Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cec92982-a174-3c02-abd8-0e696f892661.roa
File:                     cec92982-a174-3c02-abd8-0e696f892661.roa (raw, json)
Hash identifier:          QBraaPyhsqGeelvbo2UL4LK4LEZDz365du16445nNmY=
Subject key identifier:   ED:11:97:4F:A1:B4:EE:AD:1F:E6:1A:9E:44:24:5C:A8:6F:61:FF:88
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584F6FC11CB4769BC95859667980
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cec92982-a174-3c02-abd8-0e696f892661.roa
Signing time:             Thu 08 Oct 2026 18:19:16 +0000
ROA not before:           Thu 08 Oct 2026 18:19:16 +0000
ROA not after:            Wed 06 Jan 2027 19:19:16 +0000
asID:                     29873
IP address blocks:        67.223.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:c1:1c:b4:76:9b:c9:58:59:66:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Oct  8 18:19:16 2026 GMT
            Not After : Jan  6 19:19:16 2027 GMT
        Subject: CN=4f940716-d437-4a03-b8e1-20843929dd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:8a:db:8b:06:bc:5a:e4:5a:33:a7:63:1f:
                    a1:64:ef:35:bf:dd:03:7f:75:28:4e:4d:4a:14:17:
                    0e:dc:e1:6e:58:80:15:e5:25:1a:43:4a:c3:d4:c0:
                    1a:2a:e8:6f:90:ae:91:cd:16:7e:aa:c7:60:bc:3f:
                    56:26:c3:5f:17:8e:2f:5a:65:07:f2:35:9b:2f:78:
                    f9:0e:11:29:e3:4b:cf:a9:c6:92:18:67:94:d1:89:
                    24:22:4e:12:d9:3d:b1:d3:00:1c:77:4b:3b:a1:0a:
                    b1:05:6f:07:cd:04:42:64:5c:d1:27:1d:b3:b3:2d:
                    6b:e0:df:7f:36:92:5c:0f:b1:08:8b:bb:f6:c3:07:
                    5a:c3:85:cb:be:6b:de:5b:b1:66:88:cf:8e:90:ff:
                    29:8c:7f:dc:d4:4b:74:4a:6e:54:04:4a:8d:7f:91:
                    52:c1:74:76:d9:f7:9a:04:61:c3:c5:d9:dc:9e:f2:
                    f2:b4:dd:42:92:e0:3a:43:85:05:e6:4a:e6:08:94:
                    e3:34:47:52:33:ee:d0:b1:5d:e3:10:8e:e7:3e:d9:
                    a5:6b:fe:48:d0:ac:c8:02:9a:f8:69:c9:21:76:b7:
                    92:b7:b7:9f:48:b0:45:4c:8b:89:95:5a:83:a4:13:
                    e4:e6:e8:64:6a:05:81:bc:2a:12:4f:1b:c1:cf:f5:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:11:97:4F:A1:B4:EE:AD:1F:E6:1A:9E:44:24:5C:A8:6F:61:FF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cec92982-a174-3c02-abd8-0e696f892661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:32:8f:8d:9d:f0:fc:71:85:a7:19:bc:55:e1:5e:87:3f:
         95:e3:bc:57:ed:2e:91:97:e0:7f:b9:37:72:cb:74:b0:b7:95:
         d8:16:7b:02:69:21:95:95:77:b5:fb:97:3f:05:d0:d9:ad:7d:
         69:6a:12:8f:4a:03:95:11:b0:26:c8:28:12:65:5e:ba:c0:05:
         a0:25:57:a1:fa:30:d9:d1:55:81:fa:ab:ee:41:16:7a:54:88:
         10:5d:45:8c:78:43:61:1c:98:05:62:bf:05:be:6a:3e:18:06:
         4a:ad:01:0c:89:c9:05:06:a9:6a:79:51:64:61:7a:76:c1:26:
         82:5b:62:4e:68:9d:49:ce:14:15:e6:9a:7c:2b:73:04:51:3f:
         b9:b9:c4:51:fc:85:6c:19:ac:19:b5:af:2e:4f:3c:43:d0:ca:
         32:88:4a:f3:3f:c7:38:14:36:26:32:80:95:c7:39:a6:20:90:
         2e:88:5a:dd:ca:e7:b5:36:f4:73:b7:91:1e:b7:9c:c4:78:57:
         d5:c1:c8:05:25:6c:2d:d8:ba:ec:05:5b:9f:d1:a4:c0:a8:83:
         ae:15:7e:cd:ac:db:fd:0d:ea:3b:ce:84:5a:09:e0:8c:99:04:
         da:15:15:ba:35:65:63:40:0b:54:88:ca:5a:8f:77:96:3e:ac:
         cb:d5:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:55 2026 by rpki-client