Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/1b6f6f69-b2a8-3b57-a5b5-6c143425322c.roa
File:                     1b6f6f69-b2a8-3b57-a5b5-6c143425322c.roa (raw, json)
Hash identifier:          n7owNEfzwsrJJQYuVddt4EnDnWKOOykuIjO3OUbkdis=
Subject key identifier:   6D:22:27:B2:9D:E6:D3:12:BA:34:53:8B:58:88:8C:95:4F:2F:77:10
Certificate issuer:       /CN=8d527330-a51a-45dd-aa15-5558c11c47df
Certificate serial:       010D0C9F4328584F852633A21838B925AF16B280
Authority key identifier: 7B:68:C3:99:6C:EA:8F:7E:EB:D8:FC:62:F5:B5:69:ED:4B:9F:13:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/1b6f6f69-b2a8-3b57-a5b5-6c143425322c.roa
Signing time:             Fri 16 Oct 2026 10:14:56 +0000
ROA not before:           Fri 16 Oct 2026 10:14:56 +0000
ROA not after:            Thu 14 Jan 2027 11:14:56 +0000
asID:                     35908
IP address blocks:        67.43.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/8d527330-a51a-45dd-aa15-5558c11c47df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/8d527330-a51a-45dd-aa15-5558c11c47df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:26:33:a2:18:38:b9:25:af:16:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d527330-a51a-45dd-aa15-5558c11c47df
        Validity
            Not Before: Oct 16 10:14:56 2026 GMT
            Not After : Jan 14 11:14:56 2027 GMT
        Subject: CN=77b292b3-219b-4031-b712-7322a75b7c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:bc:21:b5:32:3e:03:c3:1d:c9:cd:26:51:
                    61:00:88:3d:91:7c:88:89:79:e7:3f:89:ff:f8:d1:
                    74:9c:01:c6:bb:10:25:0b:d3:bd:87:fc:f2:25:17:
                    c6:fb:3f:c2:35:be:bd:a1:d3:c7:e8:5c:71:d2:31:
                    b4:c6:79:e3:b5:23:79:e0:ce:c6:8a:ad:d1:ce:3c:
                    d1:e4:2a:9e:7f:4a:a1:a9:0a:83:8b:0a:13:f6:14:
                    35:08:35:e2:37:c3:2f:84:27:53:21:79:a6:7e:84:
                    67:6e:24:24:38:35:74:00:f7:59:a9:27:43:20:c3:
                    dc:f8:22:e4:74:af:7c:0e:c2:1a:76:16:71:7c:53:
                    78:26:89:b6:df:bb:09:e6:a3:ae:cf:80:51:df:e5:
                    cb:54:d0:26:fd:bb:a3:e6:9f:a4:b9:f4:33:06:42:
                    91:24:f4:c2:2e:59:b0:45:55:ae:cf:b6:56:b3:8e:
                    28:45:90:da:4f:84:a3:36:14:54:e1:a5:cd:7a:06:
                    9f:24:62:61:4c:26:ad:13:0c:28:6c:ed:94:d3:9d:
                    0d:50:e7:ab:46:05:69:b3:7e:c8:1d:f6:bd:e6:26:
                    89:59:a9:2b:3b:6f:54:73:eb:56:0b:f5:a2:e1:77:
                    4b:61:9a:1c:9a:e1:b0:d9:51:15:a1:71:80:ee:df:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:22:27:B2:9D:E6:D3:12:BA:34:53:8B:58:88:8C:95:4F:2F:77:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/1b6f6f69-b2a8-3b57-a5b5-6c143425322c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/8d527330-a51a-45dd-aa15-5558c11c47df.crl

            X509v3 Authority Key Identifier:
                keyid:7B:68:C3:99:6C:EA:8F:7E:EB:D8:FC:62:F5:B5:69:ED:4B:9F:13:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:78:39:f2:3e:95:a6:ac:91:d3:d6:f3:17:13:84:81:09:
         4c:ee:37:aa:41:46:76:de:30:b4:0b:3f:a0:bd:a4:7a:f8:3b:
         44:af:4d:52:c1:c9:65:aa:db:ff:32:6d:1f:25:ec:83:59:5b:
         2a:d3:15:ba:62:6d:da:b5:1a:ae:59:d4:93:6c:e4:5f:78:28:
         6d:c9:6d:80:65:14:05:17:0d:52:d6:4c:94:10:28:10:54:8c:
         3f:a6:f1:6c:19:ef:3b:ac:33:5a:bb:0a:d9:25:13:c7:d6:63:
         9b:f8:91:6b:70:31:b1:bf:3b:b7:19:d1:37:2a:ac:ed:74:5a:
         a3:38:59:87:45:d1:31:ac:e6:ab:ee:0d:c9:d1:55:63:ee:02:
         ee:a4:7c:47:e8:7d:c0:a3:3e:47:86:49:03:e5:80:15:74:ac:
         ce:87:4b:b3:e0:35:1c:06:69:4e:0c:6b:15:fd:32:3e:db:21:
         f3:74:f4:a2:0e:48:d4:f5:35:72:03:cd:4c:29:82:d5:dc:c4:
         89:75:40:c6:d0:1b:dd:ac:bb:aa:f7:c7:60:9a:91:6b:66:07:
         b1:17:ab:a5:eb:ed:b8:b3:30:d3:73:cf:a0:3b:c3:d5:06:ae:
         ea:67:ae:72:8c:24:e5:b3:3d:57:cd:60:8f:0e:f8:b6:46:ce:
         43:1c:38:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:03:54 2026 by rpki-client