Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cbe2911-5fbd-385e-8d6e-50d9bcc449d6.roa
File:                     4cbe2911-5fbd-385e-8d6e-50d9bcc449d6.roa (raw, json)
Hash identifier:          GBSxCxtNT2VsGmuDaySZI+AKCrKHHEZI5YltVybKIfY=
Subject key identifier:   60:44:DE:AE:3B:67:76:C8:EC:7C:F9:2A:82:01:FA:D3:B1:40:03:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C2419EDC1C3A7D3C7EE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cbe2911-5fbd-385e-8d6e-50d9bcc449d6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        67.167.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:24:19:ed:c1:c3:a7:d3:c7:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c82a5d17-8c1f-421f-a819-4b6a87a9fbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:49:64:a3:8c:47:f8:df:83:8b:08:96:8e:9f:
                    d6:e9:b6:64:7c:87:a9:6c:1f:11:03:7b:e7:f3:f9:
                    48:8c:66:25:98:bc:27:59:2f:df:fa:c6:87:44:37:
                    70:58:c8:05:af:78:87:58:6e:93:fb:25:6e:81:87:
                    5e:3a:89:96:92:2b:86:9e:a8:0a:f5:5c:a3:55:f9:
                    03:55:ec:42:be:75:20:49:98:5c:6c:cf:f8:b0:47:
                    f6:7f:04:26:7d:f0:c7:87:6d:76:b4:11:fa:11:82:
                    96:74:60:40:58:30:fc:cc:bd:1d:b0:b1:26:68:93:
                    e4:e1:3e:dc:dc:51:ea:73:42:e0:d1:3f:cb:6b:05:
                    ba:f8:39:a9:0d:08:27:98:c6:bb:2e:19:25:e2:59:
                    a9:46:50:98:93:23:0c:64:56:a1:92:fc:18:d6:41:
                    71:49:d5:15:81:3a:89:10:40:d0:b3:cf:aa:d1:3e:
                    79:da:75:ae:17:77:89:e8:fe:bb:92:bd:56:4e:56:
                    0a:3f:96:af:4b:6e:f7:a2:f6:9c:87:bb:39:c2:8a:
                    ba:4c:74:75:2d:1c:58:2c:23:0a:d8:c2:91:41:3b:
                    8e:4e:cc:1a:7c:0c:0b:29:5f:44:9d:ae:7b:0a:01:
                    0e:96:84:6d:53:52:f3:02:a9:4d:a0:5d:89:28:18:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:44:DE:AE:3B:67:76:C8:EC:7C:F9:2A:82:01:FA:D3:B1:40:03:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cbe2911-5fbd-385e-8d6e-50d9bcc449d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.167.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:62:20:03:3d:b2:98:ce:14:b9:18:9d:3b:ad:bd:11:73:b9:
         e8:27:ca:42:50:87:4c:d9:63:66:36:8d:8b:da:7f:ac:c2:37:
         c1:a6:c5:4f:d2:f9:f4:21:23:f7:96:2b:29:d8:0f:c7:58:24:
         72:ac:75:7c:14:7f:44:28:43:11:94:9e:3f:01:cd:d4:05:04:
         42:f8:d0:de:e3:23:15:f9:56:cb:a8:5a:e0:38:cd:de:11:26:
         3e:5d:4c:dc:70:c7:ae:22:35:c6:0f:6c:ca:7b:b6:eb:07:9c:
         b1:4a:c3:e3:91:7e:22:40:44:51:9a:21:6d:1c:9d:e3:39:44:
         16:ea:ac:96:0f:27:01:99:b3:cb:b6:27:be:69:bb:4e:89:02:
         45:90:3f:a0:c1:28:4f:9f:af:d2:f3:09:12:ff:18:f0:4c:56:
         6b:5c:be:85:41:91:e6:1e:79:5e:65:f0:aa:eb:31:f7:07:e5:
         b6:9b:fc:74:0c:d8:a3:6f:22:90:b7:0c:f9:ca:86:af:79:4a:
         87:b7:28:65:0d:81:6b:c2:b2:44:d1:a4:c4:ff:9d:50:e1:23:
         26:80:c7:51:3e:2f:f3:ed:c8:a5:73:50:09:39:be:93:27:36:
         62:a0:06:c7:ff:f2:be:ea:c9:a5:db:ab:fb:26:b1:46:d6:3c:
         b1:c6:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:14:07 2026 by rpki-client