Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/def18bf2-1dba-3b6f-ae26-7d8faa21cadb.roa
File:                     def18bf2-1dba-3b6f-ae26-7d8faa21cadb.roa (raw, json)
Hash identifier:          PnVz6Kv2ExlH6ng46Lv7n2VwRecnwB+CzMDG6Bc01T0=
Subject key identifier:   A3:39:82:06:07:E5:6D:B6:F5:C5:4E:61:BD:CA:62:19:ED:42:45:16
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584D703FC21DE575CAB261718180
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/def18bf2-1dba-3b6f-ae26-7d8faa21cadb.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     198949
IP address blocks:        67.222.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:c2:1d:e5:75:ca:b2:61:71:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=fb5e287f-e4d6-4dc0-8d3a-eeba6a909e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:ac:35:29:1c:14:ae:eb:08:ac:00:2d:50:
                    57:f7:7f:47:f6:42:9c:76:20:5c:03:d5:65:4d:71:
                    b4:7c:7a:da:a2:39:cf:2b:85:8d:6d:77:7f:57:4a:
                    c0:a5:f1:27:a3:01:cd:e1:0e:12:2c:43:91:b1:80:
                    ff:57:03:3b:5b:e8:5f:3a:89:67:99:47:fe:9d:f3:
                    a9:e4:5e:e5:10:66:ca:6c:42:ce:1b:25:7a:91:e2:
                    ce:1d:de:a7:18:ae:d0:70:32:29:57:56:a0:5f:ec:
                    bf:75:7a:d4:a0:5f:6f:af:48:71:27:fc:7f:c7:33:
                    85:7b:ed:a8:e6:86:36:4f:d8:39:82:24:3a:55:c7:
                    b6:e4:be:f6:c0:28:47:71:ef:90:b2:25:01:98:ba:
                    94:a6:17:6d:6e:84:97:9b:ff:79:54:3f:da:e2:72:
                    c7:8d:11:aa:b2:da:00:91:f3:ca:26:d5:ec:f9:20:
                    da:ff:40:4b:c7:77:d1:4f:a1:15:f8:ac:05:34:e6:
                    9e:b0:a2:25:3d:e9:f1:1e:e3:ab:6f:3c:ce:8c:05:
                    6a:4c:6b:dc:84:24:50:ad:c1:9a:14:3d:80:29:d5:
                    fd:4e:9a:ac:e1:4c:af:47:8d:f3:99:6a:21:f3:9c:
                    a4:1d:9f:c0:72:c2:d5:f5:5d:4c:06:87:d6:f8:63:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:39:82:06:07:E5:6D:B6:F5:C5:4E:61:BD:CA:62:19:ED:42:45:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/def18bf2-1dba-3b6f-ae26-7d8faa21cadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.222.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:63:9b:25:53:28:75:35:08:45:fe:d3:09:28:95:58:90:da:
         6a:f0:9c:88:18:7f:4a:7f:be:31:27:50:ff:99:30:77:e4:76:
         55:5b:d6:03:e8:59:48:55:32:6d:be:8e:6d:a0:55:f1:18:b7:
         71:85:38:78:fb:02:91:81:84:a5:0e:fe:e8:31:ba:30:86:21:
         0b:fa:f5:05:90:5c:9e:ab:56:bf:35:55:69:d5:88:c5:7d:7a:
         39:a7:5a:5a:cc:ac:82:31:ec:38:22:b0:96:40:7f:d7:04:ba:
         be:9a:12:27:e6:64:73:ba:62:e3:98:0c:44:61:bc:47:a3:a8:
         b3:58:00:f7:31:5f:7d:ed:51:08:cc:72:30:6b:e2:2e:3d:a2:
         5f:ca:9f:67:76:c9:1a:8c:bd:c8:cf:d4:47:35:a4:de:70:1f:
         f1:85:54:b3:3c:c5:40:67:4b:ab:33:96:41:b4:40:d2:37:d1:
         6c:e0:7d:18:03:4a:69:8d:d8:62:32:db:86:e2:2e:2b:12:41:
         a0:7d:64:4d:32:24:92:dc:c1:9c:91:25:24:ab:05:04:e0:d4:
         03:36:db:9a:51:8d:a8:06:5d:7a:7a:4e:fa:a4:d2:9a:01:ea:
         c7:7f:38:06:64:9d:06:24:23:45:f9:c0:a1:66:24:72:bc:84:
         dc:33:52:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:18:59 2026 by rpki-client