Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa
File:                     322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa (raw, json)
Hash identifier:          gl0r9EBVRXy3PtcDXESVloJ9hmnCRh8s0tcmswVMB5Q=
Subject key identifier:   4E:14:5E:8D:AD:97:2E:F6:4E:5C:E0:42:05:9D:31:B4:CC:BF:6A:50
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79D6F0CC50A92F5F5328760
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        67.54.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:6f:0c:c5:0a:92:f5:f5:32:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7115b4db-83de-483e-9e7f-f5e03b0c7402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:b1:20:f2:ba:59:8a:b1:85:fc:86:ac:8e:
                    c1:78:53:6f:96:95:f0:b8:d2:87:c8:f2:e7:c1:e1:
                    5e:2c:01:06:3c:79:65:20:df:ea:8f:6b:f0:b9:26:
                    a1:9e:4d:3b:22:01:fc:8d:04:04:2e:dd:14:0f:11:
                    35:a0:e7:f2:67:8f:3c:a7:36:3b:55:e9:af:bd:5f:
                    de:72:db:b6:32:40:06:d4:d5:2e:1a:da:18:27:f4:
                    3d:19:1e:39:3a:8c:a3:76:56:b2:ee:95:3f:a4:bc:
                    7a:01:80:15:ba:52:74:07:e3:bd:6f:a8:f9:a6:c5:
                    cd:0d:8c:37:76:68:f0:2c:45:5e:6e:fb:73:b8:63:
                    4a:c1:c7:ef:13:1a:50:cf:d6:4a:56:7f:dd:5e:b3:
                    7f:74:1b:13:ff:4b:6c:f8:14:23:3e:6c:97:bc:c9:
                    5c:ed:9f:0f:9d:6b:d1:a1:8d:e6:44:40:7f:e3:7e:
                    ca:de:f9:29:e2:48:4c:d1:c7:5d:cb:63:1c:1b:92:
                    60:4e:17:2a:19:63:88:16:7a:12:8b:69:e6:5c:87:
                    08:c3:58:5b:1d:f7:9f:32:ed:3e:94:47:ca:e4:b5:
                    8f:ca:b1:d4:f3:48:50:6b:81:db:91:82:73:ba:ce:
                    67:87:f5:d3:02:fa:77:c8:28:f0:e4:46:47:0d:f1:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:14:5E:8D:AD:97:2E:F6:4E:5C:E0:42:05:9D:31:B4:CC:BF:6A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:2d:ca:4d:47:0c:46:d2:ee:80:f8:a5:c0:31:c5:61:d1:
         3b:1b:8d:38:58:44:7e:1e:2b:d2:3e:d6:00:6c:82:65:08:0a:
         0e:77:34:85:04:a8:1a:92:64:a7:41:43:90:f1:c3:29:6a:f4:
         31:9e:ec:16:23:a4:24:03:b9:fc:4b:72:72:37:13:cf:6a:b4:
         a9:5e:1f:3a:21:8f:23:11:36:6c:19:76:7c:d3:6f:24:9a:e8:
         34:49:3e:52:5b:cf:d2:5d:15:40:c2:4c:b0:3a:ac:60:c4:47:
         11:2e:82:57:ea:26:6a:c8:fe:07:25:d9:79:bb:1c:45:39:78:
         11:68:77:be:a3:dd:85:89:15:2f:cb:a2:7a:1d:c1:c8:d9:e8:
         9d:da:9e:6c:ac:7f:fe:90:14:24:ae:a2:24:45:f2:51:72:7b:
         f6:61:3a:83:0c:52:e0:8c:bc:ce:fd:a3:48:7c:51:f9:52:b2:
         b4:be:b9:29:78:64:0d:a3:12:db:fb:4f:a6:6d:be:93:97:d2:
         3f:35:c3:8e:8b:c5:e7:e8:65:b9:4e:d6:8f:2c:6e:4c:97:24:
         62:b2:88:ac:91:ab:bd:30:14:fc:8b:79:40:ea:8b:47:ee:c3:
         80:bf:11:e8:ec:83:46:69:52:18:40:05:7a:9d:97:75:ca:ce:
         5d:46:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:53:08 2026 by rpki-client