a1:ba:90:23:cb:db:a1:05:ce:ce:f5:66:eb:
         a2:2b:8b:ac:e3:da:ed:50:1f:b2:6c:92:e2:df:24:af:9a:91:
         d3:c5:ab:92:65:41:fb:94:90:c1:66:3b:81:07:fd:45:5e:9a:
         10:0d:42:87:a2:e4:20:9f:64:e4:b8:08:21:84:d0:e8:10:da:
         d9:94:cd:46:0e:14:d8:a5:ba:d5:f8:9d:f2:af:02:b9:72:60:
         0e:ee:4a:09:2a:1f:12:f4:6e:4e:bc:bc:bd:cd:02:98:75:0f:
         8c:f6:26:b5:c5:61:9e:da:1b:bb:ea:14:60:d2:8a:a4:cf:80:
         a6:b8:a9:02:5a:12:d2:99:33:3b:2a:78:03:7f:3a:22:d7:ac:
         d6:81:84:f1:0b:fc:4e:24:0c:06:f8:c5:78:74:d8:b9:b1:14:
         56:fc:2d:dd:82:21:2f:d6:ce:82:af:d0:f4:30:72:e9:ac:1a:
         a4:44:9c:8a:60:25:78:84:91:db:5d:d3:20:61:72:11:64:41:
         0d:67:65:de:7f:58:e8:63:16:0d:e5:0b:0b:00:2a:23:ae:7f:
         c3:55:28:97:e1:6c:be:8c:3c:4b:9c:17:b3:c2:1b:18:e4:de:
         93:d7:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 12:59:11 2026 by rpki-client